Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
File:                     vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json)
Hash identifier:          bsNsBfE0DZdwf8AKq3CTqIeuvhsVT+1bltYGBs/8leQ=
Subject key identifier:   CD:4E:B0:E9:F4:0E:BA:58:AD:A7:D9:07:7E:F4:E9:BB:1D:32:1A:54
Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
Certificate issuer:       /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Certificate serial:       019D382EC29C5AB1E4661CE2AFCE92D80B14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
Manifest number:          0550
Signing time:             Sun 29 Mar 2026 06:01:21 +0000
Manifest this update:     Sun 29 Mar 2026 06:01:21 +0000
Manifest next update:     Mon 30 Mar 2026 06:01:21 +0000
Files and hashes:         1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: gMNw3HZ+DmNKMJ+Clcg1uco77w6ab7F8/nvxUIc2xJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:c2:9c:5a:b1:e4:66:1c:e2:af:ce:92:d8:0b:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
        Validity
            Not Before: Mar 29 06:01:21 2026 GMT
            Not After : Mar 30 06:01:21 2026 GMT
        Subject: CN=cd4eb0e9f40eba58ada7d9077ef4e9bb1d321a54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fa:06:b8:c9:c0:4b:3f:5c:07:80:a2:79:6d:
                    8f:d3:f9:a7:d9:1c:da:ae:89:f9:02:6b:9d:b6:ff:
                    01:63:cb:52:15:3b:fe:35:8d:53:a3:89:4c:95:47:
                    d8:1c:18:8b:44:c6:3f:5d:64:b3:4c:32:59:8f:63:
                    8b:03:1f:52:22:10:74:29:09:24:e9:bc:56:ec:b4:
                    cf:2f:a1:45:3b:85:e6:fa:2b:9c:63:af:93:5d:95:
                    7d:3f:20:02:9d:da:75:d7:69:83:f0:b4:63:f8:83:
                    10:bb:1e:ce:9c:9a:40:96:51:75:d4:ae:4e:a4:ee:
                    df:96:e9:ce:a1:bb:3d:49:40:0c:85:5b:51:9f:80:
                    8d:de:1e:a7:94:2e:ec:2f:76:0f:6e:4f:be:74:8b:
                    07:ee:85:78:81:34:92:2a:92:85:6d:78:49:ad:fa:
                    8e:e0:c6:83:1e:87:16:18:d0:ba:db:c8:be:d3:2c:
                    0d:09:f5:9d:ee:95:0c:bc:d0:73:0a:e5:f0:37:2e:
                    28:6c:1e:3a:70:cc:93:62:8b:66:e8:15:1a:77:0a:
                    27:3b:1b:dc:5b:7a:6f:0e:a5:15:d8:2b:ba:27:24:
                    d2:27:71:03:53:07:4e:6f:97:b9:67:1b:42:a5:dd:
                    fa:cc:43:d5:77:e1:af:d5:0d:01:ed:ad:68:e8:1e:
                    23:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4E:B0:E9:F4:0E:BA:58:AD:A7:D9:07:7E:F4:E9:BB:1D:32:1A:54
            X509v3 Authority Key Identifier:
                keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:7d:15:0c:6f:b4:d2:9d:bd:d2:76:96:4d:90:9d:21:97:88:
         94:5a:e5:6b:32:1e:aa:e5:25:f2:bd:3f:fa:10:0f:fc:9c:aa:
         b2:a4:ba:4f:18:3b:83:da:b7:5a:02:67:8a:34:c9:63:dc:ad:
         22:63:f3:2c:c6:67:2f:36:8b:fa:ff:72:d1:58:45:b4:c8:f3:
         fa:58:49:57:74:fb:28:21:b2:2d:dc:9b:38:a4:4b:89:1a:2c:
         91:51:54:0f:35:4a:55:f7:05:0a:f0:3e:66:45:13:68:46:c0:
         ad:27:ee:ec:8c:e8:46:6d:51:e0:93:1a:be:52:de:67:59:6a:
         ff:3f:3c:1c:af:ef:19:05:85:c0:18:da:e3:57:ef:f1:48:bc:
         24:39:56:84:b0:4e:7d:a7:c7:93:47:df:b3:74:a9:6a:97:7f:
         1d:ec:30:8d:87:56:c6:d3:f3:03:47:fa:2d:95:66:0a:9c:0b:
         29:95:ca:29:74:55:60:ad:bf:48:66:8b:85:07:3e:dd:ab:80:
         8b:13:91:07:bd:e3:3c:71:33:62:83:c2:bc:9f:83:18:86:71:
         9e:41:ba:3f:c9:0f:63:36:42:61:ad:e7:61:33:e4:65:a5:a9:
         4a:c1:79:d8:97:3c:44:19:6b:ea:4f:17:dd:7f:2b:79:de:02:
         68:9d:43:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:46:23 2026 by rpki-client