Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
File:                     vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft (raw, json)
Hash identifier:          Q4Npo982aXIHJ4xVLgVWTeUHAFNxFgwcLhVEsqrsg1Y=
Subject key identifier:   3C:B4:B6:4B:8E:12:08:39:E6:69:61:79:59:F2:7A:1B:78:D8:29:6C
Authority key identifier: BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB
Certificate issuer:       /CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
Certificate serial:       019E7C320C09C45B0080B2126E01F2D2F922
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
Manifest number:          05F6
Signing time:             Sun 31 May 2026 04:01:55 +0000
Manifest this update:     Sun 31 May 2026 04:01:55 +0000
Manifest next update:     Mon 01 Jun 2026 04:01:55 +0000
Files and hashes:         1: MimNpPF1NpFCzTvTXBO-vEirUeo.roa (hash: Cfcmv6qFXmI9g8mEJMeMD/q4hNdsyPIjy3Mzgg/Jq3k=)
                          2: vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl (hash: kPJi1nRUV0ZPn4/VAbFUjjqJki0Ctnh560i+u0SZgEM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 01 Jun 2026 04:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:7c:32:0c:09:c4:5b:00:80:b2:12:6e:01:f2:d2:f9:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7c79e9a21db26bd6ae0750276db1b0afa7ecdb
        Validity
            Not Before: May 31 04:01:55 2026 GMT
            Not After : Jun  1 04:01:55 2026 GMT
        Subject: CN=3cb4b64b8e120839e669617959f27a1b78d8296c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:53:f1:8f:14:2c:0e:04:89:3f:08:16:22:38:
                    ab:d5:69:1a:e6:5d:5f:58:b4:8a:ab:83:fd:bc:79:
                    99:4b:bd:22:17:d3:8c:9b:97:04:7e:a0:4f:d3:4e:
                    24:d7:a3:0d:de:30:ad:da:f4:d5:10:39:1f:2e:50:
                    f4:9d:a6:7b:f3:4f:9d:27:2f:28:11:92:54:56:8a:
                    93:28:5e:56:b0:9d:52:69:ef:33:10:c6:46:ac:5e:
                    27:e1:b1:89:64:9c:67:0d:42:0d:76:63:42:2d:8e:
                    d0:16:bd:ed:a2:18:79:2b:66:3f:41:e5:21:0f:6d:
                    38:4b:ed:94:8b:c2:dd:85:c4:df:ac:39:3d:71:69:
                    28:05:3c:e2:72:02:1f:5c:1f:44:6d:d5:f4:e7:0d:
                    2a:23:d8:e5:42:78:4f:77:cb:03:25:36:f5:c0:f1:
                    1b:b0:36:00:3b:96:50:25:09:ec:a0:12:3c:c5:2b:
                    4f:4c:ad:ef:c0:60:39:d4:d8:12:26:25:04:eb:d2:
                    a9:2b:86:d5:73:f8:2c:78:45:d1:bb:97:33:c6:aa:
                    92:42:88:4f:01:da:b3:d8:b9:dc:50:13:33:ce:7c:
                    4f:8a:29:c8:73:83:60:2e:94:0c:24:8c:f6:db:e7:
                    e5:21:f5:27:6d:82:77:a1:60:6f:fc:c1:df:0b:5b:
                    fc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B4:B6:4B:8E:12:08:39:E6:69:61:79:59:F2:7A:1B:78:D8:29:6C
            X509v3 Authority Key Identifier:
                keyid:BE:7C:79:E9:A2:1D:B2:6B:D6:AE:07:50:27:6D:B1:B0:AF:A7:EC:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnx56aIdsmvWrgdQJ22xsK-n7Ns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/16339a-2603-4e8f-901c-cfe2c7ff018b/1/vnx56aIdsmvWrgdQJ22xsK-n7Ns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:39:3d:9e:55:57:76:3d:f6:df:6d:1b:88:55:01:28:17:46:
         f5:cf:2b:9a:17:a5:c0:6e:3e:c5:e3:1e:5d:6f:8e:0b:25:cc:
         27:24:60:a8:a8:e0:15:b9:52:73:27:2d:fe:d5:46:44:12:85:
         e3:ee:da:f3:0f:a6:72:3c:d5:e4:af:b7:de:64:21:b4:ca:70:
         e3:20:34:0e:2f:25:00:df:5e:df:3f:52:f3:54:ae:1b:8d:9a:
         d3:18:3d:00:64:4f:5e:00:28:a3:73:dc:39:58:85:f7:e2:96:
         fe:43:3f:60:16:e5:dd:24:a5:d6:37:b6:31:ab:ef:14:22:c8:
         49:c1:01:fb:0e:5b:d3:18:54:c3:6d:97:5f:d1:03:56:cc:cc:
         ce:73:bf:48:b4:3b:ed:43:34:b1:3a:d2:63:1f:ac:8f:93:ed:
         6f:24:59:e4:3b:56:08:f9:b1:62:14:20:81:43:05:4b:c6:d6:
         25:f7:30:d3:43:7d:b7:db:f4:93:42:c0:1f:7c:31:c8:88:3a:
         f0:d0:3f:60:f1:c9:3d:3c:bb:6c:6d:d3:6b:05:53:e1:22:73:
         96:d6:e7:07:84:f0:15:23:76:2e:ec:6f:12:55:d1:49:2e:e7:
         33:09:03:1a:1e:06:3d:6d:1c:5a:df:d6:f2:4a:78:99:6a:81:
         77:a8:52:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 31 10:48:29 2026 by rpki-client