Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File:                     VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier:          Hm4hN/lVMxMqsN1JX1aWlNvkLV4oeYMODKXs/AC2AAc=
Subject key identifier:   55:66:21:9E:ED:DE:36:F0:B5:55:BF:8A:57:E3:0D:2B:11:97:88:40
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer:       /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial:       01A08E69EAA5DBD05853B20AEAA238E13D0E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number:          16DF
Signing time:             Fri 11 Sep 2026 03:01:40 +0000
Manifest this update:     Fri 11 Sep 2026 03:01:40 +0000
Manifest next update:     Sat 12 Sep 2026 03:01:40 +0000
Files and hashes:         1: E6VcUABJOgaDwD9RzJREvDXjkAM.roa (hash: qjoSCznyEiS7sQVKAn02kghNOIKy/+vPrXAKlA+IZs8=)
                          2: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: mXQYAR2KOnet+fTjklId3cM5NN1LXcJEu1FhZtEkt1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 12 Sep 2026 03:01:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8e:69:ea:a5:db:d0:58:53:b2:0a:ea:a2:38:e1:3d:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
        Validity
            Not Before: Sep 11 03:01:40 2026 GMT
            Not After : Sep 12 03:01:40 2026 GMT
        Subject: CN=5566219eedde36f0b555bf8a57e30d2b11978840
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:3d:1e:6a:cb:dc:43:c9:e9:f4:13:39:22:b2:
                    dc:7b:ec:43:65:da:43:dc:26:f0:64:40:a5:20:33:
                    19:2b:be:06:47:9b:81:54:19:2c:73:db:f3:a1:9c:
                    02:9f:04:9e:3c:ed:96:a4:c4:20:47:67:41:86:e0:
                    d5:76:85:7e:af:d2:d2:b7:13:7b:1a:c3:0b:0d:44:
                    6d:d4:14:c2:28:c6:61:66:4d:4c:47:ff:99:94:29:
                    1d:ec:6f:9b:c8:7e:b3:ce:2c:91:1f:6f:f4:da:dc:
                    fe:41:68:de:fc:ab:ef:08:dd:4f:cb:06:94:5c:39:
                    5f:6b:90:e8:15:16:e8:6c:05:41:94:ca:95:e6:ce:
                    d1:84:f0:f4:88:55:59:35:c7:2c:a6:3a:23:99:ca:
                    f1:dc:26:66:7a:ad:1c:da:18:66:ab:df:fa:da:26:
                    e0:2c:95:6e:bd:7d:57:b2:a9:ad:af:93:fa:1e:d1:
                    76:2b:20:2e:fa:c5:39:e0:07:89:5e:e5:86:e1:6f:
                    ee:3d:77:34:b4:06:58:44:78:e7:24:27:71:68:d8:
                    11:d3:36:7e:10:0a:c8:24:37:6e:58:91:de:fd:69:
                    6c:2d:b5:b5:b0:be:6d:70:84:42:eb:ba:e2:55:42:
                    f3:fe:a8:cd:76:67:00:9f:98:83:f6:cb:10:cb:23:
                    16:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:66:21:9E:ED:DE:36:F0:B5:55:BF:8A:57:E3:0D:2B:11:97:88:40
            X509v3 Authority Key Identifier:
                keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:82:18:28:08:60:ea:b1:b0:04:12:a6:1a:cd:c7:97:fe:3a:
         33:20:7a:ac:c5:dd:b6:11:dd:8a:f5:d6:d5:8b:65:00:c3:5d:
         b1:d9:76:d2:0b:a1:3e:bc:ef:79:25:98:f5:e3:9b:7d:3a:d8:
         50:3b:c9:5e:ed:92:42:84:c1:e7:a6:fc:a5:52:23:4d:a4:24:
         1c:8b:67:6f:0d:a1:bd:c7:ee:c3:66:77:93:d5:44:4d:f2:3e:
         8d:34:01:2f:63:31:b4:50:8d:05:ed:80:d0:f3:ff:cb:0e:40:
         9e:84:c9:d6:e0:fe:2b:9b:d7:25:8f:af:5a:ca:ad:a9:f0:8f:
         e3:dc:0a:6f:6e:67:1f:d9:4f:0d:20:59:90:be:f7:5e:6a:49:
         c3:e9:7d:5f:a5:e1:61:21:47:d9:ce:aa:7e:8e:3b:ee:50:a7:
         ee:3f:35:3e:af:ad:f4:89:a1:59:f7:41:cd:80:17:67:42:c2:
         78:be:b4:9b:e1:b5:01:08:71:19:42:28:06:78:e5:f5:2e:3a:
         0e:00:eb:c2:63:a8:1a:7d:69:b6:20:09:f5:32:80:c5:5d:aa:
         63:44:ef:36:94:1a:55:58:4e:89:75:29:aa:b9:51:79:44:29:
         1e:37:05:61:18:6c:02:38:34:b4:37:da:3a:f9:63:74:b4:2b:
         02:77:7e:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 10:38:47 2026 by rpki-client