Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
File:                     VUexftfcydHsKj_H1eeStZHqYoA.mft (raw, json)
Hash identifier:          Ov179ET1eLzhUbNHsRZQwdTk3C/Z4qM18tod0ezsVqY=
Subject key identifier:   E4:D7:34:4A:08:CF:B5:1D:5A:8A:AE:9E:07:64:64:D6:3E:86:FA:E4
Authority key identifier: 55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80
Certificate issuer:       /CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
Certificate serial:       019CE3D9B6539C6F0734E58429EBC821643E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
Manifest number:          7B
Signing time:             Thu 12 Mar 2026 21:00:21 +0000
Manifest this update:     Thu 12 Mar 2026 21:00:21 +0000
Manifest next update:     Fri 13 Mar 2026 21:00:21 +0000
Files and hashes:         1: VUexftfcydHsKj_H1eeStZHqYoA.crl (hash: 5g01c3dpmkB3U36bimoYB4/aXbrLFYa8KzO4Or4JsN0=)
                          2: tsIXIQRuUDBV02rdPLj6XJnzDl4.roa (hash: +5zk1WdRPKPJfJvtpk3tr0u9W43LZvbEvy4wGv4JI08=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 21:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e3:d9:b6:53:9c:6f:07:34:e5:84:29:eb:c8:21:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5547b17ed7dcc9d1ec2a3fc7d5e792b591ea6280
        Validity
            Not Before: Mar 12 21:00:21 2026 GMT
            Not After : Mar 13 21:00:21 2026 GMT
        Subject: CN=e4d7344a08cfb51d5a8aae9e076464d63e86fae4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:c0:7b:af:8f:4a:2b:14:49:70:97:76:88:
                    cb:39:e8:74:0f:25:65:a1:a3:0b:cf:4d:24:64:01:
                    c9:c3:72:f9:91:a7:0e:d7:73:c8:74:f8:e6:93:c4:
                    4c:3a:5d:57:0c:39:e3:20:d4:0b:5d:41:c0:48:bc:
                    c6:63:cb:c3:55:9b:54:bf:c9:51:4a:ad:fe:18:8a:
                    13:f5:3f:e0:6f:06:3b:99:1b:5a:90:4b:42:db:8f:
                    74:05:5f:0a:9f:fc:a3:aa:38:4a:c4:3a:3e:ef:aa:
                    9c:2d:97:d3:de:18:70:6d:17:12:17:35:19:10:82:
                    bf:91:3b:00:d2:25:e7:66:e9:97:92:e7:dd:ec:51:
                    53:c6:18:ad:57:95:e9:22:2a:b6:2c:2b:9a:2e:22:
                    e3:13:0f:49:9e:be:4c:61:db:27:db:42:64:92:95:
                    9d:f0:15:05:ee:cd:36:c2:80:b5:22:78:b7:36:a9:
                    ab:64:a3:41:c3:b1:db:d7:6d:7d:13:8a:da:48:12:
                    fe:98:45:fd:74:a8:d1:33:ed:6d:4e:6a:d3:a9:83:
                    26:dc:a5:0c:51:ba:5d:d1:2a:a1:be:94:d7:38:a4:
                    87:23:bd:42:d0:86:16:3f:45:21:25:e4:3b:95:20:
                    05:d8:7a:e8:e7:15:ba:33:86:4b:f8:c2:86:4b:b4:
                    47:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:34:4A:08:CF:B5:1D:5A:8A:AE:9E:07:64:64:D6:3E:86:FA:E4
            X509v3 Authority Key Identifier:
                keyid:55:47:B1:7E:D7:DC:C9:D1:EC:2A:3F:C7:D5:E7:92:B5:91:EA:62:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUexftfcydHsKj_H1eeStZHqYoA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/c1da06-198e-44bb-b33f-13e333e1fa17/1/VUexftfcydHsKj_H1eeStZHqYoA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:27:f8:db:91:70:47:16:5c:92:11:a9:fb:2f:12:79:f7:44:
         57:b7:3d:3d:6f:e6:e1:d6:25:de:a4:79:2f:1b:d0:c9:25:62:
         35:dc:b4:9a:9a:c4:00:57:d2:9f:2f:4d:43:3c:9d:db:1c:ce:
         a2:17:c6:6d:66:87:c1:27:8c:20:c0:ea:ef:06:85:0d:76:c6:
         b5:ea:2f:e5:b0:4b:85:cc:8c:b3:9b:27:88:d5:cf:30:98:86:
         31:ab:d4:8d:6a:c8:c8:ac:0a:20:cf:1f:f4:f0:dc:ef:f6:58:
         d7:17:7e:30:93:98:64:de:98:f2:3f:14:6d:60:9e:8a:15:18:
         c7:2c:76:54:e9:0b:a9:bb:0d:ff:e0:35:30:23:35:03:8b:0b:
         81:c2:f7:99:24:b3:c8:49:87:21:08:23:82:2f:b6:da:41:a9:
         53:15:80:63:08:15:fc:cb:ee:b7:79:e6:47:b7:f5:cb:63:d1:
         bc:af:db:e5:58:b2:23:f5:c3:fe:54:5f:3d:8c:f2:ac:9d:e4:
         8c:ad:97:0f:e8:9d:ed:9e:e1:8f:40:24:0b:fa:24:35:82:10:
         75:56:1d:22:c1:96:ab:a5:53:ce:80:bd:65:0c:e4:b3:c9:c4:
         d7:8b:b6:4f:17:b4:cb:06:38:7d:62:a1:4e:13:8c:84:13:5a:
         ba:73:4d:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:04 2026 by rpki-client