Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          txM8eZKiK6wpwnEYZr9WdbDWfFNeJa2OlFQqzRuTRxw=
Subject key identifier:   BA:5D:FF:A1:14:4C:43:38:66:1F:CC:8C:BD:E2:D8:34:92:9F:5E:71
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       01A1795F158746A0433710A2E9EF73147BBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          07E4
Signing time:             Mon 26 Oct 2026 18:00:36 +0000
Manifest this update:     Mon 26 Oct 2026 18:00:36 +0000
Manifest next update:     Tue 27 Oct 2026 18:00:36 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: BzyYSljOGx97kRtbmwP23hDNDAJRjv9orqQ9kfKaPpo=)
                          2: e-VizZSv37fu0G6N5sAYEMxdQEA.roa (hash: U52oLGF2TV8xzdfr5dhrBJaNhR6aX14GLZTv3N0JAOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 18:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:79:5f:15:87:46:a0:43:37:10:a2:e9:ef:73:14:7b:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: Oct 26 18:00:36 2026 GMT
            Not After : Oct 27 18:00:36 2026 GMT
        Subject: CN=ba5dffa1144c4338661fcc8cbde2d834929f5e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:a6:c8:cc:e4:75:36:48:69:fb:31:72:ab:
                    14:8a:d9:68:d9:43:2f:64:07:75:cc:7d:24:75:a6:
                    a3:fe:10:2b:7f:72:16:76:1f:1f:8e:65:5a:96:67:
                    3c:38:66:53:9f:70:d5:fa:69:2f:0c:35:12:07:cf:
                    5b:3e:85:bc:c8:b4:70:59:27:05:b1:fd:51:5a:b9:
                    4f:72:1e:15:a5:09:20:0d:64:de:dc:fa:dc:81:1c:
                    c9:4f:b8:4f:25:0b:90:54:e2:76:67:5d:07:3e:7a:
                    be:f9:a5:b5:a5:94:c1:c9:2e:8e:3d:5d:d4:f7:8b:
                    94:ce:ba:32:c8:69:2a:c1:16:ba:f6:ea:0d:2b:eb:
                    e0:f1:80:22:b2:c4:49:8f:70:95:9b:c2:f8:b8:a2:
                    51:44:7d:e4:7e:71:1a:3e:6b:42:ff:75:23:a4:33:
                    06:8a:11:a6:37:5e:f6:83:d3:c4:e7:c4:09:3f:d8:
                    ce:df:9e:a9:15:d8:c5:3f:85:0e:0e:da:11:b6:49:
                    35:a7:5f:fb:af:84:49:a6:1b:8a:d8:4c:c0:d5:20:
                    b8:fa:68:fe:fb:45:3f:9d:00:bd:aa:29:76:cd:6c:
                    7d:e2:fb:16:32:b7:a5:02:e5:33:3c:e1:ac:f9:7e:
                    04:42:c8:84:f5:e8:6f:d8:25:7d:fa:f4:74:f4:95:
                    13:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:5D:FF:A1:14:4C:43:38:66:1F:CC:8C:BD:E2:D8:34:92:9F:5E:71
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cc:cc:4e:eb:9d:0e:2f:b8:8a:4d:27:5a:95:dc:fd:07:62:
         cd:d7:0d:43:78:27:ab:e7:a2:ca:f4:38:13:38:52:97:bb:9a:
         a6:2c:3f:f9:76:b4:b3:68:dc:20:5a:ed:10:7d:7f:9d:f7:b8:
         d4:06:38:16:5d:32:29:a4:84:14:f9:01:9b:b0:d6:5e:82:c3:
         52:3b:07:ae:f5:38:01:35:94:9a:b9:92:6f:e4:6c:aa:1c:8d:
         fc:cc:b9:1e:a2:0f:44:f6:35:56:ed:af:84:48:04:ed:2b:ca:
         51:bb:8f:1d:a4:0b:17:45:7c:1d:31:59:be:95:53:41:c4:76:
         b3:a7:9f:d6:54:c1:39:de:2f:b1:b3:fa:6f:64:53:3a:2c:fa:
         aa:50:61:03:8c:a5:a8:86:3b:28:a3:ad:dc:f3:71:9c:d5:da:
         6d:d5:a4:9b:b6:39:3e:3a:31:1b:c3:66:d5:7e:27:41:8c:f2:
         b8:49:32:e1:3b:1e:b5:a5:de:f1:61:86:d0:78:bc:ab:71:6b:
         4c:b3:07:82:1d:4f:73:c3:a5:73:d0:d8:c3:67:ea:c9:66:42:
         d1:8c:cb:ee:5a:88:62:d9:d9:be:42:52:7d:cf:69:1d:18:c3:
         b5:86:3e:3c:a5:7e:fd:52:c1:0b:23:46:ae:34:11:29:8a:92:
         e2:1f:8b:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:03:14 2026 by rpki-client