Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File:                     VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier:          KpvRJoGKlfUBudh4NEa8GwX2uwEtq6j+n6eE9HH9U5g=
Subject key identifier:   7E:46:DF:47:AF:C1:AD:EA:1A:5A:30:AD:33:58:30:46:2C:78:B9:C3
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer:       /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial:       019D382E225F14AC6D5D6951EB2F97EAD7C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number:          0512
Signing time:             Sun 29 Mar 2026 06:00:40 +0000
Manifest this update:     Sun 29 Mar 2026 06:00:40 +0000
Manifest next update:     Mon 30 Mar 2026 06:00:40 +0000
Files and hashes:         1: IpSnJJcRk0rVaIinr9MzfOMamE4.roa (hash: sJC1dVz6+49l7Xv9i824Gl0XhIuWekON6If1soCkGf8=)
                          2: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: d9nQGnUP9QWd3HtpTbzQaklV2O0yYrhvUVjpbFNGqPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 06:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:2e:22:5f:14:ac:6d:5d:69:51:eb:2f:97:ea:d7:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
        Validity
            Not Before: Mar 29 06:00:40 2026 GMT
            Not After : Mar 30 06:00:40 2026 GMT
        Subject: CN=7e46df47afc1adea1a5a30ad335830462c78b9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:1a:ea:1d:dc:4b:0d:4b:4a:33:d6:dd:1c:5e:
                    d3:0e:fa:9b:a7:18:73:fd:db:cf:39:ed:5f:5c:ce:
                    f1:36:27:f5:39:ea:5d:b9:a3:dc:fe:34:b3:72:ed:
                    83:84:d1:b4:b9:fa:fa:ea:60:f6:d5:81:37:f6:70:
                    e6:20:eb:d4:ec:79:c3:a0:b3:89:31:22:91:1b:04:
                    9e:fc:26:48:03:57:7f:dd:18:3b:e9:4f:86:80:83:
                    13:7b:2f:30:de:33:10:8b:fe:eb:06:f0:62:10:18:
                    bb:46:5a:3d:60:33:e2:3c:01:b7:26:b5:9e:d9:1d:
                    04:8b:2e:7d:56:7c:05:55:7a:c7:a5:fd:c9:60:e7:
                    9f:9b:c8:a1:71:e0:50:c2:32:5f:67:f5:af:68:5b:
                    61:a1:bd:c8:3a:71:1e:7c:d5:65:8b:55:20:d9:6f:
                    02:14:97:f5:60:49:13:ae:81:64:58:cc:e6:bf:ca:
                    b6:a9:3f:f6:2b:26:4d:2f:8e:3d:0c:1c:5e:56:85:
                    a8:96:0f:d1:f7:db:58:ee:85:c1:0f:7e:b5:ae:1b:
                    32:6b:b0:9e:89:8c:f3:ee:a2:09:9f:17:90:23:a7:
                    e7:b9:01:0f:c8:b2:b6:4c:48:ba:86:46:1d:15:3f:
                    46:99:91:3b:e7:33:9a:7e:9d:2e:e1:b5:c0:15:89:
                    17:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:46:DF:47:AF:C1:AD:EA:1A:5A:30:AD:33:58:30:46:2C:78:B9:C3
            X509v3 Authority Key Identifier:
                keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f0:b7:fb:48:fa:41:3c:64:53:6a:05:b3:04:ea:c1:7e:af:
         b1:17:e3:6a:1a:98:a5:99:3d:4e:33:b9:81:0b:cd:40:b3:91:
         42:12:fb:d9:d2:bb:c6:c5:c2:d1:34:3a:df:30:e4:15:e2:dc:
         1c:df:b1:66:c3:2c:c7:96:36:34:34:96:25:1f:bd:2e:8f:99:
         4e:48:23:fd:02:b3:5c:cc:92:d0:84:bc:6f:09:e0:0b:e9:8d:
         ec:dc:71:55:36:e4:1d:09:42:14:fe:cf:76:c5:a7:6a:03:a8:
         7c:e6:27:e1:53:94:e7:9f:24:01:45:fd:74:e2:3d:18:8f:6c:
         a3:b6:e4:d7:35:e3:74:17:03:4c:71:f2:29:ea:1a:b1:f2:60:
         45:24:88:f4:80:74:47:17:d5:4d:42:b3:d4:3e:7d:6c:a9:c9:
         7e:3a:ca:71:b8:da:01:88:23:f1:7f:74:1b:73:49:4b:5c:5c:
         10:6f:50:7a:de:29:bf:60:da:ff:a1:01:17:f1:c9:ea:ab:54:
         24:58:d2:65:f2:90:60:be:65:86:cb:fb:17:17:53:b2:34:9f:
         87:b5:90:ec:d7:57:02:56:7c:60:3c:b4:a6:1d:56:0a:9e:8a:
         e8:ed:43:99:b0:af:93:df:45:e3:d2:af:63:02:d8:a7:ac:ef:
         87:31:36:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:08 2026 by rpki-client