Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
File:                     VmRpui7FavQFn4UHViCEec4VW3o.mft (raw, json)
Hash identifier:          wXBn36HGXsoKUuRjWbcPnOOqbPxJzDyQsC3q1uansIc=
Subject key identifier:   AC:97:52:D2:96:29:32:E2:2C:85:0D:88:8C:92:9B:E4:28:35:E6:C5
Authority key identifier: 56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A
Certificate issuer:       /CN=566469ba2ec56af4059f850756208479ce155b7a
Certificate serial:       019CAB6B03C22B26555C785624F634C41978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
Manifest number:          077F
Signing time:             Sun 01 Mar 2026 22:00:43 +0000
Manifest this update:     Sun 01 Mar 2026 22:00:43 +0000
Manifest next update:     Mon 02 Mar 2026 22:00:43 +0000
Files and hashes:         1: 6BRNGEc-yI-LaV9wXNJpVpORCRo.roa (hash: xpVt+t681dM8x0OZBMnJR9/9LbsCdO2uDFKH45Cg9B4=)
                          2: VmRpui7FavQFn4UHViCEec4VW3o.crl (hash: VJg5Hp4CwUj+UuThSI0zSO/QTJ/RTV0SeHhAAGALWR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:03:c2:2b:26:55:5c:78:56:24:f6:34:c4:19:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=566469ba2ec56af4059f850756208479ce155b7a
        Validity
            Not Before: Mar  1 22:00:43 2026 GMT
            Not After : Mar  2 22:00:43 2026 GMT
        Subject: CN=ac9752d2962932e22c850d888c929be42835e6c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:80:30:f3:3f:1c:cb:e4:ff:2f:08:44:82:
                    9d:58:b5:9b:e6:61:9f:86:c5:69:db:59:c8:75:cc:
                    f4:10:13:42:47:b2:33:cc:0a:25:41:40:18:8b:0d:
                    30:73:2a:6c:6b:aa:52:de:fe:b5:4a:e8:91:b3:15:
                    d8:1c:22:87:84:15:19:4f:8b:fa:c0:b5:9a:1f:07:
                    de:f9:6a:d3:8a:28:ca:24:6b:6b:46:10:38:eb:2e:
                    63:c5:e2:3e:5c:72:63:a1:91:ef:9c:83:ab:cd:75:
                    45:34:6f:44:bb:b4:cd:45:71:8b:c9:d5:71:c4:00:
                    6e:ef:f2:b5:c1:b4:11:93:90:d7:0c:0e:7a:59:a9:
                    d1:c8:39:58:df:21:ed:be:db:d9:14:66:ef:9d:3a:
                    10:14:0e:2f:7c:18:00:02:a2:39:58:28:28:86:db:
                    c3:ec:78:1e:ca:4c:ae:93:c3:b6:6a:11:0c:7a:6e:
                    9f:23:f2:9e:5d:1b:b1:e0:56:3a:81:92:7b:f5:f1:
                    03:b4:d6:93:48:47:ce:ea:ae:67:4a:76:77:52:63:
                    0c:bf:78:8c:be:ba:f0:a0:d2:ae:86:e4:54:c7:59:
                    83:fd:98:44:fc:d6:e8:e1:b5:80:29:f1:fb:04:75:
                    4c:95:71:b7:7f:d1:a1:a6:fd:2a:77:10:ef:79:ac:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:97:52:D2:96:29:32:E2:2C:85:0D:88:8C:92:9B:E4:28:35:E6:C5
            X509v3 Authority Key Identifier:
                keyid:56:64:69:BA:2E:C5:6A:F4:05:9F:85:07:56:20:84:79:CE:15:5B:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmRpui7FavQFn4UHViCEec4VW3o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/be1c97-418f-4e46-bc1c-ee03f3de44aa/1/VmRpui7FavQFn4UHViCEec4VW3o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:36:28:d6:64:f4:62:ef:16:88:16:cf:f7:9d:7e:03:93:8e:
         0f:55:61:a4:9c:08:72:9f:15:ad:56:e3:05:fc:e0:12:bb:43:
         66:47:a2:34:24:85:12:3c:dc:21:99:fa:22:da:47:5a:c3:6a:
         c1:3a:f3:82:15:a9:ff:45:9a:c4:28:0b:75:39:2b:df:80:9c:
         a1:b2:36:81:80:af:3f:fb:49:38:ae:d8:9e:54:80:2c:7a:48:
         93:75:6d:9c:09:dd:20:2f:87:76:4d:74:7e:20:2a:91:8a:c3:
         d9:53:d6:b2:18:36:3e:ac:1f:02:9b:a3:ef:da:3e:8a:82:40:
         01:a0:b8:c6:c4:de:b0:a4:65:6f:82:a4:dc:ce:22:fd:49:56:
         01:0a:7b:1f:0e:fb:a3:6b:b4:e9:be:a3:7d:44:c1:b3:24:7d:
         c2:e9:ba:01:d3:63:ea:e4:6e:65:45:f1:e3:82:0b:d4:7f:32:
         3f:0e:50:d0:eb:a1:88:ab:41:f8:f3:7a:81:5f:c4:68:9e:a1:
         e5:b3:7c:b5:b8:94:c1:b2:77:c2:2b:4e:0b:eb:5c:b9:dc:f5:
         cf:a7:c5:18:ed:c2:28:d9:de:f0:00:97:57:95:6a:38:82:9e:
         d1:52:be:25:e8:ec:b6:7b:28:d1:95:0f:93:c5:5c:89:56:19:
         75:18:b4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:50:43 2026 by rpki-client