Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          f7tU135Pcg5nZDbT9QPdfYBdr0H+VYBjE+zVx1yC0jY=
Subject key identifier:   76:D9:F2:96:A1:95:85:95:13:88:C4:70:A2:4D:D3:98:C2:92:C0:D1
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       019CAD901EBE32D965764DF80D23BF0C2D60
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          0700
Signing time:             Mon 02 Mar 2026 08:00:29 +0000
Manifest this update:     Mon 02 Mar 2026 08:00:29 +0000
Manifest next update:     Tue 03 Mar 2026 08:00:29 +0000
Files and hashes:         1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: a6mBMz5yxNt1JEqby+/SPOuVuqBTaUZ4ljcPkzWwkxY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 08:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ad:90:1e:be:32:d9:65:76:4d:f8:0d:23:bf:0c:2d:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Mar  2 08:00:29 2026 GMT
            Not After : Mar  3 08:00:29 2026 GMT
        Subject: CN=76d9f296a19585951388c470a24dd398c292c0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:a5:e9:0f:b2:ca:e9:a9:87:50:67:4c:cb:41:
                    14:69:e4:6e:38:ce:a3:be:04:7f:d3:2b:2c:d2:0e:
                    b3:b9:b2:4f:87:1c:52:79:7b:01:2c:d1:95:4d:40:
                    41:87:41:20:22:c8:75:11:c8:db:6c:22:d4:47:76:
                    fe:fb:a3:64:c2:19:ad:f9:32:b3:e4:3a:d5:a7:3b:
                    78:23:59:0a:21:f8:7c:ec:d5:e5:ae:18:5e:06:0e:
                    e0:0f:aa:f6:ce:4f:d5:89:78:66:c2:32:6a:b5:2f:
                    10:a5:e3:bb:ef:b5:dd:72:0a:f8:2b:af:86:d1:26:
                    7a:31:d4:92:c7:90:45:a5:2a:68:f3:50:e3:22:f8:
                    c0:c5:fa:a9:d6:7d:72:05:7b:55:89:89:8c:59:0c:
                    82:4f:53:04:7c:8c:00:d6:a3:dd:1f:bf:81:ca:f5:
                    2e:04:37:4e:9b:96:e4:be:1b:ea:a4:a7:39:94:e1:
                    db:b0:ed:18:7c:e4:fc:b1:a9:c6:a9:81:77:b7:c6:
                    d4:b8:94:3d:0f:79:f6:85:3f:a2:b2:a6:85:1e:a2:
                    6a:d8:3d:d2:2b:f2:e8:14:53:a2:72:40:f8:31:77:
                    bf:1f:83:83:5f:2b:5a:7e:3f:66:09:fc:49:49:2c:
                    18:8a:d2:19:3e:4a:81:7e:e4:b0:9e:eb:22:15:42:
                    34:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:D9:F2:96:A1:95:85:95:13:88:C4:70:A2:4D:D3:98:C2:92:C0:D1
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:3f:43:3c:08:42:b2:ce:42:87:0a:25:30:b3:c4:10:76:56:
         46:52:25:08:33:39:6c:a8:0a:1d:bd:8a:cd:1c:71:5f:75:42:
         34:b1:24:f1:aa:f4:cf:ea:7b:95:05:dc:ac:6f:59:3f:53:cb:
         a6:95:de:9a:b9:5b:44:2c:66:23:97:56:1e:f9:f2:e0:a4:2c:
         6d:e3:bc:0e:27:46:93:38:06:58:ac:35:3d:91:1c:8f:79:1b:
         3f:de:f7:bb:f6:0c:c0:2b:bd:61:19:a2:2f:e7:f8:a3:03:6e:
         a1:0a:be:41:11:d1:3f:38:1b:c0:8e:ab:b0:df:67:a2:1e:14:
         94:c6:f8:4f:e2:03:37:53:af:e6:d8:6b:50:c9:f5:05:15:47:
         82:e6:7c:2f:d8:75:73:df:57:12:31:aa:af:08:6d:46:e7:eb:
         71:17:59:4c:66:31:d7:71:e7:91:f7:54:10:64:f9:aa:76:ff:
         da:3a:8e:bb:75:2d:34:a2:20:5b:94:3f:c5:fd:a1:43:aa:12:
         6b:f8:16:4f:f2:93:3f:07:58:3e:70:a7:3d:50:b5:47:dc:53:
         5e:ae:5c:d5:4d:8a:2a:39:04:f6:a1:3e:0b:ab:7e:28:a3:7e:
         65:b3:35:8d:b9:5c:bd:4c:90:57:43:67:b0:b6:91:41:62:d3:
         59:46:41:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:43 2026 by rpki-client