Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          D7Yy/65P1OQcMkBGOgpqqElclPr812qwmj1wbBk0YIo=
Subject key identifier:   2A:A3:CE:9E:7B:0F:00:67:59:B2:B2:D2:4E:AA:09:D5:64:06:BA:1B
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       019CAB34291BA2D0C10CB001F090F70CF42F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          0567
Signing time:             Sun 01 Mar 2026 21:00:48 +0000
Manifest this update:     Sun 01 Mar 2026 21:00:48 +0000
Manifest next update:     Mon 02 Mar 2026 21:00:48 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: mmD3kw35UmqbutvWngJYhwlVxNkqWXEL5XgH/2l07VU=)
                          2: e-VizZSv37fu0G6N5sAYEMxdQEA.roa (hash: U52oLGF2TV8xzdfr5dhrBJaNhR6aX14GLZTv3N0JAOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 18:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:34:29:1b:a2:d0:c1:0c:b0:01:f0:90:f7:0c:f4:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: Mar  1 21:00:48 2026 GMT
            Not After : Mar  2 21:00:48 2026 GMT
        Subject: CN=2aa3ce9e7b0f006759b2b2d24eaa09d56406ba1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:88:3d:bc:7d:cc:02:0b:c1:c0:5a:05:40:6a:
                    60:72:27:07:ff:c7:52:9a:da:0a:dd:01:ef:18:df:
                    58:3c:5b:e2:73:48:b7:b3:f4:5f:5b:db:17:42:ac:
                    19:76:48:a7:69:55:4c:5c:fe:b1:c1:d6:02:4e:6f:
                    36:e8:00:82:0a:97:19:40:94:21:eb:39:15:31:98:
                    84:6f:dd:17:e4:00:ce:4f:5b:d1:ce:ca:bd:91:7c:
                    56:9f:ea:e1:4f:ea:98:5a:01:98:e6:c0:4f:67:24:
                    8a:50:07:69:11:f1:01:c9:99:f6:c8:c5:10:ad:5d:
                    80:b5:be:d6:cd:0e:ea:b1:39:20:3f:89:17:55:df:
                    3c:26:24:b6:8f:f2:50:53:7f:ef:c3:da:4c:89:c3:
                    c6:45:c2:29:2c:be:91:03:13:d1:f6:ed:5a:b3:af:
                    72:c0:e1:fb:f7:b8:3b:63:c0:20:ea:b2:82:fa:67:
                    16:f6:1c:be:6d:85:2b:78:f4:a2:a6:ec:1a:3c:43:
                    e8:a8:c5:4e:93:f1:ab:36:fc:74:e6:e0:6a:aa:f6:
                    db:45:ea:6b:96:07:0a:d6:fd:53:8b:7a:86:75:ed:
                    d3:0a:c2:aa:ec:9f:a4:b6:f1:6e:a2:a5:87:9f:a3:
                    34:fb:87:22:86:2c:58:e8:4c:37:55:50:31:12:69:
                    e3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A3:CE:9E:7B:0F:00:67:59:B2:B2:D2:4E:AA:09:D5:64:06:BA:1B
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:b2:4c:8e:ff:c5:5c:74:04:fd:27:2d:0e:0c:8d:ab:7b:2c:
         f7:47:bb:f7:01:56:3e:57:e7:3c:e7:d8:93:60:7a:4a:6f:fb:
         bd:e1:8b:a2:62:ba:8d:d7:2d:f6:74:8c:91:cd:a5:f6:8e:44:
         33:19:ef:86:b5:00:77:9b:ac:9c:53:45:ba:ac:16:e8:79:a4:
         11:38:ac:84:3b:ef:a8:5e:7b:30:af:cd:ab:a2:96:72:76:f7:
         9a:dd:cc:36:3d:62:6d:67:c7:8f:2c:d9:44:18:d9:50:c2:2f:
         b5:d5:bc:7f:78:f0:62:9a:10:04:32:08:1f:c5:0f:42:e0:69:
         ee:a6:cd:52:81:0f:d9:10:0a:41:f8:f3:61:1c:b8:71:43:71:
         cd:1d:b0:97:b3:f7:ed:f0:70:b2:81:21:91:46:7d:9d:19:98:
         45:d1:06:68:b4:ca:6f:bd:b3:15:bc:6c:c1:ff:60:c9:7f:8a:
         f9:d0:b6:b1:74:46:55:80:d2:92:df:01:f2:2c:95:70:e5:dc:
         00:92:61:37:4e:4c:73:3f:ae:6d:d2:b1:1b:66:07:ba:9b:d7:
         32:75:b1:0c:28:5b:93:8e:9c:d1:9f:9c:5b:e7:19:66:14:f7:
         c6:79:85:c0:40:44:c4:aa:f0:a5:15:7a:da:83:3e:e7:15:f1:
         2c:bc:62:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:21:44 2026 by rpki-client