Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
File:                     VzzskGOoh0GEGQiwxSl_zbtDlTA.mft (raw, json)
Hash identifier:          rfYViCEPEVdf7GchaNtcXK1CG0egtWNF7fFPxhqq0uQ=
Subject key identifier:   45:10:AE:8C:9F:0D:3C:6E:4E:AC:5F:66:13:23:46:6E:9B:25:B6:9E
Authority key identifier: 57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30
Certificate issuer:       /CN=573cec9063a88741841908b0c5297fcdbb439530
Certificate serial:       019EC30005D9EE17B82C9EFADCC2128DD11E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
Manifest number:          027C
Signing time:             Sat 13 Jun 2026 22:00:18 +0000
Manifest this update:     Sat 13 Jun 2026 22:00:18 +0000
Manifest next update:     Sun 14 Jun 2026 22:00:18 +0000
Files and hashes:         1: VzzskGOoh0GEGQiwxSl_zbtDlTA.crl (hash: g1d3mbU1nGv/YkF17X+DaICUlCj0gsDp74uj1L+1ncg=)
                          2: myi3VwIyhKHJnr4qWMXGZa7tHxI.roa (hash: b4s1Ux4EB6+WfVHpUE0ZJZ00qhc7lmZkSyuU6m+Npgs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:00:05:d9:ee:17:b8:2c:9e:fa:dc:c2:12:8d:d1:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573cec9063a88741841908b0c5297fcdbb439530
        Validity
            Not Before: Jun 13 22:00:18 2026 GMT
            Not After : Jun 14 22:00:18 2026 GMT
        Subject: CN=4510ae8c9f0d3c6e4eac5f661323466e9b25b69e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ee:c7:b8:91:27:5a:13:0f:75:14:77:b9:04:
                    3e:f2:af:fc:0f:f7:8b:c4:2a:bf:00:b2:42:f4:86:
                    e6:e8:df:08:e8:d3:dd:c5:31:3b:22:5b:ff:23:3c:
                    5c:db:d9:56:9c:45:a7:41:c7:3f:fb:6a:22:be:4b:
                    f2:8a:36:e0:2a:2c:e4:5e:cd:e8:89:f6:b7:bd:45:
                    64:48:bd:73:8a:ad:76:71:01:63:8d:93:fe:80:ff:
                    1a:48:2e:64:90:41:a5:77:c7:7d:a4:d2:7a:64:a6:
                    a3:c0:4d:99:0b:8c:9b:ef:c3:52:76:b7:86:1f:c6:
                    ba:b0:ee:91:e2:8c:de:bb:08:40:c2:55:5a:e5:d1:
                    9b:39:be:03:0b:c9:54:ed:7b:eb:08:7a:90:2d:3c:
                    4b:72:38:35:4d:c3:bc:39:4f:f9:78:f1:9f:cf:3a:
                    04:35:7a:b7:2b:4f:da:dd:cf:57:bf:99:d5:fe:ea:
                    12:32:82:f2:6a:57:98:03:a6:f3:0e:c6:3a:29:3e:
                    c7:6e:16:25:ba:d8:70:18:bf:47:e1:ef:d7:58:ae:
                    6f:29:97:76:3c:fd:5b:6e:36:b9:3b:26:69:58:fc:
                    5d:fe:7c:26:8f:b7:eb:d0:cd:ee:1a:15:21:93:43:
                    71:46:c0:f5:46:7e:8d:7c:f5:03:93:b0:f0:4c:f0:
                    b3:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:10:AE:8C:9F:0D:3C:6E:4E:AC:5F:66:13:23:46:6E:9B:25:B6:9E
            X509v3 Authority Key Identifier:
                keyid:57:3C:EC:90:63:A8:87:41:84:19:08:B0:C5:29:7F:CD:BB:43:95:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzzskGOoh0GEGQiwxSl_zbtDlTA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/07dd58-2d2e-426e-9e1a-5454e5a16f42/1/VzzskGOoh0GEGQiwxSl_zbtDlTA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:ec:3f:d1:b5:32:bf:f0:2d:8f:a7:ae:5b:b8:32:11:94:e3:
         8e:fe:5d:4a:05:4c:ac:e9:93:4f:fb:a4:dd:d5:bb:cc:98:b7:
         9f:3b:44:9b:50:9a:66:ec:00:1e:c6:dd:f5:a7:0f:ee:fd:c2:
         d5:6e:97:e9:9d:83:d2:fb:65:fc:5e:96:3a:d0:2b:35:35:9a:
         55:bd:e7:00:77:b4:f2:51:2f:8e:5f:ba:d6:31:b6:03:7b:c1:
         7b:44:70:1e:b7:e0:af:d1:b2:0b:a8:9a:52:18:4c:99:e2:a1:
         b7:a5:dc:09:05:a0:db:2c:cd:c9:14:5d:18:2b:78:99:1e:99:
         76:15:3b:77:4a:b8:46:16:66:4c:bc:aa:25:cd:96:ab:a5:c9:
         d5:80:b9:ec:93:5f:01:e0:47:e6:d7:76:c3:6e:26:35:92:56:
         24:80:19:8a:6a:be:89:a9:d2:da:91:88:59:fb:54:5c:57:89:
         27:ef:5c:85:25:73:c7:9c:d1:7e:32:25:72:3e:bf:e2:00:83:
         29:a7:71:d0:75:75:39:d9:1f:f6:87:e6:bf:d7:66:ac:9d:76:
         f3:73:9b:8a:cf:a6:9f:b4:c2:b1:b3:61:19:70:41:4c:05:a8:
         6a:56:be:75:c8:91:cd:72:bf:0e:8c:5f:28:c0:07:be:1c:4c:
         92:50:41:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7DAAXZ7he4LJ763MISjdEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3M2NlYzkwNjNhODg3NDE4NDE5MDhiMGM1Mjk3ZmNkYmI0
Mzk1MzAwHhcNMjYwNjEzMjIwMDE4WhcNMjYwNjE0MjIwMDE4WjAzMTEwLwYDVQQD
Eyg0NTEwYWU4YzlmMGQzYzZlNGVhYzVmNjYxMzIzNDY2ZTliMjViNjllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl+7HuJEnWhMPdRR3uQQ+8q/8D/eL
xCq/ALJC9Ibm6N8I6NPdxTE7Ilv/Izxc29lWnEWnQcc/+2oivkvyijbgKizkXs3o
ifa3vUVkSL1ziq12cQFjjZP+gP8aSC5kkEGld8d9pNJ6ZKajwE2ZC4yb78NSdreG
H8a6sO6R4ozeuwhAwlVa5dGbOb4DC8lU7XvrCHqQLTxLcjg1TcO8OU/5ePGfzzoE
NXq3K0/a3c9Xv5nV/uoSMoLyaleYA6bzDsY6KT7HbhYluthwGL9H4e/XWK5vKZd2
PP1bbja5OyZpWPxd/nwmj7fr0M3uGhUhk0NxRsD1Rn6NfPUDk7DwTPCzqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEUQroyfDTxuTqxfZhMjRm6bJbaeMB8GA1UdIwQY
MBaAFFc87JBjqIdBhBkIsMUpf827Q5UwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEt
NTQ1NGU1YTE2ZjQyLzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOC8wN2RkNTgtMmQyZS00MjZlLTllMWEtNTQ1NGU1YTE2ZjQy
LzEvVnp6c2tHT29oMEdFR1Fpd3hTbF96YnREbFRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqew/0bUy
v/Atj6euW7gyEZTjjv5dSgVMrOmTT/uk3dW7zJi3nztEm1CaZuwAHsbd9acP7v3C
1W6X6Z2D0vtl/F6WOtArNTWaVb3nAHe08lEvjl+61jG2A3vBe0RwHrfgr9GyC6ia
UhhMmeKht6XcCQWg2yzNyRRdGCt4mR6ZdhU7d0q4RhZmTLyqJc2Wq6XJ1YC57JNf
AeBH5td2w24mNZJWJIAZimq+ianS2pGIWftUXFeJJ+9chSVzx5zRfjIlcj6/4gCD
Kadx0HV1Odkf9ofmv9dmrJ1283Obis+mn7TCsbNhGXBBTAWoala+dciRzXK/Doxf
KMAHvhxMklBB/Q==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:29:21 2026 by rpki-client