Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File:                     _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier:          omRSDxmdx5h4t3zHFnL0+gBcU655lnDwKDbjej2juuM=
Subject key identifier:   CB:60:1B:A0:F3:ED:D1:66:8D:99:27:B1:C2:99:9A:CB:B9:32:76:76
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer:       /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial:       019E284AA1CA238C9153F6B6009FF082AF06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number:          02A6
Signing time:             Thu 14 May 2026 21:00:40 +0000
Manifest this update:     Thu 14 May 2026 21:00:40 +0000
Manifest next update:     Fri 15 May 2026 21:00:40 +0000
Files and hashes:         1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: moGD98JOCdo+p7upZqJFdbtNOQXmYV1dl4sNMTtpAjY=)
                          2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
                          3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 15 May 2026 21:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:28:4a:a1:ca:23:8c:91:53:f6:b6:00:9f:f0:82:af:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
        Validity
            Not Before: May 14 21:00:40 2026 GMT
            Not After : May 15 21:00:40 2026 GMT
        Subject: CN=cb601ba0f3edd1668d9927b1c2999acbb9327676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cd:a3:e6:bd:4b:7f:f5:c3:11:35:04:7a:c5:
                    2b:62:70:29:7b:62:5c:ba:ea:4f:55:15:60:4a:3c:
                    08:69:7c:13:cb:4e:5c:ef:4b:bb:14:12:14:27:5a:
                    88:78:cf:af:c3:82:d2:b3:ae:84:80:fe:c3:b6:97:
                    31:42:84:60:ea:49:10:9d:4c:5b:dc:f7:d3:50:30:
                    fe:0f:71:b5:6f:ae:22:52:a4:a7:e7:1d:85:10:87:
                    0a:98:43:ad:a7:88:32:f1:24:b6:69:f7:cb:b0:15:
                    98:19:8b:aa:fb:35:17:dd:4c:69:c5:e1:2d:2c:6b:
                    2e:62:61:39:df:49:0c:5b:d9:e2:b0:4a:3b:7b:cc:
                    bd:3d:aa:18:01:75:97:a3:5d:2e:23:8e:ca:e9:2d:
                    f2:cc:df:a0:dc:d1:d3:44:04:c1:f7:ec:49:1f:f0:
                    5d:84:41:ea:85:e8:9d:d5:e5:ab:16:35:9b:2b:f9:
                    fc:31:9e:3a:ec:1c:5b:0e:fa:bd:f9:c1:c5:12:50:
                    6f:a8:f6:b0:09:fe:e5:5d:75:3b:b4:af:5f:a6:62:
                    48:23:99:4f:03:d4:9c:d0:42:ab:fc:b6:5f:39:8f:
                    db:34:c5:0a:8c:4f:79:8b:25:02:c1:40:a1:69:a1:
                    21:c8:4b:80:b0:69:f0:e9:6b:99:3e:ad:59:fb:fb:
                    37:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:60:1B:A0:F3:ED:D1:66:8D:99:27:B1:C2:99:9A:CB:B9:32:76:76
            X509v3 Authority Key Identifier:
                keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:0d:48:f1:15:e7:78:cd:3c:89:bc:5c:8b:3b:50:f3:c0:4b:
         ab:6c:fd:d4:97:7f:7a:c5:97:fc:95:47:35:fd:10:d0:05:c8:
         86:e8:24:3b:09:76:03:d7:76:fb:ab:32:fa:54:f6:b4:0e:d8:
         37:07:ec:fd:34:f1:6f:9f:09:2d:13:4a:70:4f:b6:34:0b:a1:
         05:53:d4:82:94:a5:51:2e:80:a0:f0:3f:8d:01:d1:65:b9:2d:
         20:d7:b4:10:1f:88:d4:05:22:db:fa:a0:74:7a:4e:88:da:4c:
         00:a6:97:c8:1c:c2:30:92:5b:3b:a5:61:f6:d7:c3:34:e4:fd:
         21:a2:8b:64:40:17:12:13:08:06:f9:8e:1e:61:b7:5e:6e:15:
         41:9e:fb:d7:16:9e:1b:18:d7:30:26:bd:14:90:d3:63:bd:d9:
         45:b0:84:63:ea:e9:ba:b9:ab:5d:94:94:8c:73:5f:d0:8a:9c:
         24:bd:41:d7:14:02:a9:c8:08:80:42:6d:cc:d6:59:66:36:f0:
         d2:6b:07:81:13:69:37:c0:3e:7e:f4:36:c0:1d:db:b9:4a:c2:
         cd:5e:4e:40:0f:cb:06:5a:a6:a5:72:de:98:5f:4d:4d:11:c7:
         12:49:21:d5:b4:10:11:24:f8:16:72:2b:f8:33:b9:4c:f0:b0:
         57:64:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:22:09 2026 by rpki-client