Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
File:                     vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft (raw, json)
Hash identifier:          4GYElRYUZmYgWfFvxujTexukB4byLEez8uXCbGNuWms=
Subject key identifier:   1E:6A:43:FB:DC:76:1D:E2:9C:77:4E:C0:15:A4:EF:A9:3C:FE:B4:25
Authority key identifier: BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43
Certificate issuer:       /CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
Certificate serial:       019DF9BB2048391AF752E29E5B90718765F1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
Manifest number:          0E58
Signing time:             Tue 05 May 2026 20:01:23 +0000
Manifest this update:     Tue 05 May 2026 20:01:23 +0000
Manifest next update:     Wed 06 May 2026 20:01:23 +0000
Files and hashes:         1: 5muXdgxc7_VI2T7gYQWqDqZVqoQ.roa (hash: y9Iyt3XNKSksdZHulslFbBftCSwFeejTJNDE7+IraYA=)
                          2: HB8oWPORk_kBVM_NNnN5rsZSYMw.roa (hash: JUT9QoRq3kZDCee6PYhDNYcwmNxNElz71rJ3W7dPa54=)
                          3: kWM8lsFwe_wFxY0y-iFsflRsUJ8.roa (hash: xNuj3kW4sY8f//DAghPZs4zV41qytpxRleGwYrYpxck=)
                          4: vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl (hash: 82j3iCnPIgzdedJc9TVtXj/OAPi+CgMUFH8/RWXQWqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 06 May 2026 18:48:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:f9:bb:20:48:39:1a:f7:52:e2:9e:5b:90:71:87:65:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd4262f642b1bb0b53b2a6d7798c0899d1e4d43
        Validity
            Not Before: May  5 20:01:23 2026 GMT
            Not After : May  6 20:01:23 2026 GMT
        Subject: CN=1e6a43fbdc761de29c774ec015a4efa93cfeb425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:83:64:9c:1e:01:39:ec:5c:03:c6:5b:c3:b6:
                    3c:87:7e:b5:46:4e:30:f4:31:a0:7d:ed:64:83:4f:
                    38:3a:98:aa:be:be:70:56:23:54:71:c1:ae:2d:49:
                    a2:b0:f0:f5:46:1e:1f:59:3e:6a:f0:53:62:74:35:
                    5a:07:d0:88:14:f3:82:02:66:2e:ac:5a:25:50:76:
                    af:a7:c1:21:fc:21:38:15:e9:9c:60:b0:ff:86:73:
                    a4:51:8f:f0:64:11:aa:fb:3d:9d:aa:3c:e2:9b:68:
                    4a:e8:4b:fe:78:76:85:33:9b:9a:51:9a:59:50:cc:
                    c8:93:de:2d:1f:08:d3:45:42:4c:6d:c4:8b:91:81:
                    6a:6a:a2:27:86:75:43:11:f9:f1:66:81:a7:6a:f3:
                    03:86:db:4d:14:6e:1c:71:d7:c2:97:f7:84:cf:42:
                    23:56:bb:82:cf:5b:62:41:91:5b:b2:b9:83:30:b9:
                    a3:2a:ac:e2:4a:e2:73:05:e6:a9:dc:1d:61:d9:f7:
                    65:df:6a:09:4b:bf:f2:78:9b:65:bb:f3:c6:ac:50:
                    3e:07:d0:3f:43:57:f4:e2:84:bb:67:67:7b:28:a5:
                    1b:14:3b:46:4d:63:01:98:40:76:d2:e5:8d:67:e9:
                    85:5c:0d:55:db:ea:f5:80:53:78:d8:0e:29:b3:81:
                    76:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6A:43:FB:DC:76:1D:E2:9C:77:4E:C0:15:A4:EF:A9:3C:FE:B4:25
            X509v3 Authority Key Identifier:
                keyid:BD:D4:26:2F:64:2B:1B:B0:B5:3B:2A:6D:77:98:C0:89:9D:1E:4D:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/27/90c5be-2f6e-4441-9461-3bd79ffc6398/1/vdQmL2QrG7C1Oyptd5jAiZ0eTUM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:a2:5a:e3:d0:b9:13:fc:c4:55:97:06:4e:16:25:b8:79:ae:
         e1:1a:3f:9f:57:78:5b:f6:7d:df:83:47:79:26:54:54:55:bf:
         cf:dc:ce:fc:5a:af:f7:79:81:80:c4:b4:bf:93:aa:fa:e3:72:
         94:80:58:fb:29:81:95:c8:cb:4c:06:5f:26:3a:ef:7f:2b:b7:
         d6:68:96:41:5f:85:e3:61:c8:22:ac:69:32:dd:87:1b:8a:10:
         8c:c2:b1:76:be:a1:0d:e3:29:c4:ee:de:d5:e1:92:02:df:6e:
         90:ed:c2:53:4e:06:3f:06:28:5a:d3:47:10:3c:7d:5e:3d:03:
         0f:7b:8c:2a:49:ab:8e:a3:0c:02:e1:04:36:c6:26:01:b0:96:
         a0:8d:a3:2e:ca:23:7a:1b:b3:a5:c4:cd:74:9f:02:4c:bf:12:
         83:4f:4a:e0:dd:de:99:6d:a3:a1:99:25:fb:b0:60:3c:1d:6b:
         88:cd:66:46:39:8c:67:ba:3a:e0:47:f2:0d:d0:6d:99:9f:06:
         5a:5e:e0:49:63:3f:72:94:79:d5:8c:2d:67:3d:49:f9:5e:33:
         18:9f:51:a0:da:38:4d:87:cb:76:6d:18:e2:db:e3:ef:ab:cd:
         38:b7:36:1d:7d:20:3d:0d:c2:cb:56:4e:7e:ca:ca:29:d8:23:
         8a:f3:77:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ35uyBIORr3UuKeW5Bxh2XxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDQyNjJmNjQyYjFiYjBiNTNiMmE2ZDc3OThjMDg5OWQx
ZTRkNDMwHhcNMjYwNTA1MjAwMTIzWhcNMjYwNTA2MjAwMTIzWjAzMTEwLwYDVQQD
EygxZTZhNDNmYmRjNzYxZGUyOWM3NzRlYzAxNWE0ZWZhOTNjZmViNDI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4NknB4BOexcA8Zbw7Y8h361Rk4w
9DGgfe1kg084Opiqvr5wViNUccGuLUmisPD1Rh4fWT5q8FNidDVaB9CIFPOCAmYu
rFolUHavp8Eh/CE4FemcYLD/hnOkUY/wZBGq+z2dqjzim2hK6Ev+eHaFM5uaUZpZ
UMzIk94tHwjTRUJMbcSLkYFqaqInhnVDEfnxZoGnavMDhttNFG4ccdfCl/eEz0Ij
VruCz1tiQZFbsrmDMLmjKqziSuJzBeap3B1h2fdl32oJS7/yeJtlu/PGrFA+B9A/
Q1f04oS7Z2d7KKUbFDtGTWMBmEB20uWNZ+mFXA1V2+r1gFN42A4ps4F2KwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5qQ/vcdh3inHdOwBWk76k8/rQlMB8GA1UdIwQY
MBaAFL3UJi9kKxuwtTsqbXeYwImdHk1DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEt
M2JkNzlmZmM2Mzk4LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy85MGM1YmUtMmY2ZS00NDQxLTk0NjEtM2JkNzlmZmM2Mzk4
LzEvdmRRbUwyUXJHN0MxT3lwdGQ1akFpWjBlVFVNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJKJa49C5
E/zEVZcGThYluHmu4Ro/n1d4W/Z934NHeSZUVFW/z9zO/Fqv93mBgMS0v5Oq+uNy
lIBY+ymBlcjLTAZfJjrvfyu31miWQV+F42HIIqxpMt2HG4oQjMKxdr6hDeMpxO7e
1eGSAt9ukO3CU04GPwYoWtNHEDx9Xj0DD3uMKkmrjqMMAuEENsYmAbCWoI2jLsoj
ehuzpcTNdJ8CTL8Sg09K4N3emW2joZkl+7BgPB1riM1mRjmMZ7o64EfyDdBtmZ8G
Wl7gSWM/cpR51YwtZz1J+V4zGJ9RoNo4TYfLdm0Y4tvj76vNOLc2HX0gPQ3Cy1ZO
fsrKKdgjivN3BQ==
-----END CERTIFICATE-----
Generated at Wed May 6 00:20:44 2026 by rpki-client