Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          xws2gUM9K2lNhgssk6Hd0g31HMLpg7w4XEXumwmWtcI=
Subject key identifier:   74:20:BC:65:4E:62:8D:66:44:74:84:26:CB:84:1C:04:28:32:E0:25
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019E09D2CD50868C158A8D9CEAF61FFF62E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0F0B
Signing time:             Fri 08 May 2026 23:01:10 +0000
Manifest this update:     Fri 08 May 2026 23:01:10 +0000
Manifest next update:     Sat 09 May 2026 23:01:10 +0000
Files and hashes:         1: 0QR437_yNuwd46JSd_IiWmhwYow.roa (hash: 6GDXre6adrsJyqw14UC9mtlOqvJoPEYUbHv7Lqn+43k=)
                          2: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (hash: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk=)
                          3: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: ABTx2gtJ7RAcG7p3K9xbE6JDCpMvraczIjasvBUrwWo=)
                          4: wwh70_fWojYStsjUuAC2NCdOguo.roa (hash: FHvLtN1EizK8sBcMqm1u4JO0yb8K5X+r6eZldZxIZo8=)
                          5: ydQtvb3bvjFb-2ukCgShBr4iJ7o.roa (hash: D1atPq/SoJlgXADbklDBQIhta1tm984jYa7MmKBjm1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 09 May 2026 23:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:09:d2:cd:50:86:8c:15:8a:8d:9c:ea:f6:1f:ff:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: May  8 23:01:10 2026 GMT
            Not After : May  9 23:01:10 2026 GMT
        Subject: CN=7420bc654e628d6644748426cb841c042832e025
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:80:d1:14:42:39:13:4e:6e:7b:88:0e:47:10:
                    fd:ff:27:4d:a9:a8:18:9e:b5:83:5d:9f:ed:a8:01:
                    57:0a:e2:2d:d6:e4:8d:15:b7:70:b9:0b:50:9e:1d:
                    3b:87:2b:a5:70:4f:e6:0f:64:73:15:31:1a:9b:0f:
                    00:47:60:c9:78:7b:8d:98:7d:a3:99:ff:57:d7:ac:
                    2b:db:38:bb:75:67:46:29:7a:a3:c2:b8:0d:0c:ff:
                    af:58:0b:0d:9a:09:f7:ca:c7:da:c2:81:8b:b3:8c:
                    cf:3c:08:fc:8f:80:b2:8b:c4:af:3a:22:fe:73:41:
                    5c:9e:48:a5:43:26:fb:0b:8e:83:8d:f1:c2:e8:71:
                    8c:07:cc:5c:03:6b:15:59:46:d1:98:4d:3b:0e:57:
                    96:a7:0d:71:3b:95:65:ea:b2:a9:68:dc:c6:a0:72:
                    04:f8:65:db:3f:32:fd:83:ab:91:b4:5b:06:19:bc:
                    af:66:7b:c3:f9:7b:d9:34:93:59:c1:32:c4:6c:22:
                    7e:04:bb:06:af:11:b5:7a:90:24:d6:de:2e:0c:83:
                    fd:ec:99:ef:7c:f7:5c:fa:3a:c0:5d:31:8a:ac:db:
                    2a:ea:85:76:15:f3:93:0e:39:82:e8:d8:d2:ec:e3:
                    75:f9:df:c4:bf:be:cf:fb:b4:02:45:b0:67:94:dd:
                    dd:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:20:BC:65:4E:62:8D:66:44:74:84:26:CB:84:1C:04:28:32:E0:25
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:a2:82:27:1a:17:d9:ef:9a:e9:29:48:39:f6:11:bd:54:6a:
         fc:30:66:d1:8a:76:0b:d8:75:d2:8d:b4:9f:15:76:41:2d:c3:
         25:cb:99:4f:5a:ce:33:36:82:7f:90:85:67:5f:bd:47:a0:18:
         43:2c:d5:f4:1e:ff:86:e2:aa:73:3b:e4:69:66:5c:ba:fd:38:
         d6:f6:5e:e8:10:db:cf:c3:81:78:69:f8:de:1f:9d:7a:41:e2:
         b2:40:89:d6:66:5a:93:1f:f4:4b:db:e6:77:1f:1a:c4:b4:b0:
         fb:bc:89:b0:00:88:bc:b8:ab:4f:a4:3c:90:b5:e2:8c:59:da:
         7e:14:8b:23:34:a8:15:77:a7:c3:4b:9a:18:86:a9:48:c7:8e:
         76:d3:e6:a1:a5:ed:f8:87:f6:4b:ee:64:b8:b3:70:fc:05:4b:
         a3:38:1e:6e:95:dd:0e:1e:f5:df:76:a9:52:11:b3:ea:47:cb:
         af:c1:6b:0d:e4:cb:10:ba:a5:91:cc:74:33:17:fe:51:8f:55:
         b0:ac:64:d7:fb:3e:84:60:b2:f1:4c:65:df:4f:3c:5a:71:9a:
         93:eb:1e:9a:2c:aa:ed:fe:dd:51:76:29:11:09:5d:ab:18:42:
         52:2e:f7:99:f5:31:2b:07:bf:14:e2:b2:45:06:95:05:f4:95:
         cc:6b:24:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 08:09:50 2026 by rpki-client