Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          LkjKFZKwy/5rJDY8wG1XFUvgXJ3Z/6LRAYJoxC399OQ=
Subject key identifier:   CB:A5:50:94:F4:65:64:6E:54:5E:83:CB:23:A5:3B:18:88:18:C0:B2
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019E9C61239D219782ADDB1F5598B2A9FF50
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          1950
Signing time:             Sat 06 Jun 2026 10:01:12 +0000
Manifest this update:     Sat 06 Jun 2026 10:01:12 +0000
Manifest next update:     Sun 07 Jun 2026 10:01:12 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: 7y/I0jhUuoEIw2oKyOrsbsI83G4WfcM+OVuWHTD88oI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 10:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9c:61:23:9d:21:97:82:ad:db:1f:55:98:b2:a9:ff:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Jun  6 10:01:12 2026 GMT
            Not After : Jun  7 10:01:12 2026 GMT
        Subject: CN=cba55094f465646e545e83cb23a53b188818c0b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:da:bc:bb:7e:e1:a6:ba:ec:08:c7:bf:e8:40:
                    6f:08:c7:bf:ea:d1:ca:94:a9:95:2b:ab:d0:fd:e1:
                    22:42:73:a8:d2:4f:38:25:71:7d:f3:c3:4f:94:31:
                    53:25:5d:27:e9:68:3d:d1:ba:56:7c:de:6b:78:c3:
                    0a:16:1e:af:6c:cb:57:22:0d:cc:ea:89:cc:6a:ec:
                    87:e6:68:e7:60:fc:97:a4:cb:bc:fb:9a:67:fa:36:
                    57:09:fe:c9:9c:01:06:bd:4d:7b:35:a0:0c:24:fa:
                    41:a5:c8:92:6f:a0:fa:3c:d9:83:5c:a2:48:7a:44:
                    8e:83:bb:71:cc:20:43:05:24:1b:4a:14:b2:23:a0:
                    9e:52:df:1b:f9:c9:a8:52:a9:6e:f5:5a:05:56:7c:
                    85:5a:0b:7a:4e:02:2a:a0:a4:c5:65:4b:c9:01:75:
                    ce:7a:a7:28:82:8d:bd:f5:67:6d:d1:d1:f4:31:fb:
                    80:bd:50:a8:a1:ff:29:a1:5f:88:dd:2b:60:af:58:
                    07:2b:35:ee:ff:8a:ac:bd:8f:42:5e:5f:46:a9:e4:
                    94:23:6a:64:71:ba:5a:ad:47:49:42:fd:95:5f:f6:
                    99:6a:98:14:7b:3e:50:2c:d7:4c:e3:52:71:c5:f9:
                    b3:ff:32:d4:a2:f1:1d:ae:cd:1e:3f:c0:33:63:c8:
                    78:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A5:50:94:F4:65:64:6E:54:5E:83:CB:23:A5:3B:18:88:18:C0:B2
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:c1:53:9f:25:ad:c7:dc:bb:ea:05:0c:85:17:c2:44:62:55:
         f1:ad:73:3b:76:ac:7b:94:2e:35:c7:d5:ef:74:13:dc:57:c7:
         01:6c:b1:cd:96:97:e8:f3:e0:12:ee:76:c5:99:28:1e:04:12:
         a4:d3:20:45:39:59:c0:fc:2e:8f:6d:e2:db:0a:7c:9d:51:26:
         9a:8d:5e:f7:62:60:ae:94:00:bf:c3:74:f0:48:80:47:fd:1b:
         eb:3b:a5:ee:9e:ad:e0:0f:c0:44:95:90:5f:4a:3e:d5:36:35:
         51:48:66:7b:f4:b3:a4:b8:c4:74:ad:17:6e:85:0f:90:69:ea:
         1d:67:e4:fb:e1:c7:16:17:8a:85:1b:71:5c:f8:b4:11:4f:f7:
         c2:93:8a:9b:1a:1e:31:91:94:dc:33:2e:c4:f7:f6:a2:d0:77:
         b2:98:d0:17:7e:b2:06:8a:50:bb:2d:30:b8:8e:4f:30:b3:58:
         d8:9b:6c:4d:92:1e:f1:6d:e8:bf:40:55:fa:c2:6f:4b:03:3b:
         63:f4:f8:3f:2e:2e:ed:f7:a5:8f:d1:a5:83:b6:f9:44:b9:48:
         f9:7b:ab:a8:2d:0b:f7:20:dc:17:df:1c:8a:60:44:cf:18:95:
         75:0d:48:19:64:ed:83:6a:e7:2e:0c:1a:d0:c6:4d:98:e7:48:
         62:22:b5:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 19:29:11 2026 by rpki-client