Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File:                     VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier:          OOYrZOB/54ZvGBSdVF8oNJMfCn5opPp41Ns2YF+FxDE=
Subject key identifier:   15:76:22:9B:9A:EC:D0:E6:FC:75:65:12:31:56:C9:3F:CC:8A:C1:CB
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer:       /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial:       019E29CBFB7E8245FF2D598ED75C8AFCFB1C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number:          0701
Signing time:             Fri 15 May 2026 04:01:34 +0000
Manifest this update:     Fri 15 May 2026 04:01:34 +0000
Manifest next update:     Sat 16 May 2026 04:01:34 +0000
Files and hashes:         1: 6EkJKay6ASec3Uw_czHATgEyfKA.roa (hash: 2c9WHQTBPJnNJtn4QC9p7CmncMVB1cW6dCt+0dg0vCE=)
                          2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: fmKBs0krXOgk+Ny75SB/H4L36okXuQholLKsATYDO9o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:cb:fb:7e:82:45:ff:2d:59:8e:d7:5c:8a:fc:fb:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c7018034725963a971c96a8caab598cae638a
        Validity
            Not Before: May 15 04:01:34 2026 GMT
            Not After : May 16 04:01:34 2026 GMT
        Subject: CN=1576229b9aecd0e6fc7565123156c93fcc8ac1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c5:05:28:f2:a8:45:15:47:63:e9:88:f7:7d:
                    5f:a2:62:bf:ab:68:1b:d8:c8:6e:02:20:0a:bd:0a:
                    f8:50:c2:0c:57:09:07:9b:d5:05:b3:e7:2e:7b:cb:
                    f8:2c:cf:a5:e3:2e:ff:9d:ed:d5:d6:4f:fa:25:f6:
                    ef:2c:bd:99:02:c8:ff:e0:15:6b:18:4d:54:3a:0a:
                    76:01:6e:c9:8e:ea:30:69:65:81:2e:2f:19:74:59:
                    09:66:98:d7:0c:48:8e:3b:c0:b7:8b:1f:97:29:25:
                    85:ea:f7:ab:20:c1:36:d0:3e:10:d9:f6:0c:87:e6:
                    3f:e9:56:d9:e6:b2:aa:7e:6f:ab:9f:2a:d4:c1:93:
                    97:7e:29:07:61:3c:c9:20:f1:e7:f2:50:04:77:a2:
                    40:a2:ca:be:a0:b3:14:c7:e6:0a:a2:2e:e7:30:d9:
                    9a:9f:68:8a:b7:8b:6c:fa:34:71:80:54:9a:14:8e:
                    69:5a:44:2c:1c:54:7b:72:67:57:dd:1f:40:00:0c:
                    7b:e3:a7:b9:e3:b6:a9:dd:de:7e:17:b3:6d:0d:ba:
                    98:da:a6:7b:31:fd:31:c7:f0:f3:b0:b0:74:28:7b:
                    32:7b:1c:5f:01:85:6b:a3:61:42:c9:74:8a:5b:aa:
                    47:fa:27:54:18:2a:38:83:34:31:e5:b7:21:53:a9:
                    32:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:76:22:9B:9A:EC:D0:E6:FC:75:65:12:31:56:C9:3F:CC:8A:C1:CB
            X509v3 Authority Key Identifier:
                keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:fe:1e:de:f1:b3:02:b1:91:41:56:b2:61:ef:31:e5:ed:e5:
         ad:31:60:08:39:af:90:27:b5:a1:6f:3c:a5:03:6c:de:0c:a1:
         49:fb:42:9a:27:3c:5a:37:2c:a8:a5:bc:8a:88:26:91:ac:f4:
         ab:9b:59:ef:c8:4b:9a:e6:18:ed:f0:13:e8:79:66:78:46:8e:
         1a:66:aa:ed:28:cc:e5:34:0a:78:9f:b9:3b:fb:b6:02:f6:e4:
         ac:3d:73:5d:75:c4:7f:65:e1:70:a1:f4:6e:da:4b:26:5b:1e:
         aa:65:4e:ba:05:50:ec:e9:bf:39:02:85:8c:2d:18:4d:d3:31:
         35:7d:f6:73:23:bf:22:84:0e:f6:0e:6f:75:ce:9a:d1:05:03:
         42:c4:66:7a:5c:18:13:ea:a4:93:4b:a0:dc:13:16:e3:47:f5:
         50:e6:90:fb:f7:a1:9c:74:0e:90:5d:a6:8d:ab:c7:cc:6b:1c:
         ae:59:eb:fb:99:22:40:0c:83:57:01:26:11:fa:e0:64:e0:60:
         fe:99:4e:ff:84:a1:50:0c:2e:76:fa:6d:3d:44:68:e3:d4:7a:
         1f:d3:00:9f:75:1b:97:59:6d:35:ed:e4:4c:35:79:5e:dc:a3:
         56:c6:5b:ae:60:ab:8f:cf:a7:f8:3f:94:86:2e:94:19:ba:90:
         28:11:4d:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 11:58:09 2026 by rpki-client