Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File:                     VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier:          Hd1V+7MZZW+RUMd4hBGCp3Drr7hmBDG3znew8ic46dw=
Subject key identifier:   38:95:62:37:7D:18:4F:12:65:22:69:FB:0B:44:F2:C7:DC:0E:21:57
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer:       /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial:       019EB92124EF6502AA53736B04B0DF89E744
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number:          04EC
Signing time:             Fri 12 Jun 2026 00:00:17 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:17 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:17 +0000
Files and hashes:         1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: iUd0VHOzB5/ybxR5z0JntdLWhwfJ91Bo++OL6REu9S4=)
                          2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:24:ef:65:02:aa:53:73:6b:04:b0:df:89:e7:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
        Validity
            Not Before: Jun 12 00:00:17 2026 GMT
            Not After : Jun 13 00:00:17 2026 GMT
        Subject: CN=389562377d184f12652269fb0b44f2c7dc0e2157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:21:b8:6e:b2:66:fb:28:d7:f5:ec:e2:f4:7f:
                    72:4d:06:97:7a:63:ce:d1:08:85:e4:81:5a:88:47:
                    2f:7e:31:e8:ee:85:a1:8f:77:f8:95:f3:74:3c:c7:
                    d1:48:71:a1:80:b1:3c:36:89:f0:fa:c7:dd:d0:78:
                    a8:7a:7a:8f:13:f7:cb:45:04:14:88:f3:5b:9b:75:
                    e8:1d:84:e0:e0:9b:de:6e:f7:bf:79:dc:c1:b1:38:
                    5b:f7:69:bf:6f:4b:85:ed:c2:46:06:4a:1f:ad:6c:
                    2d:9d:5d:b1:6d:7e:20:49:02:3a:59:e9:4d:0e:07:
                    65:0f:34:46:0e:7c:eb:2a:8a:94:83:0a:3f:26:3d:
                    2d:2c:fb:29:00:ed:54:6a:26:f2:9e:ca:2e:11:12:
                    90:03:1e:d3:d6:72:27:77:af:1b:21:dd:03:8d:92:
                    91:a8:ea:0c:39:c6:70:61:01:b3:50:1d:d4:ae:20:
                    22:ed:1f:71:07:df:56:bf:ca:f8:75:37:8a:57:f8:
                    86:b5:7c:65:d7:99:6b:85:61:eb:6d:a3:9c:a3:72:
                    9d:59:cc:68:d2:3b:08:be:85:01:4e:88:1a:9c:e9:
                    59:41:9a:d8:42:13:1c:ce:c7:44:c0:40:2e:28:ee:
                    9d:d7:69:f8:5d:b7:3a:3b:00:1a:3c:63:41:df:83:
                    14:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:95:62:37:7D:18:4F:12:65:22:69:FB:0B:44:F2:C7:DC:0E:21:57
            X509v3 Authority Key Identifier:
                keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:e6:95:5c:2f:7d:f9:2a:0c:1c:2d:8f:89:5d:3f:40:cf:8d:
         0a:91:75:5a:b6:9e:1b:ca:ff:e7:06:e5:72:f0:3a:c2:5b:03:
         22:fe:c0:d6:a6:95:60:7b:71:5d:5f:b0:dc:43:b4:fc:b0:66:
         a4:28:86:4f:cd:2a:cc:b1:a6:c3:0b:8e:ac:f6:f1:75:46:44:
         7b:0e:19:3a:d3:50:a7:a1:79:47:19:ce:6c:fe:23:1b:18:57:
         ba:b7:df:81:32:9b:31:df:5c:20:51:ec:29:2a:ff:c8:d6:48:
         74:6e:66:d4:e4:99:c4:78:7a:e8:49:d1:ea:46:e5:2c:a9:e9:
         f1:24:64:1d:c0:73:a7:06:68:07:78:03:c0:b2:e0:5e:13:c8:
         f0:72:c3:04:e8:3c:5f:b1:f7:4b:b1:1b:cb:71:f1:e6:14:c9:
         97:22:25:76:1f:8b:94:07:e0:a7:72:11:e3:64:99:62:00:e9:
         65:5a:7c:a9:4c:17:dc:e5:61:c5:71:64:af:26:21:bc:41:ca:
         27:73:50:96:49:61:eb:46:9f:80:c9:1b:32:e9:1f:59:33:3c:
         70:af:8c:80:05:d3:52:59:d8:59:99:20:2c:60:d2:bf:a2:80:
         fe:c0:48:7f:99:04:56:ac:a9:c6:ca:b2:67:b6:df:b0:36:46:
         5d:5a:46:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ65ISTvZQKqU3NrBLDfiedEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz
MDkwOGMwHhcNMjYwNjEyMDAwMDE3WhcNMjYwNjEzMDAwMDE3WjAzMTEwLwYDVQQD
EygzODk1NjIzNzdkMTg0ZjEyNjUyMjY5ZmIwYjQ0ZjJjN2RjMGUyMTU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8yG4brJm+yjX9ezi9H9yTQaXemPO
0QiF5IFaiEcvfjHo7oWhj3f4lfN0PMfRSHGhgLE8Nonw+sfd0HioenqPE/fLRQQU
iPNbm3XoHYTg4Jvebve/edzBsThb92m/b0uF7cJGBkofrWwtnV2xbX4gSQI6WelN
DgdlDzRGDnzrKoqUgwo/Jj0tLPspAO1UaibynsouERKQAx7T1nInd68bId0DjZKR
qOoMOcZwYQGzUB3UriAi7R9xB99Wv8r4dTeKV/iGtXxl15lrhWHrbaOco3KdWcxo
0jsIvoUBToganOlZQZrYQhMczsdEwEAuKO6d12n4Xbc6OwAaPGNB34MUzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiVYjd9GE8SZSJp+wtE8sfcDiFXMB8GA1UdIwQY
MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt
M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy
LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgeaVXC99
+SoMHC2PiV0/QM+NCpF1WraeG8r/5wblcvA6wlsDIv7A1qaVYHtxXV+w3EO0/LBm
pCiGT80qzLGmwwuOrPbxdUZEew4ZOtNQp6F5RxnObP4jGxhXurffgTKbMd9cIFHs
KSr/yNZIdG5m1OSZxHh66EnR6kblLKnp8SRkHcBzpwZoB3gDwLLgXhPI8HLDBOg8
X7H3S7Eby3Hx5hTJlyIldh+LlAfgp3IR42SZYgDpZVp8qUwX3OVhxXFkryYhvEHK
J3NQlklh60afgMkbMukfWTM8cK+MgAXTUlnYWZkgLGDSv6KA/sBIf5kEVqypxsqy
Z7bfsDZGXVpGyw==
-----END CERTIFICATE-----
Generated at Fri Jun 12 08:30:41 2026 by rpki-client