Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File:                     vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier:          cSsLgdwPnL5wwhZ5tTCuR6TLS/WoUwxFjRW9+5qkSP8=
Subject key identifier:   A9:E1:B0:13:5E:29:17:41:75:E4:B9:09:DD:4E:24:A3:AD:CD:9D:B4
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer:       /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial:       019F1503958AD84B18284CC0B0447FCDB41E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number:          024A
Signing time:             Mon 29 Jun 2026 20:13:03 +0000
Manifest this update:     Mon 29 Jun 2026 20:13:03 +0000
Manifest next update:     Tue 30 Jun 2026 20:13:03 +0000
Files and hashes:         1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=)
                          2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: InQsRazEz7je84nZqmQ+xVcbtnAzqraQ5PrwDJMyLqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 20:13:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:15:03:95:8a:d8:4b:18:28:4c:c0:b0:44:7f:cd:b4:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
        Validity
            Not Before: Jun 29 20:13:03 2026 GMT
            Not After : Jun 30 20:13:03 2026 GMT
        Subject: CN=a9e1b0135e29174175e4b909dd4e24a3adcd9db4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:91:01:71:b8:4b:f4:b3:08:d1:e3:ae:0a:26:
                    5a:32:cb:82:06:e8:a7:89:fe:ed:73:83:31:71:2b:
                    f0:95:80:43:7b:d8:fa:e7:46:c9:f0:3d:7a:d6:24:
                    14:16:46:61:03:c3:78:3b:44:71:79:b3:e8:fd:c7:
                    ff:45:b3:6f:bc:88:c2:7f:50:c9:35:3c:15:73:44:
                    37:d0:a9:bd:70:cc:a5:57:c6:f3:bb:23:ce:b0:6e:
                    26:25:f8:99:e5:28:01:9a:9d:1e:43:53:82:e3:5c:
                    4c:cf:27:50:85:7b:eb:e5:00:0d:4a:25:f2:03:12:
                    48:f9:7c:ca:65:1d:d2:13:a2:ea:ea:46:63:83:6a:
                    d2:f1:c9:32:63:94:7d:13:00:48:f2:25:a7:01:85:
                    ce:f2:59:07:0a:0a:19:11:8c:e8:66:e3:ff:e1:0a:
                    cd:fa:12:f3:ab:66:d3:81:99:97:7b:57:31:39:33:
                    7d:34:54:50:2c:63:40:f9:6c:25:9c:da:a5:da:64:
                    b5:69:60:39:cf:0e:46:3c:eb:04:ac:f8:84:c7:2d:
                    c1:ee:ac:b0:b8:a7:75:33:18:bb:bb:8c:71:f8:b5:
                    f8:81:83:73:0d:ac:fa:7f:8c:72:e1:4e:26:08:ad:
                    f5:ee:fd:01:83:a6:2c:2d:5f:71:75:ac:dd:5b:df:
                    22:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E1:B0:13:5E:29:17:41:75:E4:B9:09:DD:4E:24:A3:AD:CD:9D:B4
            X509v3 Authority Key Identifier:
                keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:b2:da:c8:e5:16:e2:27:4d:68:8b:59:5f:83:a6:a9:a6:75:
         a6:db:67:b2:49:ec:b4:3f:26:81:3d:77:29:69:62:4a:bf:a3:
         97:14:9f:41:a9:84:b8:d8:12:f3:da:07:9f:2f:3a:fe:ee:a9:
         c9:6c:4e:20:67:b8:ce:72:bd:28:9f:b4:16:26:db:bf:38:50:
         5a:8a:97:fb:04:9b:73:5b:0d:a5:2d:a4:43:19:e2:f6:61:bb:
         e5:7b:bc:4e:b9:73:4a:67:0c:33:9d:ed:80:d9:c1:1e:60:46:
         f7:44:a0:6a:5f:20:61:3c:6c:a5:0a:28:a9:bf:8d:94:57:31:
         5d:ea:88:9c:fe:1c:68:6e:2b:92:da:8e:5a:24:a8:8d:ec:a6:
         3b:d3:9f:8d:8b:69:97:79:32:5a:af:88:91:ed:b1:1c:3b:6d:
         2a:17:54:af:c9:0e:e0:08:00:ee:df:4f:a7:92:63:3c:5e:8a:
         19:df:94:19:b9:53:8c:e8:9c:ab:c8:4f:6d:07:f6:0e:b9:de:
         69:2d:b6:31:b8:3d:26:dc:5e:7d:84:9d:09:10:f0:1e:ba:76:
         37:af:eb:8b:05:f2:1e:c1:f4:35:1a:7b:44:f9:33:4f:1b:e2:
         6d:9f:0b:e7:36:fa:ff:bc:50:67:65:6b:c8:f1:be:cb:08:23:
         a1:91:a1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 04:25:28 2026 by rpki-client