Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
File:                     vAB4on8QAyY8TFYbAlB2by9Sbn0.mft (raw, json)
Hash identifier:          SGIZ63fAnNksHkCsuWbQ6d1p/OazItA7XeTcIKjTKco=
Subject key identifier:   45:CB:4A:41:AF:BC:32:FE:CB:FF:89:96:14:2D:B4:39:85:C3:94:3B
Authority key identifier: BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D
Certificate issuer:       /CN=bc0078a27f1003263c4c561b0250766f2f526e7d
Certificate serial:       019E98F199F7401C853961F406999A29CF88
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
Manifest number:          06E5
Signing time:             Fri 05 Jun 2026 18:00:30 +0000
Manifest this update:     Fri 05 Jun 2026 18:00:30 +0000
Manifest next update:     Sat 06 Jun 2026 18:00:30 +0000
Files and hashes:         1: EJFSOtkmc_lWhhNXUUs4nruRB1Y.roa (hash: mFAyY+U8ccrimuAI66qBOmKYa7OrPg3wRggOsTclU6Q=)
                          2: vAB4on8QAyY8TFYbAlB2by9Sbn0.crl (hash: HsKNWfHnZeRYskRKY6GXKPnDpsMzMIxyYV61E9xlvwE=)
                          3: zafpGp_sXGMh4yV6m5qLy7sLUpc.roa (hash: 2igpnziXWmq3SSWSag4FaHfVQQZsNnQ4/MO8icdVPHM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 06 Jun 2026 17:49:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:98:f1:99:f7:40:1c:85:39:61:f4:06:99:9a:29:cf:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0078a27f1003263c4c561b0250766f2f526e7d
        Validity
            Not Before: Jun  5 18:00:30 2026 GMT
            Not After : Jun  6 18:00:30 2026 GMT
        Subject: CN=45cb4a41afbc32fecbff8996142db43985c3943b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:de:6b:0a:94:c9:11:59:34:3b:6b:99:59:e0:
                    51:9f:cb:05:03:17:4e:50:79:5f:01:89:8e:4d:7f:
                    be:71:82:ff:08:df:57:39:fe:f5:ce:16:80:72:ef:
                    4d:79:e2:62:30:f5:f2:29:1f:be:80:fd:42:57:42:
                    b9:76:5a:16:ad:92:ef:e2:34:d1:a8:7c:7a:d6:cf:
                    68:f1:9c:dc:f9:0d:b4:f2:eb:8b:98:72:2b:b5:bf:
                    30:ed:d3:d5:ae:5a:68:0b:fd:24:ac:9d:c1:76:64:
                    d9:82:33:f1:84:fd:c8:42:f6:8e:18:89:40:1a:0f:
                    3a:c2:11:85:cd:44:86:f4:5f:01:93:84:9c:87:7b:
                    d1:c1:37:8d:71:c6:9d:87:5e:fe:f4:35:32:a9:91:
                    da:e5:17:94:2f:8e:57:9a:f4:85:70:79:5a:47:01:
                    78:fd:86:3d:11:f0:67:5e:5f:33:06:65:de:ba:a4:
                    cb:49:51:e9:2d:e7:1b:c5:d4:a4:32:c6:c7:df:f5:
                    b8:e3:4d:2f:4e:f1:af:72:47:4d:cb:68:1f:ae:3f:
                    67:47:89:27:0e:cb:a5:9f:37:9c:6e:44:b9:60:d6:
                    34:84:23:12:1d:f6:3d:fe:29:be:74:3d:d6:b7:71:
                    97:36:f0:fd:e9:f5:a1:2d:3b:82:09:f0:76:de:cf:
                    97:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:CB:4A:41:AF:BC:32:FE:CB:FF:89:96:14:2D:B4:39:85:C3:94:3B
            X509v3 Authority Key Identifier:
                keyid:BC:00:78:A2:7F:10:03:26:3C:4C:56:1B:02:50:76:6F:2F:52:6E:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vAB4on8QAyY8TFYbAlB2by9Sbn0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/c15ba7-d82f-4dda-903c-c14aac41a1c2/1/vAB4on8QAyY8TFYbAlB2by9Sbn0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:31:82:9b:89:6f:34:ac:ba:21:6a:a3:b1:75:68:ed:a4:
         53:d7:a5:f4:69:21:7e:05:13:76:e9:f0:28:44:a1:5f:a8:27:
         14:0e:f5:0c:d5:af:bc:3a:04:5f:19:16:af:5c:85:5e:ad:43:
         ed:80:68:e9:bc:e4:e8:47:29:08:d0:42:9d:bb:f7:06:03:b0:
         32:34:69:12:3a:b7:9b:12:77:83:db:f4:0d:02:ca:ad:c5:3b:
         29:c6:e5:79:31:86:26:e6:2f:d3:8a:94:a3:96:7f:1c:65:0f:
         46:67:97:f5:ad:42:87:ea:cf:f7:31:f3:a1:f1:f6:a4:bf:a2:
         e7:6b:44:ed:4a:cd:72:67:5c:48:db:d9:99:c4:13:2d:a6:d1:
         3f:bd:86:4e:d0:4f:67:07:bc:a1:3d:94:6d:ff:43:4f:46:2f:
         a5:91:18:57:a3:68:49:c2:c9:bf:55:1c:02:15:34:df:b3:13:
         d6:32:e6:b8:a6:0f:f5:4d:a5:aa:13:33:4c:47:65:a8:90:a8:
         2b:2f:d3:c3:0d:16:04:f5:88:0e:fe:00:7b:ff:37:bb:1a:7e:
         df:7a:76:74:b4:9d:6b:ce:9e:a1:f2:59:97:5f:f8:a0:59:7b:
         97:46:0a:94:bc:e5:fe:b2:fa:e3:ca:8a:73:58:4d:71:f1:55:
         a6:1a:f8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 02:33:11 2026 by rpki-client