Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          mRV8YAX3NRYOOONqVrMIAfLEc1hi4TfweK7X+R9mKtc=
Subject key identifier:   D0:68:9B:0D:50:C9:FE:A6:3A:F0:F8:45:BE:06:18:98:16:4A:69:0F
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019EB5450B4A7780A891FDC9D3D485AA9AB4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          14ED
Signing time:             Thu 11 Jun 2026 06:01:01 +0000
Manifest this update:     Thu 11 Jun 2026 06:01:01 +0000
Manifest next update:     Fri 12 Jun 2026 06:01:01 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: s7iDoc9M2+A7DRY3cNyGTSVjyPa1BIMnv2BJj0uB2Ms=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 06:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b5:45:0b:4a:77:80:a8:91:fd:c9:d3:d4:85:aa:9a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Jun 11 06:01:01 2026 GMT
            Not After : Jun 12 06:01:01 2026 GMT
        Subject: CN=d0689b0d50c9fea63af0f845be061898164a690f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fe:1b:f0:67:2c:a6:97:ee:0c:cc:63:3d:1a:
                    49:39:9d:53:fb:c8:f6:55:d3:69:95:91:78:3e:fd:
                    fb:96:0f:07:0f:a5:35:15:36:04:36:cf:85:8f:9c:
                    cc:7e:65:a5:58:cc:a1:69:ff:3d:a5:06:cc:16:86:
                    b8:f9:9a:ae:1a:c2:31:1d:8e:a2:3e:dd:0d:e7:6b:
                    45:fb:ba:85:57:7c:ac:5d:a1:3c:3b:75:dc:13:3f:
                    9a:25:1f:4c:79:df:0d:72:d1:94:bc:14:ca:a8:ad:
                    3a:89:a6:6f:28:fd:a6:6a:df:11:95:14:6a:7e:90:
                    8b:1d:e6:a4:dd:02:f3:66:7d:ee:50:1d:14:e5:d4:
                    32:be:07:49:33:45:2a:d6:56:5a:72:23:0b:cf:ab:
                    65:aa:12:12:2d:5a:65:80:bf:e8:59:15:35:e1:7b:
                    a7:98:71:2a:cd:1e:34:4b:1e:d9:00:c9:17:d4:e9:
                    14:66:5b:ba:3a:fa:24:0f:04:d7:4b:e0:04:ce:87:
                    6f:50:98:a9:a7:6b:f9:ba:cd:86:3b:be:37:4b:42:
                    0f:28:39:ca:c2:d8:e5:4f:43:d7:b8:57:f3:67:25:
                    8c:a2:9c:5d:1a:99:70:31:24:44:f4:c9:55:55:e2:
                    d0:d4:c5:a3:08:81:19:15:2b:07:29:80:1f:19:36:
                    ae:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:68:9B:0D:50:C9:FE:A6:3A:F0:F8:45:BE:06:18:98:16:4A:69:0F
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d5:fd:8b:e3:b3:ff:bb:52:6e:e1:75:8d:e1:47:19:47:27:1f:
         4a:ef:e1:b4:b3:81:c2:ad:4c:d8:a5:78:b5:47:88:de:d0:9e:
         36:02:22:69:17:c7:0b:ba:d3:ca:93:86:e4:ed:a8:8f:c7:24:
         94:66:81:6b:71:52:84:b4:9e:3f:ae:e4:aa:ca:e6:6f:37:86:
         3a:4c:e2:d0:cc:98:63:88:39:0c:1b:20:77:07:e2:91:3e:82:
         c2:eb:dc:76:88:09:98:db:45:8a:ed:6f:78:d3:30:b2:10:c6:
         f1:ee:a4:b0:98:9f:30:64:ff:08:43:8f:7d:91:75:82:c4:08:
         de:60:ee:e7:11:c6:56:b5:9d:fa:96:4e:b6:0a:8d:0b:ab:f5:
         55:01:ff:59:79:24:8e:b5:23:7e:49:18:ec:c8:b1:f0:39:47:
         ea:08:f2:5a:4f:f4:58:20:ee:99:0a:87:61:9b:6d:97:de:0a:
         f9:e0:2f:f8:58:5a:0e:54:db:b2:af:d3:52:7f:47:47:b8:c0:
         e7:3f:61:8a:16:cf:aa:b6:d0:95:b6:a1:11:c7:57:85:47:9a:
         9b:ea:b3:8c:44:2e:50:12:25:cd:6d:32:f3:24:4c:94:e9:ef:
         73:2c:40:9c:dd:52:65:2c:a7:a6:b4:84:85:e2:d3:11:f5:56:
         9c:f5:70:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 13:33:04 2026 by rpki-client