Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File:                     vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier:          sM3vP2gpdWbzLl/97L1+qR6VuCWYuxFLacKZeV6TK2w=
Subject key identifier:   77:D7:6F:C3:0F:24:63:2C:3D:62:D9:4E:C6:29:D4:A1:FE:CA:D0:FE
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer:       /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial:       019EB9FDB0F4CF4D543B2ED955C6E103A9D6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number:          040C
Signing time:             Fri 12 Jun 2026 04:01:11 +0000
Manifest this update:     Fri 12 Jun 2026 04:01:11 +0000
Manifest next update:     Sat 13 Jun 2026 04:01:11 +0000
Files and hashes:         1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: 6qAJxWnWFg5LD002jr5NS5lcnVpOh7uoAkF0vlCPTh8=)
                          2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:b0:f4:cf:4d:54:3b:2e:d9:55:c6:e1:03:a9:d6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
        Validity
            Not Before: Jun 12 04:01:11 2026 GMT
            Not After : Jun 13 04:01:11 2026 GMT
        Subject: CN=77d76fc30f24632c3d62d94ec629d4a1fecad0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:5c:3f:5a:86:c5:40:c3:0e:82:36:62:11:d5:
                    8a:0b:a0:47:50:fc:6f:b6:ac:ac:cb:70:64:ef:9f:
                    a6:ac:c4:41:5b:20:b3:a9:f4:ca:d6:c3:da:87:2d:
                    c8:21:a9:98:73:4d:36:00:84:db:92:6a:fa:75:82:
                    71:08:67:36:cb:e1:10:42:2a:25:9f:3c:e1:a3:c0:
                    b6:bb:04:41:ae:d1:32:32:e0:15:be:57:03:44:19:
                    f3:d0:70:d1:5a:07:87:fd:65:c9:a9:2b:84:01:64:
                    88:66:c5:ae:71:4a:8c:20:ac:77:6d:17:f5:80:95:
                    f0:3c:1e:54:f5:db:99:0c:09:c4:59:29:e9:8b:25:
                    8e:78:24:35:7a:5b:22:e8:48:69:ec:bf:06:e8:a1:
                    4d:49:6c:23:a4:8d:3b:2f:d5:40:75:02:3c:3e:9d:
                    86:9a:71:6d:59:3f:fd:4b:81:4f:f0:54:78:ee:9e:
                    d9:32:48:c3:90:8e:cc:71:94:56:86:f4:e7:17:3d:
                    de:11:1b:1f:d6:47:1a:36:8f:d6:58:2a:35:af:54:
                    41:5f:63:9d:df:ea:88:78:54:f6:e1:6c:5d:86:58:
                    01:c0:42:20:3a:0f:1e:d3:91:75:ce:7e:6f:fc:96:
                    21:81:a0:3c:65:5c:b7:38:df:2e:d9:90:7d:00:4a:
                    67:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:D7:6F:C3:0F:24:63:2C:3D:62:D9:4E:C6:29:D4:A1:FE:CA:D0:FE
            X509v3 Authority Key Identifier:
                keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:97:65:94:42:3e:33:2c:fc:62:03:46:4d:6e:da:2e:7c:ec:
         b1:03:b5:cb:d0:1a:b6:01:fe:dc:2f:28:10:ad:41:42:59:f4:
         0e:a0:2b:36:ae:7f:3e:db:00:34:07:11:c5:6b:79:57:cf:23:
         4b:ce:50:4c:a7:ff:a7:fe:51:70:ca:bb:b3:5e:4f:dd:4e:8b:
         10:df:77:b0:11:a0:32:b6:ec:97:f8:41:42:71:69:44:ab:b9:
         54:a8:d0:62:91:ea:93:9d:b4:43:4d:92:25:47:ec:4b:d9:4b:
         b5:b0:c9:87:88:c2:a2:97:7e:01:9c:8e:52:a2:0b:fc:5a:5a:
         7a:7d:14:dc:e3:4a:cd:25:5f:89:49:fc:f7:c4:a9:92:6c:4a:
         60:8c:e6:30:2c:83:37:2f:a4:5d:81:51:91:5f:33:97:fe:fc:
         f3:99:79:29:11:85:72:36:dc:22:8d:0f:92:c9:98:73:88:b4:
         8d:56:44:d2:dc:3d:02:37:f6:04:32:9b:02:d3:6f:f4:b5:6c:
         4d:84:f4:3c:47:2d:14:be:f8:51:d6:59:86:20:dd:ef:32:11:
         41:df:58:d1:a4:bc:3a:c1:c0:38:d6:af:17:87:c4:43:56:20:
         54:8e:96:87:66:1a:1d:d3:22:0b:cc:6c:cc:33:4f:0c:de:d9:
         88:92:0c:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:10:05 2026 by rpki-client