Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          aJFiC5zHCE6OsPrf33qH2cGxPYNdpwlRNbrwyuDEP8I=
Subject key identifier:   9E:58:86:B3:CD:BE:C1:52:D8:F4:34:E2:D8:F5:16:CC:D5:82:1F:D9
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       019EB8462116A1B6101D723FC08EDEA2E1C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          18E7
Signing time:             Thu 11 Jun 2026 20:01:04 +0000
Manifest this update:     Thu 11 Jun 2026 20:01:04 +0000
Manifest next update:     Fri 12 Jun 2026 20:01:04 +0000
Files and hashes:         1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: cVIhY0uMh02quQ/QgzbW5xZRLGU6hfXule3CZnfa6bQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:46:21:16:a1:b6:10:1d:72:3f:c0:8e:de:a2:e1:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: Jun 11 20:01:04 2026 GMT
            Not After : Jun 12 20:01:04 2026 GMT
        Subject: CN=9e5886b3cdbec152d8f434e2d8f516ccd5821fd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ce:37:a0:1e:b8:07:14:28:b5:9b:92:8d:c7:
                    35:da:2f:c8:58:bd:08:24:d5:3d:21:ea:b7:9a:d2:
                    5c:8c:ef:7b:db:67:4f:54:e9:54:60:ce:d4:59:b9:
                    ea:ce:6b:69:ea:f5:56:4d:af:6e:75:23:68:92:db:
                    56:de:15:7f:89:4a:f4:02:83:7a:55:92:80:01:d2:
                    4c:88:34:1f:81:ff:a6:48:6d:09:1f:a7:29:59:94:
                    5f:31:a4:80:35:b8:eb:16:e2:e3:12:f6:b5:16:34:
                    5b:14:7a:9d:d9:4c:96:30:50:c1:17:0f:fe:fa:d6:
                    91:75:0f:44:da:68:e4:b4:b4:58:dc:6f:14:27:cf:
                    8a:a4:b7:96:84:f8:3e:39:56:64:42:93:20:4d:41:
                    75:5b:27:b1:0e:ed:64:4c:7b:d6:82:52:81:04:4d:
                    3e:fd:3e:d1:cf:3e:17:b3:90:c2:fa:b9:16:bb:55:
                    99:f4:28:3c:45:e6:02:72:a6:af:08:65:69:d4:23:
                    6f:a1:70:0e:7c:cc:53:79:aa:ac:de:d6:9e:8b:d2:
                    18:0a:ee:f5:5c:f8:b1:22:ef:3b:dc:1a:dc:15:24:
                    51:7c:70:51:3f:5e:3b:a7:1d:94:ff:12:31:a7:9e:
                    3c:83:91:bd:d3:9b:a8:c8:3d:a3:8b:38:55:22:3b:
                    d5:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:58:86:B3:CD:BE:C1:52:D8:F4:34:E2:D8:F5:16:CC:D5:82:1F:D9
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6f:ef:21:35:af:c5:49:6a:e5:5e:00:aa:b2:3f:19:86:4f:
         45:be:ee:4e:56:8f:11:e3:5e:e9:45:67:58:4c:1e:e9:cf:a8:
         5d:1c:52:cf:aa:e3:d3:7b:09:4f:1e:d6:a2:32:0b:b4:f1:6c:
         1e:f2:12:e8:7e:83:f6:8a:0f:c8:66:7e:54:99:f7:f5:ba:7e:
         ed:47:4d:f3:64:97:3f:8f:13:4d:6f:50:a6:6f:b0:0b:f0:31:
         97:68:cf:eb:84:4f:d9:8a:1d:e0:72:0e:ce:b3:b0:8d:b7:1d:
         fb:cd:6a:02:2a:92:ee:c8:8d:a2:13:d7:e8:b7:dc:e2:c3:52:
         4e:00:96:a9:eb:e6:5e:13:09:f8:79:fc:69:3f:51:19:ed:19:
         f8:9a:8c:2a:d4:6c:1e:78:0a:3a:c6:01:2e:22:9e:44:84:6d:
         4a:c0:9d:df:96:b9:07:aa:6e:7d:c5:7a:6b:94:d1:76:fa:c6:
         6b:aa:d2:60:ce:f1:ca:99:bb:b3:af:4b:26:be:c2:ad:9a:f1:
         1f:1b:cf:e7:14:22:08:de:62:a1:57:94:12:62:72:eb:d8:fc:
         b8:3c:6b:fa:3e:df:76:1a:3d:96:8d:16:22:74:81:72:e9:24:
         f3:76:70:b9:57:75:23:b7:4e:c4:b8:25:f9:04:fb:69:0f:a6:
         c0:2b:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:30:08 2026 by rpki-client