Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
File:                     vE4hsn1vhOvdiIxo55zlVchG2ss.mft (raw, json)
Hash identifier:          gOkX01dzVGJg7VYtN59HVM3852udcd6xZxgpu88FTpA=
Subject key identifier:   B4:5F:BB:E5:E2:D6:1D:0C:AD:B3:40:6F:7B:73:34:72:D4:53:71:BA
Authority key identifier: BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB
Certificate issuer:       /CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
Certificate serial:       019F36A9459443B824CDDC587C6803192F09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
Manifest number:          1999
Signing time:             Mon 06 Jul 2026 09:01:30 +0000
Manifest this update:     Mon 06 Jul 2026 09:01:30 +0000
Manifest next update:     Tue 07 Jul 2026 09:01:30 +0000
Files and hashes:         1: Wl_TNY94WK2rcly6xRH5gNybF90.roa (hash: l+YPId6RKLguzaCBjAcOhdZYbBy4KT7l6mfJmlUnqwM=)
                          2: tW2R0GRUoyNtK2_YkFvWz0zKBzc.roa (hash: K1KWr86aOYdf4AA1AHrR6w9+58FTKX+8pbTwDlMtG2M=)
                          3: vE4hsn1vhOvdiIxo55zlVchG2ss.crl (hash: DDExeSlNvUguvLaeewS5fCz+OW9EFcXbFOFMjJIYv8s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 Jul 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:36:a9:45:94:43:b8:24:cd:dc:58:7c:68:03:19:2f:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4e21b27d6f84ebdd888c68e79ce555c846dacb
        Validity
            Not Before: Jul  6 09:01:30 2026 GMT
            Not After : Jul  7 09:01:30 2026 GMT
        Subject: CN=b45fbbe5e2d61d0cadb3406f7b733472d45371ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:66:f5:e4:a7:ef:5a:0e:3d:0d:3e:01:51:69:
                    51:cc:6a:d6:86:ab:12:1d:b6:c9:b8:61:3b:9e:e6:
                    6d:e7:c3:87:c2:42:4d:9c:be:26:07:af:b3:cf:fd:
                    51:a6:41:51:15:e1:62:78:53:16:dd:bf:85:8d:ce:
                    3e:ae:b5:c0:b1:18:5c:18:75:ab:80:51:17:fe:2e:
                    c8:b1:9b:45:2c:52:c2:b4:f7:3c:b4:b0:19:2f:4a:
                    25:d7:0f:d1:32:dd:45:3b:4e:a2:ee:8a:ac:1d:a5:
                    0e:cc:31:2e:21:e4:cd:f3:b7:10:24:33:28:87:69:
                    bf:0c:e5:56:35:e4:79:cb:e4:81:8b:b3:d6:60:d3:
                    d8:c0:e6:8f:1e:eb:f6:7d:21:48:d9:05:bd:0c:97:
                    b7:a3:7c:1b:41:f3:7b:9d:1e:3a:74:c4:03:28:27:
                    6b:dd:30:8e:e0:83:14:bb:ac:0b:9a:ac:8a:48:61:
                    cc:0b:79:dc:c8:4e:65:ac:e4:20:d9:4b:0b:e2:97:
                    24:f8:59:4e:d5:4c:c3:9f:11:6e:3d:d2:8d:f6:b5:
                    f9:86:28:e2:38:88:52:ed:58:a0:53:13:35:2a:ff:
                    8a:c2:44:b7:93:60:71:fa:c6:f4:24:1f:0e:61:a8:
                    1e:d1:8c:fc:df:5a:06:ef:08:cd:ba:41:61:7d:9c:
                    84:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:5F:BB:E5:E2:D6:1D:0C:AD:B3:40:6F:7B:73:34:72:D4:53:71:BA
            X509v3 Authority Key Identifier:
                keyid:BC:4E:21:B2:7D:6F:84:EB:DD:88:8C:68:E7:9C:E5:55:C8:46:DA:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vE4hsn1vhOvdiIxo55zlVchG2ss.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a0d73d-6564-4142-a6ee-83e73cb25ea5/1/vE4hsn1vhOvdiIxo55zlVchG2ss.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:f2:c2:cd:23:0c:af:f6:a3:c4:65:98:2d:ac:fd:22:ff:a3:
         d5:3e:78:50:25:b0:b6:c2:d4:b2:6b:04:b4:ad:54:8c:34:a9:
         a0:3a:dc:91:16:76:f9:a5:2f:26:fe:9c:39:74:48:15:53:8b:
         2d:ec:28:3e:b5:fb:29:69:30:24:f0:05:53:eb:20:59:3f:d7:
         46:9e:04:9a:31:e8:8b:c2:3b:48:8c:db:a7:4e:1c:fe:f5:cf:
         c0:c5:4d:2a:d9:98:08:0b:fe:7d:97:3c:09:c5:d9:01:94:82:
         20:4e:36:66:4f:18:17:9c:7f:56:45:76:4f:f8:e4:6e:e0:0b:
         f3:00:b0:0b:21:e5:4e:f7:3a:3d:25:94:56:85:ec:f2:b6:26:
         dc:9e:57:0b:33:d3:87:32:25:6f:09:61:ab:25:7a:53:4c:92:
         f5:e5:7e:ee:f6:09:de:1d:b2:b0:ac:6f:19:1c:c5:ac:b0:27:
         a1:03:2f:6f:54:f2:b9:f5:e8:2c:08:62:31:84:f5:fc:86:8e:
         df:b0:25:7a:8d:73:ce:94:02:d2:03:8d:46:06:bf:26:7a:12:
         bc:5b:8b:67:a5:84:ea:df:02:9e:12:c6:8a:78:83:1c:f1:2f:
         32:56:24:32:27:8b:a9:55:5f:62:2e:01:19:4a:93:9a:56:fe:
         b5:47:e3:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:20:31 2026 by rpki-client