Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
File:                     _vMpNgwbb8r79SU6ZX4-nX8iT34.mft (raw, json)
Hash identifier:          CBZLdrM6a97f5adiV9MR6loiHjXn2/5Ck8vJD7O1/aQ=
Subject key identifier:   67:CA:F6:41:B2:15:0D:34:A6:2C:A3:CF:DE:8B:DC:B6:34:73:B1:26
Authority key identifier: FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E
Certificate issuer:       /CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
Certificate serial:       019EB76A7BEF802FB3C58DB755488BE5753B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
Manifest number:          0D8F
Signing time:             Thu 11 Jun 2026 16:01:09 +0000
Manifest this update:     Thu 11 Jun 2026 16:01:09 +0000
Manifest next update:     Fri 12 Jun 2026 16:01:09 +0000
Files and hashes:         1: _vMpNgwbb8r79SU6ZX4-nX8iT34.crl (hash: cYZKPj28H8tsRfZXELlAi4lcLpwJC9ZB93Lk9xXVijo=)
                          2: r1nTX0LgRmtjfVAeBtgzRP18cMQ.roa (hash: 5aRHQvzNe0tqD5uAt+dVRVLQdova5lpY1LHcAUTLXrw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 16:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b7:6a:7b:ef:80:2f:b3:c5:8d:b7:55:48:8b:e5:75:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef329360c1b6fcafbf5253a657e3e9d7f224f7e
        Validity
            Not Before: Jun 11 16:01:09 2026 GMT
            Not After : Jun 12 16:01:09 2026 GMT
        Subject: CN=67caf641b2150d34a62ca3cfde8bdcb63473b126
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:1c:55:0b:a3:1b:14:92:df:9a:6a:cc:7a:47:
                    19:29:86:09:cb:63:4f:f7:28:90:0e:a5:07:51:ed:
                    e2:74:47:ab:8e:3f:cb:a2:fe:aa:72:03:12:eb:e1:
                    64:d1:bd:bb:07:52:71:ee:84:7a:af:0e:6e:1d:8c:
                    88:ca:22:ab:63:13:9f:ae:e8:0b:7a:a2:d8:2c:2d:
                    d0:a2:e6:87:90:fb:c5:7e:10:fc:5d:6f:78:7a:21:
                    9a:d3:27:6a:83:a3:5b:75:ab:32:76:99:6d:f0:11:
                    c7:6e:46:28:04:79:46:11:9e:b0:b3:b9:1e:1f:00:
                    d0:57:d2:5e:5a:4d:65:27:a5:5a:f6:76:1d:5f:f9:
                    28:ab:14:0d:0c:c5:d4:1b:fe:40:75:1b:2c:39:99:
                    45:9d:22:b2:c1:18:75:26:72:f2:0b:b2:8f:9a:5a:
                    28:8e:c8:75:72:68:0c:e7:c0:67:41:35:5f:1f:c3:
                    5f:2c:6c:6b:67:c9:11:78:7f:c9:0a:a9:0c:67:6e:
                    6e:54:c5:9d:0c:0b:d7:0d:ec:da:52:3c:53:41:09:
                    e0:f4:4b:7c:6c:bd:ea:7a:e1:e6:7c:c9:41:47:6d:
                    5c:81:f2:f7:0e:e7:33:e3:f7:e4:b2:5e:5c:48:5a:
                    1b:ae:f8:07:20:30:0f:04:20:0c:cd:e9:a2:49:b4:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:CA:F6:41:B2:15:0D:34:A6:2C:A3:CF:DE:8B:DC:B6:34:73:B1:26
            X509v3 Authority Key Identifier:
                keyid:FE:F3:29:36:0C:1B:6F:CA:FB:F5:25:3A:65:7E:3E:9D:7F:22:4F:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vMpNgwbb8r79SU6ZX4-nX8iT34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/86/ce96f4-d85c-4fc5-9e98-500b8834289e/1/_vMpNgwbb8r79SU6ZX4-nX8iT34.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:21:1c:2d:dc:56:16:e8:41:1d:87:45:26:4a:96:00:6e:4c:
         08:d3:4a:2c:25:80:bb:02:95:18:78:5b:78:61:c4:f4:34:c4:
         de:c8:de:f3:c1:7d:a3:94:4d:57:e9:31:39:fd:7f:e5:33:dd:
         ac:63:3f:4e:51:a2:6f:03:91:e2:c7:37:b0:b0:80:6a:2d:ba:
         21:b5:fe:7f:c7:2f:f0:a6:f5:40:84:a8:70:06:7f:af:ee:e4:
         9d:a7:77:bd:f8:18:07:57:52:e3:b8:c4:3d:01:2c:d9:da:7f:
         60:00:d7:2f:31:f1:2f:ea:6f:4d:91:05:5b:ea:ac:61:b8:33:
         ea:74:6c:8b:c2:88:36:52:84:bf:02:3e:3b:3b:3e:f9:0b:44:
         40:7c:27:cb:67:3b:67:9f:b4:ad:ae:4a:76:c2:89:6b:69:a5:
         78:6f:53:cb:e6:cc:98:80:e7:83:d6:e9:3e:50:a7:a8:83:3d:
         c7:b7:0f:3a:1b:64:55:86:8c:a4:e5:9d:c2:d1:24:f5:39:13:
         9a:89:e9:a7:11:47:79:34:78:76:25:3d:c2:25:6b:e5:a1:e2:
         8b:b0:b9:a0:50:c2:dd:88:7a:e7:f3:a2:5d:e4:e2:94:eb:70:
         14:da:f6:a8:89:6c:f6:e2:4c:69:36:48:2a:80:09:ac:92:67:
         2c:14:64:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 01:10:46 2026 by rpki-client