Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
File:                     vUWuywYtm0RuBUIbwfqvWLsHaew.mft (raw, json)
Hash identifier:          MtluvhCdtSj79R1u4vOUR03aVgW8e7yKBqjiv30GJ1M=
Subject key identifier:   36:44:33:A8:80:D8:59:BD:0A:1F:C1:01:32:35:D0:36:E7:E4:5A:52
Authority key identifier: BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC
Certificate issuer:       /CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
Certificate serial:       019E31179DF7BAEBB2DADB655BBFA77ABD31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
Manifest number:          1041
Signing time:             Sat 16 May 2026 14:01:31 +0000
Manifest this update:     Sat 16 May 2026 14:01:31 +0000
Manifest next update:     Sun 17 May 2026 14:01:31 +0000
Files and hashes:         1: JJCO1QTq-AOaUbrA-MkUpfdC1cE.roa (hash: fVzsbnVjjWl2LyjA+I2JSODFF87TDP7Iwxo6m2pjCvM=)
                          2: vUWuywYtm0RuBUIbwfqvWLsHaew.crl (hash: KynTJIA0hybcxKIrQmtYxnUF9zDI0fZqE+RBq4z84us=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 17 May 2026 12:40:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:31:17:9d:f7:ba:eb:b2:da:db:65:5b:bf:a7:7a:bd:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd45aecb062d9b446e05421bc1faaf58bb0769ec
        Validity
            Not Before: May 16 14:01:31 2026 GMT
            Not After : May 17 14:01:31 2026 GMT
        Subject: CN=364433a880d859bd0a1fc1013235d036e7e45a52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:7e:53:af:77:a2:bf:a4:7b:82:35:1d:67:03:
                    6b:ce:d7:aa:2d:78:68:63:b9:4d:bf:bc:b6:b2:a3:
                    5d:5f:c3:74:3f:10:f5:52:98:98:10:02:ad:76:50:
                    2d:1e:57:2a:ff:0e:d7:34:2e:58:a5:13:86:3f:45:
                    c2:36:49:32:b9:45:29:46:ec:e9:9a:2b:6a:d8:ef:
                    3d:15:ae:01:99:85:64:78:88:88:12:6c:a8:3b:4e:
                    fa:c6:fb:ed:40:3a:96:28:14:e6:a3:6f:ca:67:38:
                    45:b9:d1:83:a4:d4:81:9c:60:5c:dd:7f:8c:8b:0f:
                    cc:85:f9:c6:e8:60:4b:91:9f:5d:23:38:ff:92:7e:
                    18:a0:c5:b1:76:6f:ee:03:49:6d:09:a9:20:39:2c:
                    19:33:cc:9e:1e:af:9f:86:e5:2d:a9:5d:0d:f4:28:
                    4b:43:71:39:c3:9c:07:44:ba:dc:61:0c:06:aa:cf:
                    6b:6e:f9:39:89:87:ca:20:e8:98:12:a1:79:61:e3:
                    c1:32:a2:7f:ed:4e:6c:8a:27:41:8b:7b:09:df:19:
                    31:e0:b2:1b:bf:62:d9:ef:11:7f:9c:43:36:f8:e8:
                    13:48:81:67:86:b6:a6:04:6e:94:4b:9a:a3:47:13:
                    0e:e8:2e:49:ff:1a:be:b2:6c:e0:e7:a6:2d:1f:8c:
                    05:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:44:33:A8:80:D8:59:BD:0A:1F:C1:01:32:35:D0:36:E7:E4:5A:52
            X509v3 Authority Key Identifier:
                keyid:BD:45:AE:CB:06:2D:9B:44:6E:05:42:1B:C1:FA:AF:58:BB:07:69:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUWuywYtm0RuBUIbwfqvWLsHaew.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8a6ae1-7148-4e57-aaa9-3b81aa26f7c6/1/vUWuywYtm0RuBUIbwfqvWLsHaew.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:93:b7:c9:1c:ac:7b:5a:ba:3b:45:d1:92:63:73:b0:83:8d:
         42:ee:f3:a8:44:16:1f:98:75:24:5d:56:be:82:4f:46:7e:70:
         67:06:d9:31:1f:df:eb:fe:04:c5:d8:45:d9:f4:b0:90:c7:cb:
         17:d0:91:19:88:41:3b:06:13:1e:b6:8f:64:c6:62:09:95:ea:
         15:4d:d6:d8:ed:9b:14:8e:83:ac:4e:24:08:1c:2a:ad:fb:12:
         f6:c0:72:d2:46:54:66:56:49:ca:6a:f4:a4:1f:d3:0f:d7:4d:
         ee:c7:f4:85:65:55:c8:d9:30:8f:4e:74:9a:20:ab:d4:08:a7:
         a5:cf:88:0a:7a:ea:33:4e:1f:9f:7e:4a:f8:f4:0c:d4:fc:8c:
         2d:f3:70:ec:77:d7:63:4c:dd:d0:e0:a2:e5:e8:a8:4a:2e:a2:
         91:1c:70:5a:cd:aa:cc:bb:1a:c0:d4:b0:94:f1:24:f1:8b:2b:
         01:9e:90:9b:69:94:94:48:73:fd:d5:e9:62:48:a6:46:b9:3f:
         6f:09:5f:a5:b1:93:f9:fc:d3:8c:8a:71:01:ca:01:19:ad:1a:
         19:26:ac:f4:fc:9a:6d:50:05:09:c5:9c:33:0c:2a:25:5d:19:
         92:47:d5:ca:f7:a7:b4:25:42:ba:fe:97:c2:71:a3:9d:67:78:
         99:d1:4a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 19:29:21 2026 by rpki-client