Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
File:                     vVXPhK_d4xgniNwAdjqCMINM7FI.mft (raw, json)
Hash identifier:          Gk4CfHOO3c8z/LmgP7aQxHpL/L0l/EnMGQ1S13fW4So=
Subject key identifier:   EF:CF:F6:7B:CA:B0:D8:F4:88:66:FC:95:57:9B:D0:D7:4B:90:88:52
Authority key identifier: BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
Certificate issuer:       /CN=bd55cf84afdde3182788dc00763a8230834cec52
Certificate serial:       019E916F4C199CA36AF5E0781C14DDF2B082
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
Manifest number:          E5
Signing time:             Thu 04 Jun 2026 07:00:50 +0000
Manifest this update:     Thu 04 Jun 2026 07:00:50 +0000
Manifest next update:     Fri 05 Jun 2026 07:00:50 +0000
Files and hashes:         1: m2i02yDWoa9OicV27GMj8Y2x37c.roa (hash: PcpljpVFgub8o7xEhsLEYIzvRxfNpdllqdeZVEQzjwg=)
                          2: vVXPhK_d4xgniNwAdjqCMINM7FI.crl (hash: AIsSXXcZIDZThj3kPPESlCbmJ2xUub/Pv6XByaqtML8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:91:6f:4c:19:9c:a3:6a:f5:e0:78:1c:14:dd:f2:b0:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd55cf84afdde3182788dc00763a8230834cec52
        Validity
            Not Before: Jun  4 07:00:50 2026 GMT
            Not After : Jun  5 07:00:50 2026 GMT
        Subject: CN=efcff67bcab0d8f48866fc95579bd0d74b908852
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:90:d1:84:ac:bc:e3:b2:a8:1a:ce:0c:5f:b8:
                    90:87:17:85:19:cb:70:3d:29:cc:68:86:12:7a:a3:
                    a5:04:3e:40:b7:7b:d9:78:75:da:b8:f9:cf:38:e9:
                    f3:7f:82:0a:47:c2:ea:62:a0:d2:c1:ae:33:36:45:
                    ce:91:c8:23:6b:c4:73:48:66:de:d2:dd:5f:61:ff:
                    f6:bf:60:55:cf:a5:03:4c:d4:9a:80:64:c9:0c:fc:
                    eb:84:5a:6a:de:ab:0d:49:a4:bd:be:d2:12:97:4e:
                    f1:29:75:e6:7c:92:13:cf:46:47:86:2f:e7:e8:78:
                    a8:14:32:80:bf:a1:76:bc:ba:74:da:70:f4:35:e6:
                    04:7a:73:1c:d4:47:4d:eb:1e:86:d1:50:3f:cc:6e:
                    2c:cf:be:24:cd:1e:3b:99:01:b2:76:20:99:bd:a1:
                    d2:68:d3:54:55:c8:ed:55:6c:a8:ad:5b:32:4b:63:
                    80:d8:f9:cb:5a:2c:8e:0a:3b:de:d3:91:0e:38:f6:
                    ad:b3:2c:af:f7:1b:cb:a9:5d:b3:3b:23:7c:88:06:
                    0e:5e:7d:62:e6:96:d0:8e:f9:58:b5:33:37:b7:16:
                    34:89:4f:5e:45:95:8e:85:c3:85:57:f7:c6:ce:0c:
                    87:b5:f1:83:56:02:a2:31:3d:f4:fb:1c:27:59:38:
                    74:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:CF:F6:7B:CA:B0:D8:F4:88:66:FC:95:57:9B:D0:D7:4B:90:88:52
            X509v3 Authority Key Identifier:
                keyid:BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:b7:96:be:49:34:8c:b6:fe:49:72:b1:1c:67:bb:1a:cf:b5:
         84:80:69:9f:a1:d8:2f:e8:33:92:ab:03:75:79:ed:4e:87:bb:
         ae:9b:05:53:8f:d5:30:fc:e6:ac:1b:4c:a6:6d:93:a6:60:ba:
         51:0c:aa:6d:ab:41:e5:57:3f:22:f8:a7:30:e0:87:3e:e5:56:
         1e:fd:59:f7:df:2e:34:dc:56:f0:2f:cf:7d:ca:a5:fa:81:59:
         db:5a:7d:fc:fb:95:71:25:5e:4b:0c:f3:27:2d:ef:ec:b4:6b:
         e2:1e:5d:55:d0:a5:01:b2:bd:bd:fc:05:93:c1:57:34:ba:d5:
         36:d9:96:2f:5e:28:04:34:df:0b:4c:ed:d8:f5:43:3d:18:c7:
         46:ce:cb:d8:fb:02:79:c6:51:ba:6a:1c:af:03:7d:cb:c5:0c:
         1f:6e:f7:a3:d5:a6:22:eb:47:db:09:48:7a:86:97:72:65:9e:
         57:6b:51:d6:81:6b:f4:5f:60:fd:ab:00:e8:2f:a7:15:3a:2b:
         b1:3f:c9:52:ef:df:c5:2e:5b:0c:db:1a:09:54:ac:09:bc:62:
         2d:94:b4:0c:d2:ce:13:e0:02:e7:27:79:42:7e:b6:f7:f0:cd:
         27:00:f4:13:bc:c5:76:30:02:52:e9:ad:b8:77:0a:1c:1d:56:
         32:e1:36:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 16:08:18 2026 by rpki-client