Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File:                     vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier:          /nf4CyrhYxd+wsAbMnK6WSRFpIs2O55EXs73tTiF1Gs=
Subject key identifier:   42:A5:8E:9C:2D:3D:2F:B8:06:6F:D5:F4:C8:4B:3C:27:77:6C:D5:CC
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer:       /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial:       019EBF5AC0F3AE757ED968776C66BEFE9C02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number:          0BA5
Signing time:             Sat 13 Jun 2026 05:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:56 +0000
Files and hashes:         1: WhNnG7RGoKzd13ukyLrTiCjdCGU.roa (hash: xIXQvTfLd53mh36/jnGCyL3HlmPNklCfsGo5gTXyrIc=)
                          2: XSZ7L0E4xmYvUgsTZ3XvXFl4Eno.roa (hash: dAImuk+Q6V1EJ1OrpsgP2U2fzTi2XwHAPHF4flZhKc0=)
                          3: bFe3f5dqm6CeDxF5_5dX7WBQoLU.roa (hash: FzZuYRsHytP8CktVJKuMoVGRaDw+yRywVAIuiA5WiBU=)
                          4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: +50aR/izocqbhHEaAeblbuobPYZNq+EsgNNekt3oCAA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:c0:f3:ae:75:7e:d9:68:77:6c:66:be:fe:9c:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
        Validity
            Not Before: Jun 13 05:00:56 2026 GMT
            Not After : Jun 14 05:00:56 2026 GMT
        Subject: CN=42a58e9c2d3d2fb8066fd5f4c84b3c27776cd5cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:54:df:04:eb:a5:fa:b2:a4:8e:ed:c7:c0:df:
                    bf:9c:c0:cf:5e:d0:0d:f4:03:79:70:e3:8e:5b:23:
                    5b:11:63:c2:e1:e4:77:d2:d1:a9:f9:06:74:31:b6:
                    a2:b6:01:d7:85:ab:84:9d:62:f8:fe:34:c2:39:57:
                    b7:3c:bc:56:af:67:f8:89:64:27:82:06:d5:fe:5e:
                    5c:47:64:7c:71:c4:ef:d9:1a:c6:3e:01:6d:a6:cc:
                    24:1f:51:55:72:66:3d:b4:66:20:f2:79:7f:f6:82:
                    86:74:53:81:6b:81:7d:1a:f5:ad:41:51:bc:d9:e0:
                    5b:1b:9d:e4:00:30:bf:50:48:5d:37:d5:38:f4:c2:
                    b5:7b:e3:c1:b8:86:1f:2b:eb:0e:49:83:81:e0:6b:
                    f1:cd:35:bb:74:fd:56:07:6f:ed:06:fd:1e:3f:fc:
                    49:6b:d3:76:d5:5b:aa:b6:51:e0:eb:d1:fd:c0:7b:
                    1c:c0:e1:37:b8:57:44:18:0f:fa:fa:b3:9b:f8:90:
                    58:35:9b:e7:7a:c7:23:f6:0e:8e:37:27:49:c1:e8:
                    e5:7d:16:6b:5d:a7:d8:d1:d5:3b:20:27:e5:5d:6c:
                    28:b0:23:61:18:c8:3d:66:0a:93:4b:67:71:24:fc:
                    df:dc:61:79:87:a2:6f:3a:e8:8f:20:19:dc:b7:81:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A5:8E:9C:2D:3D:2F:B8:06:6F:D5:F4:C8:4B:3C:27:77:6C:D5:CC
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8b:96:93:c5:91:dd:15:3f:fe:69:9a:a7:54:a5:d5:11:a7:
         76:0c:77:c2:d4:e5:75:23:fb:54:a4:0d:1f:be:75:10:a7:72:
         73:a2:8f:36:fe:37:3f:59:15:38:97:4b:d8:ed:b4:d6:78:fa:
         02:51:04:02:d6:82:c3:f8:c0:3d:aa:1a:f9:32:4b:a8:3a:f1:
         7a:fc:cc:db:18:bd:db:a1:d1:40:df:6a:96:35:a9:2d:2a:5b:
         37:d3:79:9e:27:58:97:76:00:68:4c:74:ac:7f:ff:0d:58:d2:
         de:ed:f3:d1:ba:f0:99:da:40:32:5e:b1:42:ad:0f:c1:9f:ac:
         76:31:6b:75:bb:bf:61:b0:4e:8c:62:1d:0e:33:19:53:cb:95:
         a6:a6:ed:e1:3e:c9:ca:3e:b2:b7:e0:99:1d:1a:5d:3b:72:e6:
         8e:64:c5:0a:0e:1d:4d:88:7e:59:22:e5:09:3b:af:05:db:a6:
         96:42:5e:6e:33:39:4a:d3:16:9d:f6:db:13:b8:8c:38:e6:d2:
         95:d4:5b:86:75:60:2a:e8:44:76:bd:54:8f:7b:cc:c4:e4:e1:
         cb:c3:c4:42:d4:19:c2:72:63:bf:3f:55:3c:a3:65:de:b2:3d:
         da:67:78:16:61:29:16:c4:f7:90:70:f8:21:4e:60:15:0e:1d:
         55:aa:c6:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:41:06 2026 by rpki-client