Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File:                     vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier:          Pr1KWxo4blmIWSeUbVgOx8MZyqGPOcxnYit24GVJpRA=
Subject key identifier:   63:67:75:1D:57:65:EA:2F:52:E1:06:25:DB:ED:D9:1B:27:69:38:D2
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer:       /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial:       019EFC840EC5D6CAE74FAB6C676A2A38691D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number:          056E
Signing time:             Thu 25 Jun 2026 02:02:53 +0000
Manifest this update:     Thu 25 Jun 2026 02:02:53 +0000
Manifest next update:     Fri 26 Jun 2026 02:02:53 +0000
Files and hashes:         1: j6WVMlj7QGC0B6lVcgTm5Vqjms0.asa (hash: HUsdlww5wzPN9pHKVOg9JknKg0Sqp60i383BUXuT2YI=)
                          2: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: R9or7yHZNnv18RJViHNL21wzGvxVrj+v+UI1O9hTO8o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fc:84:0e:c5:d6:ca:e7:4f:ab:6c:67:6a:2a:38:69:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
        Validity
            Not Before: Jun 25 02:02:53 2026 GMT
            Not After : Jun 26 02:02:53 2026 GMT
        Subject: CN=6367751d5765ea2f52e10625dbedd91b276938d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a0:a3:b2:da:cc:de:ac:27:65:e7:16:09:70:
                    09:52:f7:ae:f5:96:e9:c0:5c:02:cb:3a:d3:38:78:
                    22:44:7e:26:fc:07:a2:1c:a1:69:59:4d:7f:6b:4a:
                    2c:e7:de:1b:d4:77:62:5b:0b:9b:3a:d7:11:a1:4b:
                    ac:0f:97:97:e0:40:08:a7:0b:f3:eb:77:f7:f0:44:
                    aa:8f:06:5b:74:31:97:68:f5:dc:69:a5:bc:d4:b5:
                    49:3f:f5:54:67:b0:39:6f:7c:47:d0:c4:ac:64:a0:
                    12:0d:47:a3:ad:1d:75:76:e5:60:d8:e4:0b:34:65:
                    bb:9d:7b:3d:53:8d:b0:26:4f:e2:9c:47:ca:98:7d:
                    31:37:76:f4:cd:b9:b9:6e:59:52:15:e6:66:9a:42:
                    4b:e6:35:5d:31:fe:e1:70:2c:af:0f:19:ce:9e:b0:
                    17:10:4f:45:a2:5d:4e:5a:e5:58:39:79:08:86:42:
                    5e:97:ce:de:ea:62:26:e3:d2:ff:f8:93:3b:14:8a:
                    22:de:83:d9:f9:04:00:0f:86:6a:75:19:26:4a:49:
                    8a:aa:c8:d6:63:63:93:cc:f8:e0:9f:1f:3a:2e:ba:
                    21:d5:07:3b:e9:c8:cb:4f:b2:b0:1b:d4:f2:b5:6b:
                    8a:27:b8:ab:27:2c:16:c3:69:21:2f:9a:d4:18:54:
                    6b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:67:75:1D:57:65:EA:2F:52:E1:06:25:DB:ED:D9:1B:27:69:38:D2
            X509v3 Authority Key Identifier:
                keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:dc:26:fb:5b:f9:4c:c8:bc:86:c6:fa:ac:ca:da:ab:4f:
         06:25:37:ec:5e:c1:2d:51:1a:75:f3:60:d1:7b:20:c8:30:96:
         8d:07:03:77:f2:05:31:ad:8e:f3:64:fa:a4:3b:0d:06:55:cb:
         e3:09:75:83:e4:87:ef:9c:75:1c:4a:6c:73:a9:35:ed:99:8d:
         8f:ae:f0:95:72:db:26:34:9d:39:3a:e4:31:c8:d9:cb:06:4e:
         0f:91:a4:58:5c:d6:63:86:19:8f:b1:03:85:31:0c:40:c5:7b:
         51:55:85:0c:fe:57:b7:0b:52:b9:e5:a8:4b:f2:54:52:a4:4b:
         50:a5:1b:98:eb:d2:21:a5:20:d9:4e:77:2e:aa:d7:f4:60:09:
         43:64:76:e1:9b:54:c2:58:a0:c6:a6:aa:b7:da:e0:fb:09:b2:
         1c:c2:83:28:ae:30:68:7f:ae:ac:b9:6e:dc:35:ac:5c:d1:7e:
         24:94:68:a9:c5:bd:ed:03:02:c2:05:2a:98:64:19:1f:4c:dc:
         6f:bf:fa:01:3e:dc:be:94:01:18:0a:0d:d4:4f:d7:d2:4f:ce:
         7e:08:25:49:4e:4c:6b:57:fc:e2:01:4e:61:9e:57:ce:7e:77:
         05:e9:df:cf:20:1b:2e:de:a6:4d:70:00:24:6d:f5:ba:11:00:
         9d:ec:af:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:30:21 2026 by rpki-client