Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
File:                     M_vbsgwtlwc8Dei3yqdewe6xkbg.mft (raw, json)
Hash identifier:          DxVHHnnHDcT/wA5MP3gVjyCAknxGdQZQsffvc8Vjt0o=
Subject key identifier:   D0:C2:E6:4F:A2:17:4C:12:E6:BC:85:89:C4:3A:7B:1E:A6:2A:C5:F3
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Certificate issuer:       /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial:       019DECDB939AA6B6475636EF98026744F6A1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
Manifest number:          18EE
Signing time:             Sun 03 May 2026 08:01:46 +0000
Manifest this update:     Sun 03 May 2026 08:01:46 +0000
Manifest next update:     Mon 04 May 2026 08:01:46 +0000
Files and hashes:         1: 0e4GauzDmn8kMomw7oCsTJu7m8Q.roa (hash: vhyIGyttSh6EEj+o9giIX+19O/xI+MdDj+HOEVvUjJ4=)
                          2: EjDCWHUKfrhUltEAV8v-8i4JB8k.roa (hash: a/WblqLT7o9KNQHx3jn/JOaerbJckzUgXEVjku2zPOM=)
                          3: M_vbsgwtlwc8Dei3yqdewe6xkbg.crl (hash: aZonPIsi5wyZVpu5HJJc3oSricmcrgqPflcyHXAObPo=)
                          4: oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa (hash: CR2p7P7nO1sdjW2WzjuqaopSJj2SPQzuG2+UV273Kok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 05:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:db:93:9a:a6:b6:47:56:36:ef:98:02:67:44:f6:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
        Validity
            Not Before: May  3 08:01:46 2026 GMT
            Not After : May  4 08:01:46 2026 GMT
        Subject: CN=d0c2e64fa2174c12e6bc8589c43a7b1ea62ac5f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:bd:49:dc:fa:20:ac:90:dd:c8:ca:30:05:a8:
                    2e:1c:ae:88:82:b1:c8:c5:39:5f:d8:64:af:66:1e:
                    0a:1d:58:31:79:03:8d:7b:bf:f5:df:d1:2c:0c:1a:
                    8f:60:6d:13:1e:2d:54:74:1d:c4:3c:c9:69:3c:d6:
                    e0:19:a0:28:62:d5:4c:b3:76:85:b6:7a:0f:87:32:
                    77:84:e2:f8:32:d1:56:e4:b5:fa:5c:d3:2e:d2:4f:
                    e1:65:79:94:c2:64:c7:13:fa:68:4c:95:16:6f:4b:
                    a2:40:7c:bf:57:24:2c:81:12:a5:b1:e6:ea:cc:52:
                    ab:28:c7:29:d2:c6:39:e3:c8:43:48:b1:0d:7e:f6:
                    80:11:ea:8f:a4:a5:aa:cb:61:5d:c1:30:f3:63:d6:
                    60:0f:d5:6f:81:c8:e6:36:e0:ed:37:67:6b:de:ba:
                    ec:78:0b:a4:fa:1d:17:f9:3c:a3:f7:e9:17:50:86:
                    e1:cf:5a:0f:c3:24:75:e6:44:c8:72:7a:60:90:8d:
                    e0:eb:8b:50:d2:d2:5d:a2:a2:9f:06:7e:5c:90:e0:
                    e5:ee:38:8f:09:9e:d0:e2:79:71:f1:ce:bc:e1:91:
                    f5:fe:8b:ec:4a:f1:60:3e:7b:50:70:b3:b6:40:09:
                    cc:47:a5:cb:61:50:73:fc:f8:11:25:15:e9:26:58:
                    a9:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C2:E6:4F:A2:17:4C:12:E6:BC:85:89:C4:3A:7B:1E:A6:2A:C5:F3
            X509v3 Authority Key Identifier:
                keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:94:f8:0c:fb:7f:f6:41:63:00:dd:52:59:6c:b0:56:44:32:
         c8:a9:f2:7c:da:9f:aa:41:82:85:2b:ea:b3:14:46:c0:9c:e5:
         d5:37:7a:7d:74:f8:09:cd:7b:a0:da:19:4a:37:80:04:e8:1d:
         16:e3:58:6f:1e:98:75:1e:e9:bc:f9:f4:1b:52:1a:a0:ed:3c:
         89:ae:f9:7d:84:af:3f:a6:58:ed:4c:22:4c:28:ab:45:df:99:
         61:f6:f8:71:8e:fc:66:5c:46:86:2a:10:0e:a5:fb:d6:58:92:
         6f:60:65:f6:fa:0d:67:26:73:37:59:39:10:4f:c7:35:7f:6b:
         12:c4:2d:98:a6:0e:c0:20:64:83:c8:f2:18:2a:3d:3f:1f:c0:
         57:ab:bd:ff:e8:40:8a:00:c6:b8:96:3f:67:8d:e9:c6:f9:37:
         30:ad:e6:20:94:26:3e:b8:1e:c6:53:6c:e2:2f:e1:65:4b:cb:
         06:d5:5c:28:62:ce:7c:9f:97:c9:e7:b2:05:38:7c:cc:f6:9d:
         b3:fa:c6:31:f2:ae:99:3f:fd:20:e9:b5:59:3b:22:77:3f:8d:
         05:26:fa:1d:c3:7c:8f:4b:db:df:05:79:e4:1a:29:e9:7d:33:
         d5:a6:05:6b:06:c4:ac:4e:bb:c4:55:5c:1c:b3:a4:af:22:c5:
         46:d9:b0:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 15:32:58 2026 by rpki-client