Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          m6yZqjObKokZmXWSwpXI5wCAXaCaoog9q1WH7pPNNeM=
Subject key identifier:   88:43:85:22:70:86:D0:A5:8D:0D:B3:3F:E5:A9:79:43:89:81:D5:13
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       019E0A77880BAF25D9DACA3A45590A76A043
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          193E
Signing time:             Sat 09 May 2026 02:01:05 +0000
Manifest this update:     Sat 09 May 2026 02:01:05 +0000
Manifest next update:     Sun 10 May 2026 02:01:05 +0000
Files and hashes:         1: B6Pi1uUnJZff0yH4k55r2kXtjkI.roa (hash: nFONkjpIyEwX4XgmL0VMVIS4fv9/E+OheTtNPB+NA0c=)
                          2: EDqPMphbUpVtTYoN1fyLYCs1biU.asa (hash: lzmUumz35rDjeAtkzbB8yQczkltYxxEG7y14DOkobdY=)
                          3: SBR1uR2716chaIz8ARk-u390kmk.roa (hash: KMB+rFlRFYjz2c5NYp4cUVbd4MaEgtDB59J+raHbbCY=)
                          4: T6DW1OfrkGvLBfTwbu6OSDsjQQ8.roa (hash: roQ6pBX8jCZsSFjh1gsyHlvysTjOHtosLYuCzYBJFtE=)
                          5: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: ajPp/xJEDKgppbBKfbNj3CjXpMUy2YaVy0MuU42K+7s=)
                          6: xK5lepFsVqEA8HJ242lSB1FdUvg.roa (hash: e9QjfU3jbqWuuABsY4opqKsE0OXAV7tXCJ/nRo7Cxsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 10 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:0a:77:88:0b:af:25:d9:da:ca:3a:45:59:0a:76:a0:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: May  9 02:01:05 2026 GMT
            Not After : May 10 02:01:05 2026 GMT
        Subject: CN=884385227086d0a58d0db33fe5a979438981d513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f8:bf:e4:bd:b8:71:f0:54:3b:1e:01:d7:b3:
                    29:af:68:83:ba:77:b1:44:e6:8b:2e:5c:07:97:97:
                    e2:20:29:6f:5c:31:35:d1:22:38:7e:92:e0:55:ce:
                    9c:61:53:85:e0:1b:1c:b5:93:e0:56:2b:60:65:c9:
                    33:45:b2:86:50:98:25:e2:fa:dd:15:13:11:66:7b:
                    19:a5:72:1d:4c:a0:6f:6a:77:4a:15:9c:87:b1:63:
                    26:b4:b2:9f:dd:75:7b:2f:47:b8:8a:df:da:2a:74:
                    c9:a2:84:fa:bc:87:44:50:f0:f2:5c:43:0d:53:6c:
                    a9:37:0a:8f:5b:58:f5:73:50:50:76:f0:32:cc:1a:
                    b2:39:7f:d1:93:d6:a8:f2:5b:0c:8d:eb:a4:f6:40:
                    4e:9e:be:46:62:70:9a:f6:21:8b:92:92:a5:c2:7a:
                    a6:d8:d6:c6:73:98:e2:7a:98:91:1b:cf:7b:02:a1:
                    f6:30:82:14:e6:bf:dc:4f:b5:99:e4:61:c1:37:6e:
                    b2:5d:b3:98:7a:d6:18:5a:67:7f:f9:0b:16:db:1d:
                    1b:bb:67:ba:d1:bd:3c:2d:2b:88:68:c2:9e:4f:9b:
                    a4:44:28:1c:f7:57:3c:1d:8a:62:b3:cb:c8:e3:f5:
                    b4:1a:dd:b4:66:09:18:19:05:c8:80:86:5e:f8:f2:
                    36:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:43:85:22:70:86:D0:A5:8D:0D:B3:3F:E5:A9:79:43:89:81:D5:13
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:c2:58:f4:59:00:48:f4:f7:60:d1:d1:78:6b:de:1b:a6:e7:
         89:2d:2d:04:0c:34:d0:6a:e0:ad:fb:a1:91:9e:db:6d:e8:7d:
         ad:c4:c4:95:78:2f:2a:ef:02:2b:37:6b:10:c7:d1:15:d7:b5:
         ea:26:42:94:d7:c8:fc:b5:14:62:6d:d0:6d:e8:6b:72:16:0c:
         5e:6a:bc:27:2c:6d:33:ff:97:cf:1e:f1:9e:a2:cf:ac:3e:33:
         0e:22:7d:70:02:9a:aa:67:81:eb:bd:a3:8f:3d:4d:65:11:61:
         e7:0b:fa:94:92:b8:1e:29:ec:73:e7:ce:4f:3f:96:4a:ee:54:
         eb:81:ea:3f:e7:3a:01:d4:27:27:e1:12:c5:d1:9f:a5:04:95:
         09:f6:e7:8d:58:2e:3d:65:21:57:0f:0b:04:ab:2d:b5:cf:dc:
         1f:70:52:17:9e:0d:73:4b:74:6b:5c:4f:5e:5c:73:de:cc:78:
         34:37:39:67:05:80:c1:34:7f:42:9f:4c:61:6d:b9:a5:9f:3d:
         a5:5a:b3:6c:dd:84:14:c2:99:16:f8:ff:ff:98:28:77:ad:60:
         4f:08:41:87:39:fb:44:53:13:d7:6d:8c:56:49:97:83:5d:d2:
         49:3d:82:04:93:a2:ec:d7:cb:0f:54:a0:56:90:c0:66:b8:a8:
         b5:f3:46:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 9 07:12:41 2026 by rpki-client