Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
File:                     v-nxLJa6IGg6_1yVi_rY5MV39_4.mft (raw, json)
Hash identifier:          3d3OMuLVCRyaQRrF7bF55bKo7Y/uXgjkrXdkrMLmkwg=
Subject key identifier:   62:A2:DA:E8:A8:9B:E2:AC:52:E8:57:A8:07:35:20:B8:6C:B6:35:07
Authority key identifier: BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE
Certificate issuer:       /CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
Certificate serial:       019EF4FFDC42F154E87F935F6F9C5AB172BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
Manifest number:          19B8
Signing time:             Tue 23 Jun 2026 15:01:09 +0000
Manifest this update:     Tue 23 Jun 2026 15:01:09 +0000
Manifest next update:     Wed 24 Jun 2026 15:01:09 +0000
Files and hashes:         1: B6Pi1uUnJZff0yH4k55r2kXtjkI.roa (hash: nFONkjpIyEwX4XgmL0VMVIS4fv9/E+OheTtNPB+NA0c=)
                          2: EDqPMphbUpVtTYoN1fyLYCs1biU.asa (hash: lzmUumz35rDjeAtkzbB8yQczkltYxxEG7y14DOkobdY=)
                          3: SBR1uR2716chaIz8ARk-u390kmk.roa (hash: KMB+rFlRFYjz2c5NYp4cUVbd4MaEgtDB59J+raHbbCY=)
                          4: v-nxLJa6IGg6_1yVi_rY5MV39_4.crl (hash: nQ7E8JyDf3qg/3Rp//5tEv5ssq+WFE8WIXOwtJQil1Q=)
                          5: wZKJafRQUH7w1pAW4XBFTzulaa0.roa (hash: V88CXzBPXhuq0AzWplua9vIAN1+ENxD5NbNY+fG2cr0=)
                          6: xK5lepFsVqEA8HJ242lSB1FdUvg.roa (hash: e9QjfU3jbqWuuABsY4opqKsE0OXAV7tXCJ/nRo7Cxsw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 24 Jun 2026 13:08:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f4:ff:dc:42:f1:54:e8:7f:93:5f:6f:9c:5a:b1:72:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe9f12c96ba20683aff5c958bfad8e4c577f7fe
        Validity
            Not Before: Jun 23 15:01:09 2026 GMT
            Not After : Jun 24 15:01:09 2026 GMT
        Subject: CN=62a2dae8a89be2ac52e857a8073520b86cb63507
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:fe:56:68:6a:8a:d0:48:1d:5c:59:54:27:
                    6c:ee:26:a3:85:1f:6b:4d:a8:79:ff:b1:59:14:1b:
                    bc:49:0d:2d:79:02:7d:54:46:45:53:fd:e5:cd:e3:
                    81:a2:b2:a0:70:90:6e:d2:17:02:5a:64:9a:e6:c1:
                    bc:3b:45:37:ba:f3:54:af:1e:9d:5d:70:33:6f:6d:
                    c3:1d:d7:ab:a0:d0:86:3f:b8:89:a3:d1:d1:71:b1:
                    d5:f5:7c:66:36:9a:e7:cd:b7:18:da:52:76:84:f0:
                    56:65:d7:d2:1f:1c:8d:d2:7d:31:d2:88:b6:20:d6:
                    7c:d8:d4:85:5e:60:c9:ff:9d:5d:77:8f:b7:a5:36:
                    02:24:79:eb:e3:57:f1:65:f3:f0:1b:2d:d1:dc:2b:
                    dd:5a:08:33:3f:b8:df:c1:f4:d0:67:e3:2a:69:98:
                    14:1b:b6:20:93:3a:6e:fd:b5:87:08:e3:7c:cb:e4:
                    ec:5e:a8:78:54:a9:b3:08:9e:91:cb:c9:ae:e6:9d:
                    7a:22:c6:cd:cf:ae:99:3a:dd:f3:cd:4f:ee:c2:c4:
                    1e:7a:55:06:64:1c:26:15:54:56:2e:9a:8e:b3:cb:
                    e3:74:c7:97:d1:48:64:ba:8f:c0:98:70:26:52:01:
                    67:6d:50:57:5e:80:5b:3b:81:a0:4c:f8:37:d3:7d:
                    c6:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:A2:DA:E8:A8:9B:E2:AC:52:E8:57:A8:07:35:20:B8:6C:B6:35:07
            X509v3 Authority Key Identifier:
                keyid:BF:E9:F1:2C:96:BA:20:68:3A:FF:5C:95:8B:FA:D8:E4:C5:77:F7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-nxLJa6IGg6_1yVi_rY5MV39_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/4ce558-63d6-469a-bb5d-f7820c5e966a/1/v-nxLJa6IGg6_1yVi_rY5MV39_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:54:76:49:40:6d:a7:69:60:46:c5:4b:63:cf:9f:eb:9b:a8:
         10:d1:83:d8:c7:90:a6:e4:a3:15:a2:60:2b:14:07:b9:5e:6b:
         79:bb:1a:44:39:93:63:33:dc:16:f4:45:c2:62:9e:5f:3b:c4:
         f4:4b:d0:09:bc:05:63:c2:a1:f8:d4:2f:ce:51:e0:f9:b0:cb:
         45:7a:ac:bd:82:34:49:35:6b:d2:90:80:fe:2d:65:04:98:c4:
         9b:45:fd:da:7e:ad:a3:89:ed:11:9c:c1:74:2f:cd:56:cc:20:
         13:fc:ea:cb:2f:b2:3f:23:41:d9:a1:ea:d8:7c:a7:e3:33:8b:
         b7:ea:f0:21:f3:0f:6c:f6:ee:38:d5:e3:3d:0d:22:33:04:30:
         f4:14:db:62:e2:9d:83:24:c5:9e:a2:98:56:8e:c6:c2:1b:fb:
         00:93:44:73:94:14:2c:72:73:97:98:05:60:09:86:8e:70:6f:
         91:31:c0:d7:e1:d6:3c:65:35:8c:a3:84:b1:01:ce:c0:0f:3d:
         d9:52:59:7d:ea:60:c4:e9:63:e3:84:c3:11:fa:0e:6e:6a:2d:
         07:eb:31:c0:e7:2a:d6:8c:db:e2:a5:59:d2:10:d9:1d:60:af:
         22:44:a9:19:b3:72:9f:d5:4b:bf:5f:de:17:c5:34:9f:04:1d:
         0b:8d:17:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 23 22:57:32 2026 by rpki-client