Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File:                     vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier:          DXbNWwhlKlgo8XbkEujH9nzpnJES6+E++3apTh6pLCs=
Subject key identifier:   66:E9:CB:4D:4E:4A:8D:42:93:D5:08:C0:90:4D:D7:8C:D2:07:91:F3
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer:       /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial:       019E2BBA12F3EE32A94240F0E7444E0E63A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number:          1915
Signing time:             Fri 15 May 2026 13:01:15 +0000
Manifest this update:     Fri 15 May 2026 13:01:15 +0000
Manifest next update:     Sat 16 May 2026 13:01:15 +0000
Files and hashes:         1: 2Vs8KUJ3ARsfzl5aenkyGCSy_lo.roa (hash: 8dxvcB3TSqVgvjogy5IQYglbYDvwwLxpsQ+qsiWMSlQ=)
                          2: 8YICkcy5MxdkFP4Ulv27x-Ip2YA.roa (hash: FjVwt2RS+W3bJxzVk95vARiv6Ttn05j7+22iJ3Ku7Y8=)
                          3: rGOh0aBSaJUcTjStlHDAvBi9GYw.roa (hash: 8mVUWl2qPU5MUsEWDFtGCEbrM6SO1p6D449zgLNKtAU=)
                          4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: egopiPMEWaXM//1+IkmdiVq+568KebLi4C+b9khrXqQ=)
                          5: wC3BpEB8qdaKpa6CpGZXp4T9slk.roa (hash: IXG8fhcHEZ3Xyts0Msy3p2RYoLeCdjHeJU1oF2Pw3VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 11:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:ba:12:f3:ee:32:a9:42:40:f0:e7:44:4e:0e:63:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
        Validity
            Not Before: May 15 13:01:15 2026 GMT
            Not After : May 16 13:01:15 2026 GMT
        Subject: CN=66e9cb4d4e4a8d4293d508c0904dd78cd20791f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:62:b0:92:70:95:40:8c:09:95:14:c1:1b:8e:
                    fe:87:38:50:b9:3a:97:75:96:89:fa:7f:b9:60:95:
                    93:9c:b4:09:93:0f:f3:7d:03:12:65:99:cf:c0:69:
                    1d:9c:74:58:d5:75:35:42:f5:c6:91:1c:0f:e7:d6:
                    5e:4f:f5:6f:46:23:26:d9:fd:4c:42:d0:9f:b1:0c:
                    c5:6d:ae:a8:d7:ef:e1:52:90:15:09:b7:42:6a:1c:
                    7f:3d:34:bf:23:27:cf:de:aa:4c:13:de:96:4f:9c:
                    61:62:0a:5c:fe:05:a7:96:6e:cf:ba:3e:1b:95:aa:
                    2d:dc:62:06:bc:ea:e8:6a:f0:88:f3:d7:36:0f:4b:
                    25:da:2e:05:d3:21:f3:1f:45:3b:b9:f2:15:44:1d:
                    f6:be:d4:84:d4:2f:57:06:c4:ad:8c:ed:0d:df:15:
                    b5:13:1e:94:7b:2f:96:f3:2d:93:eb:d8:1a:f3:b2:
                    2f:14:12:e8:2f:d9:88:2f:48:db:5c:2f:50:a1:c9:
                    12:f8:ac:d5:7e:0a:85:31:38:13:d3:c3:c3:7e:24:
                    e0:fa:b4:8b:dc:80:d8:83:c8:23:29:e1:2e:d7:d8:
                    1e:84:a8:a5:7b:25:04:b5:30:d7:2e:fa:59:a8:10:
                    e5:1f:74:a2:de:ac:f7:de:e1:07:c3:60:86:c1:77:
                    d5:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:E9:CB:4D:4E:4A:8D:42:93:D5:08:C0:90:4D:D7:8C:D2:07:91:F3
            X509v3 Authority Key Identifier:
                keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:09:9c:b3:28:a5:13:2b:33:71:3a:fc:16:4f:a7:43:20:7d:
         8c:39:68:0d:51:1a:ef:ab:f9:e3:bd:7e:2b:ee:b7:d2:08:7e:
         12:af:c2:e0:09:39:76:0f:90:de:c5:65:7d:3c:0a:ca:e5:1b:
         68:49:15:25:84:5b:81:5c:05:eb:2d:e3:af:d1:e0:ab:53:10:
         23:40:fa:6d:dd:1b:16:f5:3a:ee:37:b0:52:ba:a7:6a:6a:99:
         60:7b:66:a0:3c:f8:1c:49:ce:02:76:71:8c:c0:84:07:dc:a7:
         0f:93:95:3d:7a:d1:f6:44:63:84:33:14:b7:b6:01:da:48:8b:
         87:bf:e5:c0:0f:4c:0b:4d:70:9b:8f:71:5b:90:93:6e:06:c9:
         8a:07:cc:7e:a2:6a:fc:b0:b6:f1:c7:3f:fc:e3:69:32:58:73:
         4e:bf:50:14:2c:39:5f:59:87:c9:b2:e6:e8:ee:dc:f2:95:d2:
         67:b4:1f:1f:ca:d7:97:72:58:4c:38:64:16:6f:ca:72:11:f5:
         01:b6:8c:7e:90:4e:30:6c:dd:50:e0:42:d3:eb:9d:50:1d:1e:
         06:7e:66:e5:f4:9c:70:fe:79:18:e8:b5:fe:c1:47:a3:c0:bd:
         43:c7:41:c5:90:3c:eb:04:da:14:76:0d:6c:96:8c:44:48:6c:
         5e:48:68:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 19:04:41 2026 by rpki-client