Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
File:                     vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft (raw, json)
Hash identifier:          FZQECMp1lr1ybobC9YAMMqlyAlrcObmCAH7+5d+zDDk=
Subject key identifier:   64:54:89:C4:30:57:3A:AE:F6:C8:5C:96:D5:7E:1B:D3:6E:D3:98:CA
Authority key identifier: BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75
Certificate issuer:       /CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
Certificate serial:       019E9B851FBBDFF218D09B41D674F5DA09AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
Manifest number:          1947
Signing time:             Sat 06 Jun 2026 06:00:53 +0000
Manifest this update:     Sat 06 Jun 2026 06:00:53 +0000
Manifest next update:     Sun 07 Jun 2026 06:00:53 +0000
Files and hashes:         1: GMFbMXRu6EBkQ9myYXVyJDahzbg.roa (hash: +dgTRqdqVNlrN9h5FoD/gUpBUreTgCju2UOGfnCCQFM=)
                          2: VgpKn3563QumQ3vI6T65CdTXJRY.roa (hash: 0Sh5H5DPaJwxDGKT1SX9t1w/AoLxVT76G3RbjGUJn18=)
                          3: vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl (hash: a6iilcowcRaN2k0zB5EHr5QY/kAw4zr4cdil50EyRls=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 07 Jun 2026 04:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:9b:85:1f:bb:df:f2:18:d0:9b:41:d6:74:f5:da:09:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6c497ff4d4a8bb5a24bdd2051575b49a083c75
        Validity
            Not Before: Jun  6 06:00:53 2026 GMT
            Not After : Jun  7 06:00:53 2026 GMT
        Subject: CN=645489c430573aaef6c85c96d57e1bd36ed398ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:36:e1:cc:87:57:c5:fc:ab:68:5b:17:08:15:
                    96:3e:b6:ca:e2:8a:a6:9d:c8:49:03:b1:ba:4b:63:
                    8d:8b:e4:b8:67:24:ad:bc:18:47:93:ab:98:5c:6f:
                    f9:d8:02:e7:f8:c9:4c:b4:df:19:24:02:3a:c7:ca:
                    07:3a:bd:65:52:4e:9b:e8:ad:d8:df:a7:e9:1d:66:
                    4a:fd:4e:51:42:4b:4a:e7:61:bc:97:50:cf:99:1a:
                    63:fe:e1:78:8b:48:bc:c9:a9:71:c6:28:96:27:af:
                    fe:8d:7f:12:4e:2d:5e:39:50:56:33:16:a4:d6:b0:
                    a2:b4:9f:b8:71:13:53:89:fe:1d:09:5b:61:fb:c3:
                    74:01:49:b0:c3:a1:69:0b:e7:b7:2f:6c:14:2b:6a:
                    61:78:ac:3a:b9:58:cb:d1:c4:36:20:fd:80:fe:4b:
                    3a:54:20:0d:52:05:dd:f8:80:4e:27:84:92:fb:90:
                    92:16:c6:aa:2e:4a:bd:c3:9f:ee:96:3a:c1:94:27:
                    2f:37:e9:3d:fa:7c:1e:ac:bb:7a:1a:92:1a:1b:5d:
                    f1:3b:07:a0:7d:87:c3:91:fc:e6:d4:09:db:a3:94:
                    69:c4:db:aa:86:48:22:2a:8f:b6:e6:ac:03:b7:ad:
                    1a:b2:9c:ef:4a:8f:4d:9d:5c:ab:96:30:77:85:1a:
                    e8:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:54:89:C4:30:57:3A:AE:F6:C8:5C:96:D5:7E:1B:D3:6E:D3:98:CA
            X509v3 Authority Key Identifier:
                keyid:BE:6C:49:7F:F4:D4:A8:BB:5A:24:BD:D2:05:15:75:B4:9A:08:3C:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmxJf_TUqLtaJL3SBRV1tJoIPHU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/5db8eb-cccc-498a-81cb-65ae58a9bee8/1/vmxJf_TUqLtaJL3SBRV1tJoIPHU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cc:79:db:e5:d9:c3:43:29:d1:c9:d3:24:e0:8d:96:93:6e:
         5b:b6:bc:63:7b:6a:3c:a1:34:d5:52:9d:3f:12:46:cc:7e:9b:
         9f:68:1d:3d:39:42:04:24:e6:f2:06:f4:ba:e2:20:3b:27:f8:
         ae:9b:70:5c:9c:88:87:ac:dc:35:a7:ce:6b:9e:e5:4e:51:49:
         36:7e:70:46:bd:79:51:ac:63:f1:57:3f:34:17:b0:94:18:8a:
         08:31:99:b6:17:0a:f9:69:b3:f7:ca:5f:e1:4e:38:58:8d:19:
         f1:f2:56:cc:26:5b:57:12:8b:e5:e0:66:15:6e:98:7b:28:b3:
         ee:d8:78:1f:ec:25:95:42:3b:1a:47:a4:a4:e6:03:8d:80:57:
         6d:ed:1f:d0:a9:f4:84:da:3f:22:6e:7f:5a:b3:c3:8a:f5:db:
         e0:93:d3:a7:11:07:96:a3:e5:d3:f2:41:3f:57:f1:b1:90:b5:
         21:94:e0:be:3d:60:57:e8:a6:34:2d:7b:37:76:01:a3:7b:f5:
         d8:cc:02:fe:84:8a:f6:91:3f:93:65:f0:b4:a8:d3:41:7f:3c:
         ad:08:76:6d:7a:e0:dc:fc:71:3a:6a:f4:c3:21:76:33:22:b7:
         9c:22:5f:63:5b:85:60:fc:97:3b:7c:cf:af:1b:96:c5:d8:c2:
         4c:fb:aa:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 13:22:50 2026 by rpki-client