Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          NMDsNDel6Hyjw0kr3tYxxR8Q+XG9u03Y6k0R6Hky8Xo=
Subject key identifier:   6F:6C:EC:EC:FF:D4:A3:F7:34:2B:2A:F8:B4:A8:62:2D:98:29:06:62
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       019E295D9531BF4AA3F2D5E4EAD2DD066839
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          190C
Signing time:             Fri 15 May 2026 02:00:59 +0000
Manifest this update:     Fri 15 May 2026 02:00:59 +0000
Manifest next update:     Sat 16 May 2026 02:00:59 +0000
Files and hashes:         1: CnLU5sdd9_xh2OEtCZx6z-2dgTY.roa (hash: n31FwsvZCRP5aWFMhgbGP9qd5w+wCRJhNJerptRYayU=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: RSN6oQ+YYhnAPWPmSVInoaUIejrxkq6fYVWQWsFQSwI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:29:5d:95:31:bf:4a:a3:f2:d5:e4:ea:d2:dd:06:68:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: May 15 02:00:59 2026 GMT
            Not After : May 16 02:00:59 2026 GMT
        Subject: CN=6f6cececffd4a3f7342b2af8b4a8622d98290662
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:00:c5:52:cf:0c:01:81:82:95:6d:70:8f:5d:
                    b4:aa:d5:0d:81:74:26:4b:e3:18:95:12:b4:f1:cc:
                    bc:76:04:6a:d6:92:a7:a3:39:ff:6c:1c:06:66:60:
                    5d:2f:af:2b:ef:33:84:01:0c:f4:be:23:d4:c1:4a:
                    e4:77:1e:ff:57:5c:52:85:aa:e6:37:7e:2f:72:8d:
                    0d:45:3f:30:81:99:f4:f5:86:fd:f6:c6:04:f1:54:
                    91:66:af:c1:4e:10:d4:c0:8a:4e:33:f3:3b:98:7f:
                    76:5a:01:6d:de:50:41:5f:88:56:68:66:93:d6:43:
                    dc:9b:60:e5:da:1e:9f:6b:cc:bd:f0:a2:88:c8:07:
                    19:92:1a:21:4a:f1:d1:13:6b:d4:4f:57:77:7c:41:
                    62:f8:fc:d8:c0:e2:f0:2f:52:af:e0:d2:00:1c:69:
                    ed:9d:28:12:55:98:f5:51:5e:1a:ef:e7:2a:c4:91:
                    b5:44:44:71:38:59:08:32:d6:d8:eb:e4:e0:25:bb:
                    bb:b2:ae:f3:5a:4d:6a:dd:ac:a4:e7:08:bf:e4:d1:
                    77:d7:55:ee:7d:27:66:77:52:ed:2e:f9:af:af:94:
                    be:af:5d:e3:fc:11:05:d1:ac:0a:0a:73:36:aa:32:
                    cc:35:0b:c6:70:41:14:85:4c:59:5a:85:77:f4:39:
                    32:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:6C:EC:EC:FF:D4:A3:F7:34:2B:2A:F8:B4:A8:62:2D:98:29:06:62
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:3f:2e:22:ff:1e:6c:08:23:a8:6c:f0:69:25:56:47:6a:de:
         4f:8b:d2:53:d4:00:16:c4:a6:f1:e5:0c:1b:20:68:d7:d9:69:
         4a:2d:89:9a:97:9f:64:d3:62:5a:01:35:cf:fc:17:30:11:80:
         31:a6:b4:b9:7f:75:39:3f:60:02:0c:3a:5e:9c:1d:ca:62:31:
         49:fc:d0:18:77:b1:05:2c:02:88:36:62:fd:79:31:5e:3c:5f:
         95:d1:e8:d0:ef:9b:c2:41:4a:2b:3a:05:a2:39:14:69:56:9b:
         53:d2:3b:01:d9:ed:a0:04:84:69:c7:e9:e4:d2:46:f3:b5:c8:
         b0:fe:44:78:06:2b:c8:90:73:ac:93:b8:2f:49:aa:c1:9b:a5:
         17:b3:cc:c2:d4:2b:cc:f6:02:98:88:68:c6:ad:d8:bc:81:fb:
         fe:df:eb:5c:e6:25:ee:76:40:91:dc:32:ac:5d:13:a9:48:24:
         76:f1:29:6f:74:8f:58:c3:80:8a:82:01:fe:18:6a:ba:87:2b:
         db:e2:69:91:d3:ea:e3:85:ca:b8:32:0b:d5:1b:16:ff:7b:a2:
         e5:b9:ff:48:d5:ae:de:ea:d0:a9:e1:3a:cd:e6:10:7b:e9:a8:
         c5:3c:e2:33:7a:13:10:ba:b8:08:81:e1:1b:72:fc:60:c2:c7:
         9b:db:52:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 07:38:07 2026 by rpki-client