Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
File:                     Vxy1HLpo6375hnp10XqygBgZaqE.mft (raw, json)
Hash identifier:          U5oaccCFL95sUvHZ+frv2DFrh2A8RPgKl+WmowTNtuA=
Subject key identifier:   61:87:6A:F5:F9:0F:47:06:CE:6D:06:B0:CE:AC:6B:5D:7B:55:70:96
Authority key identifier: 57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1
Certificate issuer:       /CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
Certificate serial:       019E60F11B4A8BE859FF1B7093B6B6518525
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
Manifest number:          0F0C
Signing time:             Mon 25 May 2026 21:01:14 +0000
Manifest this update:     Mon 25 May 2026 21:01:14 +0000
Manifest next update:     Tue 26 May 2026 21:01:14 +0000
Files and hashes:         1: 0ZgQJqVgdfnRZDVgpPvaD-Dzv6E.roa (hash: r5fe+/Due4NZC1alMzrb0UAbeRWncZoeXVNrq7sfX6I=)
                          2: 0szAMahK1oQnINJK81wlTT6Btig.roa (hash: SZ/iPl1/uEv70XbCNZiszMUzRfgvtHmx/hWYhWGapmo=)
                          3: 1BYbQVIuZci3v2SJ1lPBRcKopC0.roa (hash: 4k0iveKSc7qYV/Hrii5KFzItmAd9JCdByjYJZZltOTg=)
                          4: 6V0B2XbUiwZg1uwyso1jKVGrbd0.roa (hash: EhVsz4uU5vPtA18PjB+zS+ctkDe0JVsTRno6/EDARaw=)
                          5: GvCdkK_WFNni6j1A1wcGWF7UVkQ.roa (hash: B73L31CSXnj3RW8bntsMgtTsreruLzDFUsANn6DFMPQ=)
                          6: IioJCPvNdNGLMAa_qgwnTe7OHHA.roa (hash: 6db291fyuLEJb9GA//u7Cn1OZhghcTilKR1drZ7PPM8=)
                          7: USAO41jbUP97p--JRu_ZqtNe5EI.roa (hash: LfdCpC2uNJXwWHbUHSlZAnK3PC0CH3cNb7AHvc9pYvs=)
                          8: Vxy1HLpo6375hnp10XqygBgZaqE.crl (hash: miESkeAyuQgkTugML0UispS639hS5aLLe1shlxRxKzM=)
                          9: XR8VM1EvNL7sWYYKJOlMIsJdia0.roa (hash: fBss7mgIT+jvqqxAE/g6H97kqC0eCcZI1+zi2IjDIjw=)
                          10: kjxWd4U66N2G3Y4Ss8NOkBU4rs4.roa (hash: Lh3WoxdQyHUINKZzWX43jjRHwq3dN4GxIBUo7levdrc=)
                          11: zFeGQFAvAw6aATxlal8JSV3VnqA.roa (hash: 097ilzQL9LW0Bc1l2A3VV39iVVLt++EbcMo7JQEiFFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 26 May 2026 21:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:60:f1:1b:4a:8b:e8:59:ff:1b:70:93:b6:b6:51:85:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571cb51cba68eb7ef9867a75d17ab28018196aa1
        Validity
            Not Before: May 25 21:01:14 2026 GMT
            Not After : May 26 21:01:14 2026 GMT
        Subject: CN=61876af5f90f4706ce6d06b0ceac6b5d7b557096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:59:76:88:80:82:d2:81:f7:2d:65:a0:8f:2c:
                    4c:31:63:72:a3:f6:73:37:5b:9e:31:29:10:d3:56:
                    a7:d8:78:cc:22:09:74:cb:1e:b6:da:76:17:b8:91:
                    c5:47:71:84:24:d5:15:9b:36:4c:51:37:4a:9c:1c:
                    5d:cf:e9:45:f0:15:75:bf:25:81:74:62:0a:59:85:
                    3d:4b:b2:70:3c:55:cc:19:78:21:d0:56:1f:33:a2:
                    90:ee:1a:b9:79:f8:1d:4c:12:fd:38:fd:90:05:16:
                    9c:80:2d:fa:64:f8:4a:f3:46:cb:07:8b:65:26:04:
                    ea:57:f4:bc:32:4b:74:28:32:4e:ca:a2:98:cf:45:
                    80:71:ce:2d:28:dd:d4:91:a2:3a:ff:af:59:31:45:
                    32:ca:63:c0:31:d4:5d:d7:9c:6d:ff:d1:be:95:86:
                    99:ea:41:a1:34:c4:62:ba:b8:29:2f:67:59:18:0b:
                    37:49:b3:29:93:fe:b5:5f:c4:98:ed:a8:05:4d:a2:
                    39:e0:2b:97:46:c9:3c:cf:4d:b4:b6:f3:53:86:a5:
                    b7:99:fe:28:db:71:19:4c:fa:86:4e:bb:65:22:0b:
                    45:c5:d3:d0:37:86:a0:68:87:f6:38:44:07:8c:76:
                    66:24:33:36:4b:20:d9:e2:79:c8:56:90:f8:1b:2e:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:87:6A:F5:F9:0F:47:06:CE:6D:06:B0:CE:AC:6B:5D:7B:55:70:96
            X509v3 Authority Key Identifier:
                keyid:57:1C:B5:1C:BA:68:EB:7E:F9:86:7A:75:D1:7A:B2:80:18:19:6A:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxy1HLpo6375hnp10XqygBgZaqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/df/b8d2a8-53a9-42c0-b7c9-dd862774a092/1/Vxy1HLpo6375hnp10XqygBgZaqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:41:89:9c:ca:06:d2:22:66:13:d0:d3:52:86:38:29:8d:e5:
         cc:8b:0e:30:7c:c8:2d:6e:33:54:4b:2e:5c:da:9f:ff:db:00:
         cf:43:0b:3e:ee:38:0e:07:19:97:e3:99:4c:4c:97:b8:b4:2e:
         e9:d1:f1:f4:48:7a:a8:b7:f7:82:8e:f6:4c:47:f4:6b:cc:cc:
         99:70:fc:38:6e:aa:d6:ef:8b:39:04:71:65:f6:f9:94:fa:b9:
         e3:a6:88:b4:6b:2a:96:3e:37:e5:23:75:83:c4:52:bf:73:c1:
         47:8b:bb:c9:08:b8:7b:4d:40:7d:f1:bd:72:e6:66:be:95:e7:
         4b:1d:bd:6d:24:14:50:4a:c8:bc:be:8a:06:77:93:2b:5f:a5:
         53:60:2f:fb:80:79:39:b6:31:5d:a0:20:db:d4:65:a5:8d:6c:
         a8:c1:f7:0f:e0:25:94:f0:7a:33:39:d3:42:f5:50:76:6d:94:
         71:c2:b8:be:df:02:b8:b3:b0:b8:f9:f6:a3:14:e5:04:64:30:
         bc:5d:cb:3d:9b:e4:27:85:fb:95:d2:35:2a:92:3f:e1:6f:86:
         1a:5e:c4:76:94:46:90:fc:47:4c:65:07:fc:fd:af:40:86:d3:
         5e:99:7e:df:69:d2:7b:64:ba:aa:7e:89:b5:a6:72:27:9a:dc:
         b7:ca:88:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 26 04:51:46 2026 by rpki-client