Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          p05xQ/JGspHhWujJUQ3MhrK4SQTZGJ3aW8MQmSbhN9I=
Subject key identifier:   51:FC:33:87:73:28:4F:11:B0:AA:AC:13:4E:26:68:E7:40:35:F0:66
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       019EB80EC88081B23D1C1E0483219E2DA134
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0DED
Signing time:             Thu 11 Jun 2026 19:00:36 +0000
Manifest this update:     Thu 11 Jun 2026 19:00:36 +0000
Manifest next update:     Fri 12 Jun 2026 19:00:36 +0000
Files and hashes:         1: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: bD7Q34YRLDGI5pBdn4p3Z2soKXpZcNBU/mb0dgapLhs=)
                          2: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (hash: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 19:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:0e:c8:80:81:b2:3d:1c:1e:04:83:21:9e:2d:a1:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Jun 11 19:00:36 2026 GMT
            Not After : Jun 12 19:00:36 2026 GMT
        Subject: CN=51fc338773284f11b0aaac134e2668e74035f066
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:0b:81:73:ad:73:92:c9:f0:6e:6f:72:23:
                    8f:ba:e8:f1:5d:41:56:a2:13:d9:5a:23:21:fc:5e:
                    40:02:2e:0c:7d:74:2e:bd:1c:13:87:d6:68:a8:ea:
                    2f:7a:b5:e9:a4:e1:fe:91:cd:c9:57:ba:a1:b7:b6:
                    11:18:03:c1:62:c4:9b:f5:34:fe:8b:f0:f9:cd:ca:
                    7f:ea:10:ca:b7:75:53:4d:be:11:c8:63:57:31:8a:
                    98:df:a9:69:91:99:16:30:c9:50:cf:6e:d8:a4:95:
                    50:5d:1c:8f:71:6f:82:7f:7b:0f:b9:6b:20:72:6b:
                    cd:b3:04:78:3e:f8:88:7d:8a:0c:57:7f:5e:ca:26:
                    ac:93:c9:1b:78:4f:24:f2:07:25:ab:7c:75:fc:18:
                    cc:19:6c:77:f0:91:0e:f6:fa:ef:68:ce:90:2f:b9:
                    0d:e7:97:be:a0:5d:bf:b7:db:c5:21:af:36:92:88:
                    24:d3:05:c3:74:93:05:b9:fc:ff:bd:c8:2f:0f:89:
                    cb:5e:0e:d7:67:44:b8:1d:86:51:9b:01:d6:f3:37:
                    84:0a:38:1c:f2:2d:78:ee:2d:06:39:f7:8e:bb:0a:
                    aa:bd:57:7d:4c:e9:97:17:1c:14:2c:56:14:b9:3b:
                    9f:ec:d3:24:f5:c0:95:72:22:4c:2d:82:aa:81:5a:
                    ac:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:FC:33:87:73:28:4F:11:B0:AA:AC:13:4E:26:68:E7:40:35:F0:66
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         eb:77:97:9d:f4:82:90:4a:e5:31:fd:ac:8a:00:a4:5d:ca:09:
         62:8a:c4:96:42:ab:49:87:80:75:e6:59:fd:d4:7e:68:a0:ab:
         c0:f0:01:ec:c6:0d:8a:59:6e:04:d4:b6:ab:59:ec:59:60:08:
         35:42:fc:bf:9d:fb:ba:65:7c:d1:14:7e:a9:a4:f5:76:82:a9:
         19:7b:e1:e6:00:d1:e0:3d:41:d0:c8:e3:fc:56:6e:dc:2c:83:
         9c:0c:73:59:8b:a9:2a:df:6f:30:77:d8:51:e7:ac:e4:e8:1c:
         bf:ed:fd:75:80:f5:c2:ce:30:54:3f:e7:28:ae:a8:81:4a:d5:
         b9:21:a0:b0:98:34:5c:35:1f:10:df:e4:35:9d:5d:00:9f:0a:
         4a:25:c4:10:d5:95:ae:64:a6:0c:08:58:04:7c:52:8b:7f:a6:
         33:de:49:33:07:80:7e:d2:56:61:2e:47:fe:80:be:0d:35:7c:
         95:95:5d:01:90:51:ab:9a:03:84:b1:2b:14:a2:2a:3b:d5:e1:
         17:fd:0e:48:93:af:6e:c1:3e:cc:28:f0:3d:b2:ae:06:c9:a3:
         c4:a1:3d:01:a6:80:72:8b:9b:a7:4d:d8:64:02:b9:ef:c7:b8:
         9a:8a:b6:6b:f3:e4:f9:6f:5f:7b:e1:ed:8a:26:b9:99:fa:2e:
         d9:3c:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:54:50 2026 by rpki-client