Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          L/fwKNfK+ps8UsFQtTacKRBu7iDu382NLW76peJexi4=
Subject key identifier:   9F:18:05:26:30:43:E2:95:5A:BB:5B:64:CD:1F:39:63:ED:35:03:A6
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       019E8E6DE1B4DAF405BB7E71136CD193837D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          03AB
Signing time:             Wed 03 Jun 2026 17:00:26 +0000
Manifest this update:     Wed 03 Jun 2026 17:00:26 +0000
Manifest next update:     Thu 04 Jun 2026 17:00:26 +0000
Files and hashes:         1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
                          2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: eMbTctVClst1yJWH96cys/EGuZk/8aJGL6Gr/MSsfZM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 13:19:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:6d:e1:b4:da:f4:05:bb:7e:71:13:6c:d1:93:83:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Jun  3 17:00:26 2026 GMT
            Not After : Jun  4 17:00:26 2026 GMT
        Subject: CN=9f1805263043e2955abb5b64cd1f3963ed3503a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:48:13:ae:e1:0d:23:4c:bc:8b:db:89:3b:31:
                    94:30:80:21:d6:cd:83:2b:79:0b:57:38:78:1f:e8:
                    b6:08:84:38:9a:78:5e:b6:29:f8:a6:46:39:e0:06:
                    cc:75:d6:ec:a8:a7:82:57:cb:40:47:b2:82:8b:b2:
                    f2:ed:db:20:84:e4:48:c6:e2:ed:eb:08:89:e1:0d:
                    c1:93:44:1d:df:46:fa:65:4c:43:c0:73:05:c5:c4:
                    45:87:9f:e9:17:ee:ff:1e:70:f7:50:f6:b4:3e:dd:
                    5d:20:d7:14:1f:55:ef:b5:5e:36:5f:5c:88:3b:c5:
                    89:cd:5c:13:dc:76:50:b2:f6:62:4d:54:9b:22:25:
                    ae:3d:2d:c9:33:be:03:1f:65:be:76:a8:46:9b:b8:
                    f7:46:09:98:6e:9c:9b:f9:e4:69:4a:f1:8f:08:1e:
                    23:5c:2f:e9:3a:de:1f:6d:bb:28:26:ff:da:1d:5a:
                    5a:3c:b2:34:dd:67:24:90:13:a1:20:1f:71:01:be:
                    0b:74:4d:2f:1c:9e:76:01:07:44:11:2c:a4:b7:29:
                    28:08:4a:11:99:3e:f0:dc:74:4d:28:e4:1b:e5:3d:
                    38:d4:2c:1c:f5:da:c1:a8:df:53:92:26:d9:68:4e:
                    e2:b0:f1:67:d4:96:90:95:1b:56:0c:85:55:17:82:
                    0f:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:18:05:26:30:43:E2:95:5A:BB:5B:64:CD:1F:39:63:ED:35:03:A6
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:73:03:91:8c:bb:09:6d:47:c6:3f:6c:11:cc:e6:fb:d7:d1:
         a7:0b:a9:26:f8:66:88:9c:1d:db:f7:7c:5c:56:6e:81:06:23:
         39:34:79:d6:eb:25:40:9c:9e:00:ac:62:d4:b2:29:d1:ee:8d:
         c6:db:23:8e:22:77:c3:f1:17:12:04:70:41:3f:5c:72:27:ba:
         1b:28:02:d3:86:d0:9f:b5:09:e4:bc:b2:01:8e:fb:38:20:4d:
         16:ba:bc:e1:8a:91:a9:ed:c9:27:48:44:04:20:71:e8:db:c5:
         b5:81:21:4e:b9:30:a7:a8:88:74:b6:83:e9:5f:53:69:4c:cd:
         53:61:c5:f8:15:a0:a1:e1:d2:28:78:c5:3c:cc:c0:81:d5:8e:
         f3:f0:3c:44:e0:8b:68:89:15:d0:b2:07:59:85:60:4f:f1:35:
         9f:c4:d1:f0:b4:06:b1:b5:d2:6b:5c:4b:86:25:b2:4d:5a:81:
         44:bb:ca:5e:09:47:49:50:f0:29:67:0c:92:88:3c:23:7e:e3:
         5e:b7:3f:b4:66:59:08:2e:8f:b2:b3:8a:6a:2a:f9:69:51:f3:
         8d:f1:b0:89:10:36:87:7e:04:47:46:a8:59:76:71:ab:32:63:
         03:38:11:97:2d:fb:34:89:ad:77:29:ab:d4:d2:64:db:fc:4f:
         04:1a:cc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:53:50 2026 by rpki-client