Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
File:                     _vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft (raw, json)
Hash identifier:          6N89EqKnqk6rJQO8WJsvkI64/RmQQTrzwVRelWXIOgE=
Subject key identifier:   AF:85:B5:5B:71:91:B7:8E:00:FA:D4:64:83:B6:8A:DF:91:07:66:B6
Authority key identifier: FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4
Certificate issuer:       /CN=fef7c4d570c17c9a8679a10634605c984b9503a4
Certificate serial:       019DECA40E12873375B7F97D78E6C3EE5BEB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
Manifest number:          9D
Signing time:             Sun 03 May 2026 07:01:07 +0000
Manifest this update:     Sun 03 May 2026 07:01:07 +0000
Manifest next update:     Mon 04 May 2026 07:01:07 +0000
Files and hashes:         1: _fyeIxDaafsDWMkS2A3N58AtJkU.roa (hash: H0SeTPFO1ojjf24io8wfPyjJHZQNS+KrdvYRVXD+DL4=)
                          2: _vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl (hash: hMuRGvj9hARVM+Gg9RUpKHXxN2XDKj3HqDXZAgLIZVc=)
                          3: lmvQRZHoT7SrToyMEi92PYv4lr8.roa (hash: 54xRyjzzMSSYWcjiwt5uthywu9zHlEe922Syj7kTVbI=)
                          4: uCsQuS-4rVdPYPXfgacBtl1GxKU.roa (hash: mSrfH4b/LZzb55AU3CME/vQpiQIKZvFXbFgXnOdMHJg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 May 2026 07:01:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:ec:a4:0e:12:87:33:75:b7:f9:7d:78:e6:c3:ee:5b:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef7c4d570c17c9a8679a10634605c984b9503a4
        Validity
            Not Before: May  3 07:01:07 2026 GMT
            Not After : May  4 07:01:07 2026 GMT
        Subject: CN=af85b55b7191b78e00fad46483b68adf910766b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:78:5e:ab:60:64:65:dc:7b:35:74:87:fd:05:
                    0a:85:25:46:ae:9c:ac:5a:53:c4:ce:27:ec:7a:b4:
                    bf:8b:94:92:49:2c:f2:73:6b:dc:53:c6:b4:c5:43:
                    f1:86:69:ac:81:30:0c:ec:a2:4b:60:27:a7:f4:58:
                    b7:7a:38:5d:8c:1b:20:3e:85:9f:bc:d2:78:61:63:
                    ae:53:82:0d:1f:d4:c5:cc:a7:c1:53:4c:35:57:9e:
                    17:8e:08:70:53:8f:d6:13:d4:1a:1f:69:5b:f1:ce:
                    ce:32:46:d2:ce:65:85:25:89:e7:1b:c0:2a:33:d8:
                    a2:e0:5b:cf:c3:fd:2d:b4:2f:b4:b3:4c:87:91:1e:
                    1f:91:71:7c:34:7b:a6:9b:f5:02:87:e7:54:d8:89:
                    b1:e5:45:9c:ba:32:38:3d:64:2a:0b:62:09:a2:64:
                    7a:de:01:39:a8:d2:5a:d7:8e:73:12:a1:6d:75:c9:
                    82:2e:c1:1f:d6:7e:ab:6c:b1:12:4b:57:77:6f:ea:
                    ec:fc:ef:ce:7e:27:8b:14:47:0a:df:8c:3f:5c:02:
                    5e:4a:8c:1a:b9:01:90:4c:dd:b9:80:6a:fb:48:a9:
                    2a:63:f2:06:5f:30:a6:4e:a6:62:0d:b0:73:46:98:
                    a1:02:91:37:62:66:b1:8b:6e:63:41:4a:2b:d8:ea:
                    37:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:85:B5:5B:71:91:B7:8E:00:FA:D4:64:83:B6:8A:DF:91:07:66:B6
            X509v3 Authority Key Identifier:
                keyid:FE:F7:C4:D5:70:C1:7C:9A:86:79:A1:06:34:60:5C:98:4B:95:03:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/69045e-aacc-4835-8fa5-92e84879dfcc/1/_vfE1XDBfJqGeaEGNGBcmEuVA6Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:b7:f8:91:2a:16:84:26:62:c8:8e:d9:66:35:d1:10:05:6b:
         62:1f:69:94:ee:9d:a2:72:5d:67:0e:47:35:be:cc:ca:37:cb:
         2b:06:78:d9:ba:d2:85:f4:87:8f:26:e9:d0:c7:f7:d8:89:62:
         12:68:ba:d0:61:ec:e7:fa:41:2b:94:03:33:d0:44:dc:09:1a:
         d1:22:57:2f:d9:66:3f:b9:7b:38:91:f3:e3:3f:36:de:09:0f:
         03:51:9f:76:48:f5:52:81:84:12:a5:94:88:76:a7:23:ab:18:
         96:d1:b2:02:ac:36:40:b7:59:0f:28:c4:25:1b:d8:0e:7c:39:
         cd:7f:99:b4:99:82:2e:dd:e0:e0:f3:26:d3:60:a3:c1:6f:c0:
         14:86:c2:ad:e8:77:0a:58:73:a3:29:49:5a:c2:41:07:b3:c3:
         5f:f5:86:13:2d:42:dc:40:11:66:a4:50:52:07:0c:6f:dc:a0:
         b4:5d:40:ae:35:34:35:c8:44:6e:a5:2e:18:f9:10:5e:ac:24:
         79:ec:f4:a9:af:de:69:33:ff:a2:ee:a2:a1:d7:1e:ec:e4:18:
         be:12:bd:d7:86:95:e6:94:fd:33:b0:0b:23:e3:e5:bd:64:12:
         45:12:b9:1f:6b:bc:de:af:05:c5:28:65:21:c4:88:82:e3:69:
         80:3c:b8:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 17:08:00 2026 by rpki-client