Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File:                     vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier:          A4CyBBUdL6i7SHrwPzhZyJj+anKNB0OLC5si3S8vMJQ=
Subject key identifier:   B6:9A:E6:83:15:65:00:0D:AC:11:37:EA:F0:FB:2D:D0:3B:E0:34:23
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer:       /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial:       019ED12AFA18ECF3EF39CBF4F7A1FACB4D95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number:          1967
Signing time:             Tue 16 Jun 2026 16:01:54 +0000
Manifest this update:     Tue 16 Jun 2026 16:01:54 +0000
Manifest next update:     Wed 17 Jun 2026 16:01:54 +0000
Files and hashes:         1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
                          2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: Oj4KOl1aizdimo9LK9NY1l+dVUZIBx9C+JVSZol3FVA=)
                          3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
                          4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 17 Jun 2026 14:33:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d1:2a:fa:18:ec:f3:ef:39:cb:f4:f7:a1:fa:cb:4d:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
        Validity
            Not Before: Jun 16 16:01:54 2026 GMT
            Not After : Jun 17 16:01:54 2026 GMT
        Subject: CN=b69ae6831565000dac1137eaf0fb2dd03be03423
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:14:da:8b:3d:42:11:be:9d:ec:68:09:43:f3:
                    48:f4:b5:f4:ba:1d:4b:d6:24:be:ff:37:ac:d6:7e:
                    79:12:90:73:ce:2a:e7:8a:a8:c1:d8:fb:10:b3:60:
                    a7:81:5c:06:47:3b:60:0d:28:1a:0f:13:3f:d5:c2:
                    4f:9c:4b:9e:71:bc:d6:92:2a:2f:45:7d:d7:02:19:
                    a4:6a:6c:ad:0c:a4:ab:6b:3f:83:a8:ac:0a:02:76:
                    9d:d7:23:a1:da:76:ac:e4:ac:8f:8f:a2:a4:77:0e:
                    49:89:8f:61:87:a8:f4:09:cc:bc:5a:f9:e7:54:da:
                    f7:6b:57:58:fb:e7:78:53:4d:8b:10:e4:3d:06:70:
                    ee:59:28:05:ad:16:96:4a:4e:54:ef:d7:6c:0d:53:
                    a1:ce:8f:e3:53:de:c5:94:b0:4c:51:68:a6:9e:f0:
                    62:ac:85:33:37:e7:9d:d1:5c:81:82:b8:f5:60:b4:
                    87:af:4a:f9:5c:39:82:f2:c6:9e:bd:8c:b7:41:8d:
                    23:cf:72:4a:c6:9e:9d:ad:12:1f:18:07:1c:c8:a9:
                    9b:e3:f5:88:fd:29:9a:3a:08:9d:ce:38:e1:33:a6:
                    67:9c:29:85:28:37:32:e2:0f:35:fb:92:df:d4:b6:
                    76:1c:f0:b6:66:e9:41:e4:ef:8d:80:87:59:27:47:
                    c3:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9A:E6:83:15:65:00:0D:AC:11:37:EA:F0:FB:2D:D0:3B:E0:34:23
            X509v3 Authority Key Identifier:
                keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:2e:0d:c9:42:6d:e5:32:36:e3:13:5c:0a:5e:63:c6:df:3d:
         08:ac:5b:64:92:a2:6b:aa:63:ac:a7:75:f5:a4:bb:26:58:cf:
         75:bf:23:0f:53:b1:6f:33:f8:92:ca:5f:4a:2b:50:4d:41:19:
         5f:de:fa:18:01:85:52:4c:70:70:a7:fd:0a:88:27:7a:7b:8b:
         35:26:f5:ba:6c:a6:e9:7b:2a:14:a9:35:2b:5c:b1:2a:d6:9b:
         d4:c4:4c:e4:73:65:13:69:cf:72:45:e7:e8:20:e7:94:58:da:
         e8:1e:26:2f:9e:02:91:f1:96:0f:9d:af:b7:93:4c:61:ec:6a:
         5b:70:5f:ad:71:45:e5:ce:e0:ea:51:ca:32:15:31:4e:c1:25:
         ed:c1:f0:75:23:cd:b0:c6:ac:e0:d2:98:d4:97:50:72:d2:d7:
         8c:91:14:8d:76:6b:48:97:40:43:99:2c:09:5c:2d:14:9d:55:
         08:8b:90:bc:0d:75:f2:4f:6e:5c:70:97:d3:54:96:2d:28:dc:
         a7:28:c7:63:ca:d3:45:84:0f:d0:2a:0d:7f:0c:32:32:54:fd:
         0f:be:6e:a8:e9:c8:68:9b:5a:ae:33:54:13:fc:b0:fc:76:d6:
         f7:31:db:4a:55:20:5c:df:6a:35:bd:2b:3e:7f:25:6c:4f:68:
         f3:bd:e4:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 16 23:50:52 2026 by rpki-client