Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          U5ysU1+DQtgYAuhF+Q6dvLCIMp4t56KDuTimx+MFRn4=
Subject key identifier:   87:C5:52:F2:4F:E5:DF:43:F3:0D:F1:DF:05:43:5E:D5:4A:CE:3F:60
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       019E2B1609CED1A22984E4E2CB89A827D447
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          0C36
Signing time:             Fri 15 May 2026 10:02:05 +0000
Manifest this update:     Fri 15 May 2026 10:02:05 +0000
Manifest next update:     Sat 16 May 2026 10:02:05 +0000
Files and hashes:         1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
                          2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: iHCtCSZSn1tDyfud9g5fTGsOb6bkeeC1Q0/SKG2FSE8=)
                          3: fzZPCo2MgwRNx0jBproZuv-eSHg.roa (hash: TUdwZLmcSuUajJ8XwoB2OnQqd7+GFsXBXptVyFTtu7c=)
                          4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 16 May 2026 10:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:2b:16:09:ce:d1:a2:29:84:e4:e2:cb:89:a8:27:d4:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: May 15 10:02:05 2026 GMT
            Not After : May 16 10:02:05 2026 GMT
        Subject: CN=87c552f24fe5df43f30df1df05435ed54ace3f60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:dc:37:02:c7:57:4d:34:79:f4:2c:08:2c:52:
                    38:4a:cf:8f:76:ab:cd:e4:f9:04:00:a3:fc:cd:6e:
                    e3:9d:01:49:3e:fe:e1:5e:a7:5f:31:85:7b:af:2a:
                    33:ba:8e:a3:ca:9c:f2:25:bb:1d:34:06:40:de:5c:
                    00:9e:7c:b6:e1:f9:51:af:44:6b:3b:23:11:e1:51:
                    d9:48:68:7c:8a:c0:29:cb:c8:1b:5a:a6:e2:ad:4b:
                    63:37:12:a4:17:a5:12:3f:cc:e1:a9:25:fa:09:d0:
                    46:79:54:1b:8a:62:89:56:53:ab:17:b8:66:73:95:
                    e5:f9:0a:5a:65:7d:9e:a9:83:70:18:d0:c9:f2:49:
                    9a:77:c5:33:dd:34:b1:21:fe:3b:12:99:32:33:41:
                    67:f3:f3:e6:cf:c9:11:46:fe:0a:32:db:62:94:7b:
                    65:b4:d8:4f:95:4d:7c:38:d2:9a:1e:87:3d:06:76:
                    10:69:97:28:2f:ef:34:ad:30:4e:4a:fc:66:5c:e5:
                    5c:64:8c:f9:b8:9c:67:3c:b6:c1:81:27:e2:f7:78:
                    34:fd:78:75:1b:dc:14:5c:f6:67:32:3b:2b:f2:07:
                    f7:29:ca:dd:49:58:dc:63:52:b8:39:e3:62:6c:e9:
                    c3:13:51:e1:33:db:01:b7:dd:25:fd:42:52:49:29:
                    32:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C5:52:F2:4F:E5:DF:43:F3:0D:F1:DF:05:43:5E:D5:4A:CE:3F:60
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:b1:55:4c:0f:b7:98:f3:29:72:2a:0a:2a:2d:d2:3f:b5:f9:
         fc:2d:05:f3:32:5e:8c:a7:4c:ce:56:fa:47:7c:6f:ff:ae:c4:
         79:15:b2:73:29:ad:ec:c3:1a:05:1d:0e:fd:8a:07:1d:50:9e:
         fb:e5:d3:9f:3e:eb:5d:40:1b:0d:70:bb:02:e1:9f:fd:ab:07:
         1a:a7:62:42:3b:b6:1b:d3:c5:81:d4:4c:f5:33:41:57:91:27:
         b2:39:c7:ae:37:a2:94:9b:dd:fe:cc:9f:69:26:11:19:ee:3a:
         39:47:ec:57:a1:d2:95:46:b5:bc:b1:9c:6e:28:f8:18:2e:e6:
         25:e0:b4:52:21:f5:68:b9:88:ac:47:a5:5f:15:cd:5f:25:ae:
         97:a8:2e:b2:2d:75:82:09:bd:9c:47:ff:d0:82:b4:c7:05:f2:
         40:71:dc:a9:27:f9:e7:00:72:b9:99:4a:75:4c:87:44:77:4d:
         35:22:a2:b3:83:9c:07:5e:43:c8:6a:ea:b6:bc:46:e9:d6:9d:
         86:4b:b4:dc:ab:0d:70:04:14:a6:ae:e2:58:a8:e0:39:f7:62:
         9c:99:02:6f:25:7e:55:34:ee:05:21:f8:22:c1:1c:f6:d5:75:
         fa:a8:98:47:31:9e:9c:1c:b2:bc:df:db:41:dc:76:00:47:51:
         cb:3c:a8:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 17:53:22 2026 by rpki-client