Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File:                     vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier:          7qYk2ixSrhyVA15xLGZNNHR2T9Pnm6SyRuWe5FnQ8I4=
Subject key identifier:   CF:9D:7D:43:61:DC:3D:96:25:43:25:66:08:0F:D2:33:5D:F7:CB:18
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer:       /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial:       019EC0A3B9628123B3C1767F9E19D91A0822
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number:          0616
Signing time:             Sat 13 Jun 2026 11:00:15 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:15 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:15 +0000
Files and hashes:         1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
                          2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
                          3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: uL7YAtcNYaCYPiAj6D+j/C+EyM/oZipt9tU8wAUarJo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:b9:62:81:23:b3:c1:76:7f:9e:19:d9:1a:08:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
        Validity
            Not Before: Jun 13 11:00:15 2026 GMT
            Not After : Jun 14 11:00:15 2026 GMT
        Subject: CN=cf9d7d4361dc3d9625432566080fd2335df7cb18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:c4:5b:59:09:26:f0:9d:1a:2b:92:4f:82:
                    79:93:b7:46:3e:97:25:bd:3e:4b:b0:18:ec:85:b2:
                    a9:75:66:d5:e9:3d:27:d8:26:81:fd:15:4d:0f:7d:
                    a0:9a:f8:1c:21:47:33:66:d4:8c:69:9b:65:59:41:
                    5b:eb:1b:f6:2f:0c:d7:1b:9d:6f:d5:e3:f2:28:a4:
                    86:74:54:af:21:da:fa:38:a1:29:27:7c:4e:70:ea:
                    82:e4:5d:64:2d:9c:6b:a7:bb:f9:0a:1f:86:1c:15:
                    73:dc:2d:28:13:6a:8f:db:4b:10:f9:f3:14:85:74:
                    8f:7a:da:45:ef:fd:7a:67:3a:c3:4f:95:06:e6:2d:
                    86:c5:15:e9:fd:c5:1f:88:60:d0:aa:9b:be:43:a6:
                    f1:03:6c:e6:50:87:e4:d5:b8:51:db:b6:a0:4f:93:
                    b4:27:7f:e0:6f:7c:dc:6c:14:47:d7:3b:46:1f:34:
                    6e:85:bb:02:37:05:36:81:50:ce:72:bb:b4:ae:18:
                    70:09:24:ab:b5:af:f7:2b:ed:d8:6b:6d:99:e8:fd:
                    5d:ee:17:13:ec:69:f8:32:04:a9:af:54:d3:a8:24:
                    58:3b:69:67:c7:35:6f:0d:fd:21:db:89:21:1e:ac:
                    81:12:0f:c9:58:cf:90:89:a3:22:e8:81:df:35:dd:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:9D:7D:43:61:DC:3D:96:25:43:25:66:08:0F:D2:33:5D:F7:CB:18
            X509v3 Authority Key Identifier:
                keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:af:e7:e5:67:55:e1:b0:d4:96:91:11:87:f0:22:07:f7:01:
         f1:1b:18:8d:33:ef:a2:4f:db:cd:90:b6:4f:e2:af:63:9b:b2:
         cd:b9:39:f3:2d:ef:1e:0c:1d:b0:c4:77:4c:19:68:b5:f1:2f:
         0a:5e:1b:c2:66:d1:b0:b1:a2:de:d1:c1:e6:be:89:2b:70:22:
         7e:b7:fb:65:d1:28:4d:6a:de:66:cb:fe:dd:d1:48:62:22:1b:
         84:e1:ce:0f:72:91:b9:e1:5d:0e:70:66:71:be:6b:5f:98:c7:
         9f:67:d8:86:ae:e5:17:83:00:73:59:21:b3:00:4b:54:3f:79:
         82:fa:6a:b1:f9:04:ab:bc:af:f1:c6:c4:66:12:ed:3a:63:67:
         33:72:96:bd:f3:0a:87:1e:a0:0a:58:bb:2d:6a:d2:51:4d:65:
         3b:77:e3:5d:56:0f:fb:0f:04:a1:63:c1:6b:8e:51:6c:ec:ca:
         60:42:90:44:27:79:20:53:40:c2:25:cd:65:e5:96:5e:02:ec:
         2a:c9:55:b6:dc:1d:28:cb:4a:bb:79:c1:72:97:a0:d7:98:e6:
         48:ad:4b:7e:90:da:45:d9:0e:46:11:82:be:49:6d:aa:c7:6c:
         86:72:42:5e:84:45:8f:7b:5a:da:01:53:44:2d:98:f5:ba:c9:
         26:d6:af:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:26:19 2026 by rpki-client