Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
File:                     vJxAXxQuU-tnscSZI6t5XoQyjJs.mft (raw, json)
Hash identifier:          7F/LuA+Eu4g18Xjv7Xu1WuC/LWHK1p9gmJNlwix5mb0=
Subject key identifier:   2A:E7:06:11:98:C3:75:25:F6:E3:CB:EF:72:51:84:71:7A:83:1C:88
Authority key identifier: BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B
Certificate issuer:       /CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
Certificate serial:       019ED5E2CFAA3F47690C05C1FDF077AD8C20
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
Manifest number:          1965
Signing time:             Wed 17 Jun 2026 14:01:11 +0000
Manifest this update:     Wed 17 Jun 2026 14:01:11 +0000
Manifest next update:     Thu 18 Jun 2026 14:01:11 +0000
Files and hashes:         1: UIEwD2VfFc8CUBWRPi8avZckaik.roa (hash: 8TxOkmSlxviUZm8/elB/UjCoqFq67VcYcIo+38oGuL4=)
                          2: vJxAXxQuU-tnscSZI6t5XoQyjJs.crl (hash: tKepLX6R9mJzs4JNtsq+rAUiACPZf0L7RayAgDjhLDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 14:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d5:e2:cf:aa:3f:47:69:0c:05:c1:fd:f0:77:ad:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9c405f142e53eb67b1c49923ab795e84328c9b
        Validity
            Not Before: Jun 17 14:01:11 2026 GMT
            Not After : Jun 18 14:01:11 2026 GMT
        Subject: CN=2ae7061198c37525f6e3cbef725184717a831c88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3e:9a:d9:fe:30:e2:78:9f:56:a6:3d:70:eb:
                    9d:55:f7:01:88:4c:14:a0:d9:14:27:5e:04:ae:ba:
                    2a:77:7e:de:5e:f1:ba:a5:07:19:e3:6b:cc:e3:8c:
                    5a:c3:3b:86:5f:4a:cb:04:e2:15:2d:b8:0d:2d:eb:
                    84:1f:90:2a:67:e6:15:94:27:f9:46:01:8d:61:ed:
                    75:d2:44:bf:22:3e:de:ee:d0:df:e5:ac:50:ec:4f:
                    60:e1:a4:22:32:79:59:3e:9e:18:7d:08:10:4e:2a:
                    88:b0:c5:0d:e7:f1:83:5b:f1:1b:90:31:dc:dd:a1:
                    a0:64:3e:05:6e:1e:76:23:6b:9f:cc:c8:b3:e8:4e:
                    99:d6:d9:d8:f5:63:52:11:e5:c3:ca:1d:01:a2:ce:
                    2e:29:53:e2:76:0d:7d:3a:44:44:54:85:d0:40:2b:
                    27:84:8c:a0:6d:da:7f:c6:2e:92:4a:0c:40:37:60:
                    74:52:7b:70:aa:f9:99:28:62:78:06:57:64:5d:ab:
                    01:f5:bf:d8:99:32:d2:ce:cc:31:e1:f6:ac:20:7b:
                    fa:6c:92:3a:fe:c0:6d:5b:9e:9d:62:fc:e0:5d:c1:
                    ae:08:31:59:51:44:6b:5a:ad:91:ff:9e:66:13:ba:
                    ed:be:8b:2b:f8:29:9b:40:78:0f:07:f7:f6:3b:61:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:E7:06:11:98:C3:75:25:F6:E3:CB:EF:72:51:84:71:7A:83:1C:88
            X509v3 Authority Key Identifier:
                keyid:BC:9C:40:5F:14:2E:53:EB:67:B1:C4:99:23:AB:79:5E:84:32:8C:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAXxQuU-tnscSZI6t5XoQyjJs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/31/b816b9-91b0-46da-8e58-91488a34fcc8/1/vJxAXxQuU-tnscSZI6t5XoQyjJs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:b8:ad:92:98:da:6e:73:d7:5f:c3:3f:50:1f:8b:02:8b:b1:
         f7:48:bd:da:8e:a5:e9:9a:6d:5a:97:3b:bc:56:4a:62:91:de:
         8e:65:54:b5:a2:04:4d:0f:b8:a4:0f:c3:99:85:eb:83:5d:8d:
         30:fc:8b:33:12:6a:17:ae:79:e5:3a:2f:22:b1:0b:49:c7:bf:
         13:af:61:8d:4e:bc:53:73:ad:c6:a7:2a:0b:1d:c9:d1:a9:a5:
         8f:01:4b:c8:fb:63:a8:c9:f5:6b:1f:2b:1b:84:2e:69:25:42:
         24:3f:7c:9e:a5:9e:3a:76:28:ee:93:93:22:81:34:42:1a:0d:
         a7:73:46:9e:75:7d:d8:ed:4b:1c:dd:0f:62:5a:00:40:f7:76:
         24:79:c6:46:d6:0f:e5:22:dd:dc:c6:d9:46:26:93:1a:3c:93:
         bc:37:7b:7e:48:1e:10:1c:00:86:d4:ca:6d:52:ed:f3:be:26:
         22:72:6e:22:cf:e8:a2:b6:15:f9:61:a9:6b:cf:d2:0d:72:8a:
         6b:e6:1c:a5:68:b7:f5:d4:47:cd:6b:ee:37:4c:d3:c3:97:5d:
         e6:3e:69:51:39:41:50:e3:32:7b:97:b3:75:e1:cb:77:c5:2c:
         13:d5:0d:63:34:29:55:bd:42:de:19:45:15:ba:f7:2e:82:e7:
         ea:07:e9:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 19:21:35 2026 by rpki-client