Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          H9ICsbDI8MolNP/eECzfMJR1XFb7gHpiwUZPmE8TGBw=
Subject key identifier:   1B:2C:1C:C2:AF:68:E9:36:55:94:A2:6C:5B:73:6F:AF:C8:21:1B:65
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019EBD6C0AE20E9995108A18D2DA81C0E5A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0F68
Signing time:             Fri 12 Jun 2026 20:00:34 +0000
Manifest this update:     Fri 12 Jun 2026 20:00:34 +0000
Manifest next update:     Sat 13 Jun 2026 20:00:34 +0000
Files and hashes:         1: 0QR437_yNuwd46JSd_IiWmhwYow.roa (hash: 6GDXre6adrsJyqw14UC9mtlOqvJoPEYUbHv7Lqn+43k=)
                          2: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (hash: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk=)
                          3: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: 02ZHjJovZj63avOkCwMfgyBgWTKCEXOZY6YGggLDv+4=)
                          4: wwh70_fWojYStsjUuAC2NCdOguo.roa (hash: FHvLtN1EizK8sBcMqm1u4JO0yb8K5X+r6eZldZxIZo8=)
                          5: ydQtvb3bvjFb-2ukCgShBr4iJ7o.roa (hash: D1atPq/SoJlgXADbklDBQIhta1tm984jYa7MmKBjm1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 20:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bd:6c:0a:e2:0e:99:95:10:8a:18:d2:da:81:c0:e5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Jun 12 20:00:34 2026 GMT
            Not After : Jun 13 20:00:34 2026 GMT
        Subject: CN=1b2c1cc2af68e9365594a26c5b736fafc8211b65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:fa:34:14:d6:e2:48:58:14:1d:a5:15:84:6f:
                    aa:b0:5f:d2:f7:66:7e:eb:e6:f0:bc:e9:cf:c2:4b:
                    0c:51:e0:21:07:92:c7:fb:a7:58:51:a0:a8:5c:a4:
                    cf:01:83:6d:c0:b6:85:e0:d5:21:9d:34:f3:ea:25:
                    62:19:20:76:04:ab:8a:51:25:83:ce:7d:0c:ac:be:
                    35:89:c4:ff:e3:63:59:7b:59:6b:01:0b:ea:14:4d:
                    ad:1d:f3:17:33:8a:c0:7d:3d:0d:db:03:c2:44:de:
                    53:40:76:7c:02:1a:bd:7f:cf:97:30:cd:cf:8f:de:
                    c9:a9:22:a5:2d:7c:56:57:8d:69:dc:8c:60:4e:c2:
                    28:a8:1f:af:e2:af:21:f5:45:22:c8:af:53:81:16:
                    16:98:39:c6:d2:ad:17:d8:d6:7c:08:b8:55:83:89:
                    dc:be:f1:05:3b:d1:a2:e3:75:84:e5:f0:19:ad:f0:
                    a7:af:15:e3:3c:a4:d9:d9:e5:f6:20:53:8c:51:7c:
                    7f:20:6c:f6:9f:20:13:1c:c4:6e:84:54:66:28:83:
                    47:20:23:5d:6c:71:29:6f:21:27:fb:20:75:5b:39:
                    af:6e:1e:73:d7:59:41:c3:88:69:1d:d0:8b:c4:9d:
                    3f:ce:05:3c:a5:31:73:80:e9:0a:35:00:64:2c:46:
                    87:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:2C:1C:C2:AF:68:E9:36:55:94:A2:6C:5B:73:6F:AF:C8:21:1B:65
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:eb:c9:0b:56:aa:85:96:2d:ad:56:f3:eb:3f:24:6e:03:15:
         57:8d:35:b2:62:ef:1e:28:a5:c7:08:55:0e:20:96:77:2c:9a:
         88:ae:27:67:f7:f6:39:f1:a0:d3:12:d6:78:ac:bb:35:f6:f5:
         2b:d2:d2:49:33:30:06:e7:15:0a:f5:b9:e7:0a:2d:be:7e:a6:
         d1:71:40:a4:5b:1a:07:2b:b1:e5:f9:d4:22:97:73:72:d4:c3:
         40:2f:9c:6d:5b:1b:11:85:19:b8:12:de:10:c7:12:ff:2a:ca:
         95:9d:27:f9:75:03:35:23:3d:44:7c:41:6d:dc:b9:e3:9e:65:
         55:db:7f:2f:42:c1:64:c3:3c:fc:82:b8:1d:ae:fc:56:66:67:
         96:08:04:75:2f:ed:ac:28:47:fc:f9:3c:0e:fa:7f:0b:ff:7b:
         f8:d0:f3:fd:54:ac:84:f3:d0:fa:f5:f1:fa:0f:d0:4f:eb:aa:
         fa:69:a5:2f:79:40:6f:1c:32:71:30:b6:88:35:5d:98:79:da:
         a2:c0:da:70:b9:87:6f:b2:92:38:fe:3a:c5:34:e9:cb:e3:7c:
         16:64:e4:45:0a:f7:42:ce:44:1e:d0:ee:e1:62:8b:0b:20:86:
         e4:c3:b9:f5:ce:03:28:9c:cc:d7:e2:cd:c1:c3:e9:e3:2c:81:
         51:fd:7d:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:03:13 2026 by rpki-client