Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          0uvAoCB2qzJXJ8wrrJwCXmwYTdp9AhmcQRKBb1Fd9/k=
Subject key identifier:   64:D6:0C:11:1C:3C:A6:B6:F2:CA:97:1A:22:14:CE:74:F4:C7:56:4F
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019EC111B658A160CF4C110763470AEFD535
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          1963
Signing time:             Sat 13 Jun 2026 13:00:23 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:23 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:23 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: tvyUyrBlKXmlBWo9YOBqY1qiF1H1uRDxtE5tCDZwmoQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:b6:58:a1:60:cf:4c:11:07:63:47:0a:ef:d5:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Jun 13 13:00:23 2026 GMT
            Not After : Jun 14 13:00:23 2026 GMT
        Subject: CN=64d60c111c3ca6b6f2ca971a2214ce74f4c7564f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ca:06:d7:09:2c:2e:11:12:c6:4c:86:55:8b:
                    c7:08:4f:95:a3:c7:ef:9d:a9:71:6b:de:57:b8:fd:
                    0f:27:23:8a:ae:61:17:24:3a:72:d9:57:f0:df:53:
                    86:28:a2:7f:be:ea:a0:dc:5d:fd:c9:c8:3f:12:95:
                    1e:aa:8c:df:c7:ee:a9:f9:3c:29:c9:e9:d7:eb:59:
                    c9:90:1b:e8:5c:aa:2c:1f:ea:c2:4d:5b:e2:0b:aa:
                    6d:43:10:fe:56:a7:7e:63:3c:2f:a3:06:b7:5d:19:
                    f2:ce:c0:aa:62:f2:24:4f:04:a6:a2:f0:b5:76:ff:
                    cf:6a:d8:eb:32:10:75:0c:3f:d8:f5:8d:5b:3b:66:
                    31:88:e0:b5:a6:e8:96:b0:0b:a0:45:e1:d6:85:c2:
                    fa:70:d2:c7:f8:bc:96:bf:cc:d7:dc:2c:bd:43:b1:
                    0c:55:f6:0a:44:c8:ba:9c:0f:18:7b:a9:2f:6d:5c:
                    f9:c6:db:f7:3a:b9:ca:f2:d3:35:c2:24:1d:f7:cd:
                    2c:48:7d:19:31:72:79:9a:24:ac:67:71:05:e1:3b:
                    a9:27:94:ae:33:8a:54:a7:63:2d:bb:35:a7:e9:b1:
                    12:39:53:89:08:7a:91:c7:5a:b0:b9:3e:92:0e:80:
                    c3:3c:a6:57:fa:1e:c8:23:6b:35:32:90:4c:c0:d9:
                    76:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:D6:0C:11:1C:3C:A6:B6:F2:CA:97:1A:22:14:CE:74:F4:C7:56:4F
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:6e:af:11:26:ce:e6:35:4d:a9:90:22:52:af:c4:70:e5:7b:
         ae:87:25:03:38:d2:04:97:7a:7d:29:99:c6:4c:f0:2b:79:e4:
         35:fe:4b:3b:32:76:46:2c:69:7b:50:70:29:06:9a:66:26:59:
         81:f6:52:5a:d8:9d:8b:d8:4f:10:c8:6d:42:d4:ad:db:44:96:
         6a:3c:e4:c1:e4:3a:10:34:79:59:42:74:ad:67:bf:47:8b:17:
         7a:f3:79:16:9f:40:8f:3d:f3:2d:b1:b3:fb:8a:f9:e9:6c:3c:
         6b:19:99:f8:75:63:29:d1:fb:b0:0a:5a:c1:82:75:ae:84:1a:
         23:36:cb:49:e8:73:3c:f8:6e:e0:30:3f:5f:5f:28:14:ca:e8:
         f6:bf:9c:a6:ce:cf:e0:14:c0:88:60:74:7f:27:ab:48:5d:e8:
         97:b2:99:9a:a3:71:ef:d2:28:84:87:ff:31:df:84:cb:81:6b:
         6c:50:f2:06:11:8f:4a:2b:a2:a0:07:49:92:b7:f2:61:4e:66:
         03:a7:be:c9:54:18:05:dc:22:61:17:a9:d6:5c:9d:e5:cb:a6:
         60:03:53:50:1e:f9:e6:ba:ab:9b:17:d5:54:77:6b:a6:91:09:
         db:e5:a8:cb:5d:9e:51:56:1d:78:22:10:72:e2:2b:b3:27:96:
         29:ad:ba:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:53:14 2026 by rpki-client