Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
File:                     vL4wndalMhnOvVZb4fI0uT5WLjk.mft (raw, json)
Hash identifier:          WaC1gVQZSGQnnGPP0kSttOg/eneJBXy8onsYCaaOW0Q=
Subject key identifier:   EA:EC:3A:F9:67:4F:05:74:E6:15:6F:8F:D3:BD:B9:F6:38:58:40:4C
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Certificate issuer:       /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial:       019EBF233D096376F9551D5AEF4CAC613245
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
Manifest number:          0127
Signing time:             Sat 13 Jun 2026 04:00:17 +0000
Manifest this update:     Sat 13 Jun 2026 04:00:17 +0000
Manifest next update:     Sun 14 Jun 2026 04:00:17 +0000
Files and hashes:         1: vL4wndalMhnOvVZb4fI0uT5WLjk.crl (hash: XmtEVTjKa/0hwM5HeTIV+6mcuC1qi0EFlZFiWzn7SGY=)
                          2: y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (hash: wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:23:3d:09:63:76:f9:55:1d:5a:ef:4c:ac:61:32:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
        Validity
            Not Before: Jun 13 04:00:17 2026 GMT
            Not After : Jun 14 04:00:17 2026 GMT
        Subject: CN=eaec3af9674f0574e6156f8fd3bdb9f63858404c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:0d:2c:dc:b6:25:6b:0f:31:27:b0:dd:6c:1b:
                    fd:ad:d7:4d:b5:00:f9:a5:78:05:74:99:7e:7d:b4:
                    a2:eb:f6:8c:df:ae:34:01:a1:a8:a3:35:7f:41:0d:
                    3e:3e:eb:ca:8b:5f:ac:b3:8c:f4:4e:7d:28:ea:4c:
                    7c:8e:2a:01:e5:41:d1:28:c8:54:2f:c5:7c:fb:57:
                    36:64:d1:0f:09:2f:30:0f:f7:e5:3c:5e:33:6c:e8:
                    b5:4f:ac:09:6b:d4:a1:77:d5:3c:28:a6:53:b3:e3:
                    7b:b4:ec:d4:c4:83:42:85:8a:bf:55:f9:83:aa:5f:
                    cc:5f:f6:8a:4c:b8:f0:44:fb:ce:68:94:11:0e:a1:
                    d0:e2:19:c3:db:cb:c8:b5:49:dd:b7:a5:b6:8f:5c:
                    cc:3a:8b:2c:d7:03:5b:67:c0:b0:6c:2f:76:2f:d2:
                    0e:e7:21:f0:82:36:27:9a:cf:ff:87:a6:16:e6:70:
                    8e:da:1d:9e:ae:b2:43:aa:08:cd:50:18:e7:c5:a4:
                    31:32:9b:53:5f:3a:7d:d8:26:0a:f8:1f:d2:7a:36:
                    f4:ff:77:7b:f4:8f:3f:94:01:7d:dd:61:ea:14:bb:
                    f0:bb:c9:46:50:2b:b5:6c:6b:ae:ff:76:5d:3d:c5:
                    f4:2a:bb:27:54:8b:57:99:1b:07:90:94:8e:ab:b3:
                    e4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:EC:3A:F9:67:4F:05:74:E6:15:6F:8F:D3:BD:B9:F6:38:58:40:4C
            X509v3 Authority Key Identifier:
                keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:2b:03:8b:b8:c7:42:c4:56:1d:a1:69:3f:39:dd:65:26:7b:
         d5:d8:3f:89:78:bd:18:f6:e5:55:26:5e:dc:ef:66:e1:f9:f0:
         c6:19:35:8f:8f:11:54:d7:5f:64:96:09:bc:91:b1:54:9a:d3:
         7e:24:ba:3a:3e:57:6e:98:24:7f:40:6f:95:8d:ca:12:2c:3c:
         26:dc:93:73:01:38:d4:4c:9a:8d:97:a2:7b:78:89:e8:6d:09:
         62:79:6a:1f:77:c3:da:54:e6:b3:9e:86:48:f6:4e:9e:2c:5d:
         31:9b:26:27:e9:9e:9c:0a:d3:7b:fc:98:15:80:96:26:b7:f1:
         ee:39:b2:b0:9c:a6:11:66:5f:08:2d:6b:11:5b:68:a6:20:60:
         3b:4e:af:ef:ae:61:50:cd:f4:a0:5e:fb:de:9e:54:3c:e3:f3:
         14:eb:a6:61:cc:c8:9b:83:94:dd:e1:bc:48:51:52:d4:59:12:
         96:d0:ee:01:54:12:b0:99:82:1b:57:0f:7a:64:e2:ad:07:bf:
         0c:03:00:cb:da:ac:58:60:70:5b:51:02:bf:b1:b2:2a:fa:fd:
         f2:5a:fe:0f:ae:aa:67:1c:59:29:3c:70:35:8b:e2:f9:04:a8:
         9e:46:79:13:47:46:15:8e:c0:20:9f:e2:4b:e3:f9:5c:ce:fa:
         27:9c:d0:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:36:14 2026 by rpki-client