Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File:                     vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier:          QzTV3Lt4gx1fa3Nk9lL7FXEpeIJ30RXqokDNNUWS7/Q=
Subject key identifier:   0D:21:7B:B2:69:6A:EA:0E:89:F6:98:F3:3B:82:11:94:E9:44:55:0A
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer:       /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial:       019EBF5A4DD5B9B50ACD77A7DC3D018EEB16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number:          0330
Signing time:             Sat 13 Jun 2026 05:00:26 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:26 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:26 +0000
Files and hashes:         1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: dG5EfoEfmAxmHpMmi2kGJyRHNtQ4NZPOrW4EcbFVs3o=)
                          2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:4d:d5:b9:b5:0a:cd:77:a7:dc:3d:01:8e:eb:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
        Validity
            Not Before: Jun 13 05:00:26 2026 GMT
            Not After : Jun 14 05:00:26 2026 GMT
        Subject: CN=0d217bb2696aea0e89f698f33b821194e944550a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:97:78:b4:16:58:8d:7c:7c:30:2d:86:90:bc:
                    33:3b:a0:8f:f1:8e:34:fd:b0:f1:d8:bc:0b:26:d1:
                    d9:94:99:54:95:04:c1:9a:50:7a:56:a3:b3:39:8a:
                    1f:02:03:35:1c:be:70:db:18:f1:b0:40:48:99:e0:
                    77:27:54:f3:8e:44:f1:1c:ea:39:58:9d:29:53:c9:
                    4f:28:34:19:15:38:e0:ee:6e:56:be:20:4d:be:c9:
                    cd:d5:0e:58:c3:15:89:96:6a:c3:9f:30:6b:88:13:
                    c9:ce:3c:05:92:d7:97:bb:c6:e0:3a:b2:69:30:1f:
                    5d:d8:2a:ff:f1:db:e1:20:bc:e6:84:7b:a5:52:08:
                    02:ed:2f:93:48:38:0f:6b:86:58:58:73:f6:7c:ef:
                    a2:08:eb:7a:a7:fd:ff:fa:85:8f:82:d8:13:46:f1:
                    d2:4e:c7:e7:89:8c:63:9a:c7:71:f4:d8:ee:54:38:
                    3b:00:50:55:de:bd:e5:b4:a1:91:e1:66:62:f9:7e:
                    9d:af:9e:d2:26:d5:17:93:92:ac:0e:2e:b0:dc:5b:
                    96:ad:3d:cb:02:43:0a:dd:36:d1:67:7f:40:2a:39:
                    5a:93:c7:26:36:c1:ce:1b:ee:f4:60:1f:2b:96:f3:
                    bd:e1:f4:5c:ed:ba:f6:b8:cf:2b:a2:5f:31:6a:11:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:21:7B:B2:69:6A:EA:0E:89:F6:98:F3:3B:82:11:94:E9:44:55:0A
            X509v3 Authority Key Identifier:
                keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:82:d0:27:74:0c:6b:97:d3:fa:6c:b3:ca:50:7b:cb:d7:20:
         c4:63:33:07:31:1c:88:90:06:9c:82:70:6e:e5:10:3b:59:20:
         be:00:ad:9e:b0:93:fd:6d:12:d6:85:1d:4c:6d:c7:1f:36:75:
         5a:c6:24:62:ef:5d:ba:89:91:6c:82:69:ee:16:f6:1c:7c:71:
         fe:f4:8b:4a:0a:01:c0:22:d1:29:7d:dd:54:6f:75:90:b3:43:
         55:b4:3c:74:e6:82:27:75:54:24:64:2d:2b:ae:f0:70:ba:c9:
         a9:ce:d8:04:18:d0:41:c0:dd:82:c2:7d:4e:cf:c0:1d:27:a0:
         7b:20:29:2b:38:e3:a2:9f:d7:2c:45:30:fe:04:87:43:a1:c3:
         56:2e:86:dd:30:48:fb:48:69:3c:c0:cb:2b:e4:98:24:08:ed:
         d0:af:ef:c2:d8:bb:4e:9d:71:78:86:00:c7:2c:76:50:a3:d6:
         ce:06:71:dc:a9:d9:f9:fd:33:f0:23:08:b6:c0:fc:f5:1a:86:
         09:3b:ea:a4:27:d8:ec:77:1f:cb:e5:91:5e:10:2a:c5:72:ce:
         33:2d:e2:89:d3:00:b7:ad:c4:7a:0a:c7:be:c0:53:87:29:b0:
         2f:1c:c2:1d:83:39:a1:cd:76:bd:a7:04:46:b7:0a:d9:b5:27:
         cf:fe:60:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:10:52 2026 by rpki-client