Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File:                     VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier:          Usvhz8RULnusiic8QjMra9VHb4hYIYocjxobbnE03hI=
Subject key identifier:   E8:C4:F2:F1:B0:60:7B:DF:6E:D7:89:42:F7:2A:CC:40:2E:3E:82:D8
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       019EC0A463CEFB999279BA55058FE4A73CBB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number:          0DB5
Signing time:             Sat 13 Jun 2026 11:00:59 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:59 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:59 +0000
Files and hashes:         1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=)
                          2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=)
                          3: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=)
                          4: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=)
                          5: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=)
                          6: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=)
                          7: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=)
                          8: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=)
                          9: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: kS6YdLd3YPa/EcYubHm+4vICYDZdEaSLKqfXbXKm3vM=)
                          10: _8UAnkY-Tgc4NZnERUShSjoD4xE.roa (hash: vjUpfIBIALtCY5M3wtuciypbGi/vBvMv2oVQ1jTAtsM=)
                          11: bbeNuCdJXqCYIUtyU2bTHnhe0pM.roa (hash: /lbmYbffftG0vT1jDvQWmIRNnGgrK51SKBZCKYo4Ly0=)
                          12: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=)
                          13: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=)
                          14: iryj8oj2-V8BM-nhifn9xaWFT6k.roa (hash: J2c6WbxcvYg3n0i5rwopADF8nqS8/EkzKqjIvyGqKVg=)
                          15: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=)
                          16: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=)
                          17: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=)
                          18: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:63:ce:fb:99:92:79:ba:55:05:8f:e4:a7:3c:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Jun 13 11:00:59 2026 GMT
            Not After : Jun 14 11:00:59 2026 GMT
        Subject: CN=e8c4f2f1b0607bdf6ed78942f72acc402e3e82d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:22:e5:eb:50:7c:75:a8:6f:84:1c:f3:3c:e9:
                    bc:e4:38:7f:81:ea:2b:50:5e:bf:af:71:bd:26:43:
                    97:2e:0d:6c:64:b4:76:bd:11:b9:d3:1d:17:5f:80:
                    1b:69:73:f0:23:1a:64:1f:10:e9:40:73:89:92:35:
                    53:b3:af:bf:29:33:5c:8d:ea:e0:2d:a3:13:58:cb:
                    06:6c:3f:d6:43:86:e3:1c:34:f6:29:93:84:cc:dd:
                    5e:c8:97:68:73:ec:aa:e2:2b:00:37:fa:9c:8e:46:
                    67:ee:0b:41:5d:f7:78:9b:40:c7:b3:0e:c2:30:2b:
                    04:62:45:67:74:4b:21:3a:00:83:be:d9:da:77:fe:
                    f5:b2:2a:25:9c:0d:cd:f5:4d:fb:b6:22:e6:f3:4f:
                    b3:0d:db:b7:4b:ce:56:fb:c4:31:43:3d:aa:ea:45:
                    2b:42:6b:29:34:16:93:e8:ad:c0:81:fd:b9:82:33:
                    cd:ca:2e:7e:58:24:77:be:13:2b:b4:97:e8:80:ef:
                    d0:b6:45:c6:d7:33:f3:54:b4:23:f2:84:4b:cf:a4:
                    42:b6:2a:72:6e:91:62:10:b4:62:74:71:95:bf:5a:
                    43:8f:e9:6a:a6:d1:2c:b2:06:57:9c:24:6a:58:3c:
                    90:94:a0:79:9a:4a:34:2f:74:f1:80:6b:bc:ca:b3:
                    6d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:C4:F2:F1:B0:60:7B:DF:6E:D7:89:42:F7:2A:CC:40:2E:3E:82:D8
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:92:ef:74:0d:f4:a0:c0:d5:62:15:51:ec:bd:cd:a3:12:6f:
         b2:a6:f3:8e:37:d2:0c:94:85:df:c7:ef:13:30:b6:6a:d1:23:
         90:31:db:51:b4:18:b9:01:22:16:92:6d:7a:43:da:c3:54:05:
         48:e7:89:72:bc:44:af:63:ab:70:cb:c8:43:e3:63:27:17:bb:
         f7:70:d9:c3:af:a9:0a:16:77:a5:e1:aa:70:d4:1a:97:58:9d:
         23:74:53:85:bb:f9:ef:ae:45:6e:e3:01:50:d7:71:f9:4c:c9:
         03:6a:d3:df:66:db:ff:27:45:12:61:c7:6c:f9:45:47:46:c2:
         d0:7e:a2:4b:56:2f:8e:a6:0a:5b:c7:c6:c7:d7:c7:f4:a8:5a:
         42:44:58:04:3f:c8:fe:65:6e:80:c8:32:b7:0d:6b:12:e2:d8:
         6c:1a:a8:6d:38:01:77:09:af:68:87:67:5f:bc:fe:b2:de:83:
         b4:75:d0:e0:e3:ef:6b:52:cd:58:dd:eb:f1:f8:2f:3e:cd:9a:
         e5:55:e1:b2:c1:e4:20:13:43:03:e0:02:4a:0b:a4:17:e5:ce:
         3c:8c:24:02:18:90:1d:90:5d:29:41:87:a5:11:9f:6a:bd:ce:
         4f:25:ca:10:6d:da:a1:8e:ec:5c:a1:74:a3:d7:51:3b:1d:df:
         24:ac:37:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:08:23 2026 by rpki-client