Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File:                     vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier:          yG4B2qROb2W2mkybTP0SQtG+KsBEY2twVA8/67jIYSY=
Subject key identifier:   A5:9F:AC:57:EE:8A:02:FE:4C:1D:1F:AA:8D:19:8B:6C:C7:59:7D:B1
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer:       /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial:       019EBF5B2E8F1298CD16CF3CA09130073582
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 05:01:24 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:24 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:24 +0000
Files and hashes:         1: J9YAUFwPteiNE41P-B9PZesABw4.roa (hash: aWHkIvoqLm8EJJK/XFEsvikfiT0fdWpAKa84pZKqHPU=)
                          2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: mpv/OoMe8KUWqOqIH3ADom/sFq72BsgR9sQGZZib4i0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5b:2e:8f:12:98:cd:16:cf:3c:a0:91:30:07:35:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
        Validity
            Not Before: Jun 13 05:01:24 2026 GMT
            Not After : Jun 14 05:01:24 2026 GMT
        Subject: CN=a59fac57ee8a02fe4c1d1faa8d198b6cc7597db1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4c:75:c4:58:0f:80:43:88:59:94:85:77:c3:
                    ee:42:ba:a8:f0:ad:fd:45:af:f7:63:fb:f4:15:de:
                    93:60:ae:ae:2b:b7:ab:2a:d7:8a:71:75:00:6c:a6:
                    83:d6:c9:39:e0:31:34:55:f5:7a:75:a9:bb:c9:c8:
                    5d:1a:7f:d5:1e:b5:90:46:47:c4:67:49:a7:ef:75:
                    49:b6:70:22:cd:fb:af:ea:35:44:c1:1b:e6:e5:f5:
                    9a:e9:81:dc:5d:ed:3e:c2:5b:c5:13:64:9b:d7:7e:
                    f0:8a:dc:16:90:1c:61:54:e3:b8:d4:b4:ac:a0:fe:
                    d5:61:b7:2c:7c:39:72:5e:eb:f2:cb:e3:3e:93:88:
                    3d:8b:38:23:8d:14:9b:87:d6:6f:3b:f6:9c:82:8a:
                    52:45:85:5c:4c:e1:64:d9:79:56:fd:ce:48:a3:6b:
                    0e:c7:41:72:91:95:8b:6e:47:05:89:c9:e3:57:b2:
                    29:99:75:1b:8a:2f:42:1d:90:bc:47:8b:a5:b4:7a:
                    ca:84:1c:70:43:1f:d7:53:72:32:6a:22:4c:d1:dc:
                    68:6c:01:1f:0e:27:f5:f4:48:5f:5c:c4:32:81:17:
                    83:f0:39:34:df:09:7b:8e:37:c2:94:09:10:7d:35:
                    42:c4:73:26:79:45:3c:41:a4:fc:a8:9f:97:f0:3c:
                    24:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9F:AC:57:EE:8A:02:FE:4C:1D:1F:AA:8D:19:8B:6C:C7:59:7D:B1
            X509v3 Authority Key Identifier:
                keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:e0:c8:0e:27:06:d6:e1:d5:7a:46:31:1a:6e:51:14:b0:de:
         ab:99:1c:ce:ea:c9:46:fb:01:a2:c3:c4:f4:44:9e:9e:88:93:
         a5:c6:be:c5:e8:0e:ce:fc:f7:3d:bf:d7:16:3f:18:6f:f6:89:
         26:64:b0:f9:77:7a:30:57:c6:2c:02:f1:91:7e:08:21:77:0d:
         c8:1d:26:42:bc:58:44:bd:22:4d:b2:a2:0d:8f:d2:3d:d2:73:
         ff:cc:f8:5c:e5:3d:be:88:6c:da:78:94:db:6e:2c:78:3e:86:
         62:b2:85:fe:8b:1c:3b:3d:5a:71:b7:49:4f:22:a0:05:95:d3:
         2f:0e:1e:23:ae:e7:6c:57:be:38:8a:31:3d:2d:9f:50:8e:a5:
         0b:23:60:41:cf:75:61:69:ec:6a:15:f3:e2:f7:c4:9b:04:57:
         f3:6a:86:b4:37:f7:4f:40:b2:5d:b4:18:53:21:ac:1a:fe:ef:
         60:cd:68:ba:1a:e8:42:12:13:d2:b5:6c:53:c5:15:9b:2c:87:
         0e:0a:10:9c:ce:74:22:89:94:f0:8d:7a:58:c9:22:30:e3:73:
         d7:a7:8f:cd:2a:78:84:1e:16:67:e2:5b:1b:3c:bd:04:e9:e4:
         dd:44:86:af:b5:7a:3d:07:6f:aa:42:72:f3:52:6f:d8:7f:f4:
         e7:0b:ed:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:25:59 2026 by rpki-client