Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
File:                     vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft (raw, json)
Hash identifier:          HdqQYwf+7/gbT6+U1qyUvR3HVemiSgPhPjWrKpxe15Q=
Subject key identifier:   CC:55:80:29:1A:26:BD:FB:47:03:37:47:31:75:23:94:D2:E8:A4:4F
Authority key identifier: BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25
Certificate issuer:       /CN=bd02616554632356450bc4bb4b6dacfc79df3025
Certificate serial:       019EC337FBB96B026478E8E85ECD8A54DE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
Manifest number:          0F23
Signing time:             Sat 13 Jun 2026 23:01:26 +0000
Manifest this update:     Sat 13 Jun 2026 23:01:26 +0000
Manifest next update:     Sun 14 Jun 2026 23:01:26 +0000
Files and hashes:         1: 7AdqwFeOvZzL1Lrf8cQvdUqvAAI.roa (hash: 5arTTImvBzaIRupQVayIK37D8OB4WYArstAWqXrZVwM=)
                          2: vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl (hash: OuZPazLOz8gPAR+mmrt86gA7BsfWgWw8vivfD5pT3/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 23:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:fb:b9:6b:02:64:78:e8:e8:5e:cd:8a:54:de:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd02616554632356450bc4bb4b6dacfc79df3025
        Validity
            Not Before: Jun 13 23:01:26 2026 GMT
            Not After : Jun 14 23:01:26 2026 GMT
        Subject: CN=cc5580291a26bdfb4703374731752394d2e8a44f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d0:87:78:bb:03:74:5e:d9:5d:42:ae:fa:3b:
                    2e:55:b0:cc:82:b9:62:b2:2f:b8:db:aa:46:29:1d:
                    f9:0a:43:73:96:0e:66:7b:1f:27:43:8a:99:12:52:
                    4a:1d:df:2f:4a:be:ed:5f:63:51:c5:48:c0:39:b8:
                    49:df:79:e1:50:8d:10:4a:0f:93:d7:2f:1c:e2:fa:
                    d8:0f:6f:e0:5f:66:36:75:3d:bd:a2:04:78:23:6f:
                    af:48:d7:3c:49:3d:7c:27:09:02:f0:f9:b7:eb:b6:
                    c8:95:10:57:d0:55:ac:ef:58:65:68:07:13:a7:ed:
                    35:f1:45:79:90:4b:3a:f3:8d:75:f9:a4:1f:30:d0:
                    85:a2:28:c8:53:c4:33:07:83:e1:94:42:b3:be:94:
                    6d:77:85:ec:ca:1d:74:84:b4:01:81:28:ee:f5:e0:
                    18:b2:7b:d7:99:f0:3e:d3:86:a1:9d:d7:60:e2:4c:
                    80:b8:02:b5:3a:b2:25:a4:8e:df:13:d6:4e:67:e4:
                    3f:b7:82:c6:80:3a:bf:97:9d:d7:60:ce:2a:51:25:
                    81:88:5f:05:3c:bf:12:34:68:c2:3c:e8:ab:33:73:
                    a9:69:7c:e4:58:5d:b9:4b:c8:b2:ca:a0:14:87:ec:
                    60:de:04:79:b6:31:49:76:31:a1:30:2b:12:e1:3c:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:55:80:29:1A:26:BD:FB:47:03:37:47:31:75:23:94:D2:E8:A4:4F
            X509v3 Authority Key Identifier:
                keyid:BD:02:61:65:54:63:23:56:45:0B:C4:BB:4B:6D:AC:FC:79:DF:30:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQJhZVRjI1ZFC8S7S22s_HnfMCU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/4b63ea-e4f0-44b0-bd2e-9e19d08cb71f/1/vQJhZVRjI1ZFC8S7S22s_HnfMCU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:20:c7:11:eb:1d:36:ec:ac:e0:b9:d4:6c:bc:cb:24:46:08:
         07:a6:41:68:2d:f1:ba:90:81:70:6c:56:96:92:52:bc:77:e3:
         0b:93:a3:aa:b2:6c:4c:84:72:7a:1f:41:af:1f:ee:e7:cd:35:
         93:95:10:32:3d:3f:6b:46:02:62:b4:37:85:30:1b:05:31:a0:
         ff:fa:26:57:41:1e:17:cb:ac:0f:47:92:5e:ac:da:d5:68:11:
         3e:8d:f3:9d:b7:b7:a9:6f:ba:14:69:f6:08:81:77:0d:45:b5:
         8d:19:dc:98:c6:51:4c:76:b4:4f:7a:ac:9f:85:a9:14:3b:7c:
         be:70:42:a3:ee:8b:bd:ef:ec:58:56:a9:40:9f:bd:b9:80:23:
         d3:6b:0b:67:f6:1e:9c:d6:e2:70:2b:da:54:ec:ea:97:66:36:
         62:5d:ae:de:96:e8:b8:64:24:bf:7a:f3:f9:02:9f:99:33:9f:
         48:c8:d7:54:36:9f:77:95:76:82:2b:89:d1:06:f8:e7:20:16:
         04:05:b7:33:15:fe:e1:cd:0a:fa:fa:f5:0a:70:64:1d:2e:3a:
         45:c1:b8:57:2a:44:3c:1c:f5:92:56:59:70:78:1c:67:af:4a:
         08:17:50:e2:aa:54:04:00:27:3f:11:d1:29:90:7d:55:14:58:
         30:3b:51:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:35:38 2026 by rpki-client