Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          ekkrNCpjA2yD9P/nh8AyDKbxO9xw+rUAsqLnTOJj2Ls=
Subject key identifier:   CE:CD:5D:27:40:31:2A:F7:3B:6B:73:27:E4:67:0F:60:9E:F2:3E:12
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       019EBFFF4BD66055A4F43F8D94D24F978E9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 08:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:39 +0000
Files and hashes:         1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: rZP/DdT+KuNw6PqKSiH96o9Hrcv2mamAHhVpN49jUzQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:4b:d6:60:55:a4:f4:3f:8d:94:d2:4f:97:8e:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: Jun 13 08:00:39 2026 GMT
            Not After : Jun 14 08:00:39 2026 GMT
        Subject: CN=cecd5d2740312af73b6b7327e4670f609ef23e12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:7a:0b:b9:65:b2:f4:ad:bd:22:8c:e5:6c:
                    7c:a4:99:2d:da:f5:dc:a5:fc:22:4a:77:f8:ce:93:
                    40:57:f2:dd:d5:99:f9:34:3f:65:dd:9d:20:ae:9d:
                    36:a7:f2:83:93:4a:11:2b:f8:6d:72:48:62:84:d5:
                    d4:5e:d1:1e:89:6b:74:d7:8f:36:bb:9d:47:87:82:
                    81:bb:ce:27:db:99:a2:10:e5:c5:1b:e3:2e:87:d0:
                    47:b7:58:f3:03:45:11:51:08:17:10:2f:da:d8:8b:
                    3a:68:26:58:d6:e1:99:9a:b1:48:62:22:db:f7:63:
                    34:c7:a4:86:40:7e:11:f7:cf:ed:6c:10:41:16:45:
                    3e:19:e0:f0:dc:58:13:a4:8b:5d:00:1e:d8:f4:ba:
                    08:be:02:66:51:88:b1:25:a1:95:a1:04:4a:3c:01:
                    f4:60:64:e4:31:6e:7c:9f:50:a9:fc:f8:ce:10:b9:
                    53:b0:8c:b0:53:14:4c:dc:e4:7a:14:dc:a9:4b:4a:
                    e6:0c:45:2b:a5:14:a9:67:3e:2b:2a:f1:c4:d6:ad:
                    0b:41:4e:81:5d:d5:36:9c:07:7d:1b:6a:6f:39:6f:
                    3c:65:5b:3f:2b:87:d2:55:59:bc:64:13:97:d1:4e:
                    7b:53:a9:5e:fd:69:d6:07:37:0e:3b:f8:98:08:11:
                    82:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CD:5D:27:40:31:2A:F7:3B:6B:73:27:E4:67:0F:60:9E:F2:3E:12
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:6c:a2:2f:bf:9f:f4:98:14:cc:34:eb:ca:5d:e3:77:8f:85:
         53:a6:98:ac:0b:2d:87:12:f2:e0:da:cc:23:8c:1f:e7:98:14:
         b6:7e:a3:2a:30:83:93:3c:59:62:1e:1d:cc:36:af:ff:94:87:
         c4:0b:69:1d:05:ab:de:b7:fe:ef:7c:51:78:f9:ff:fb:36:cb:
         c5:7a:0c:e0:17:54:29:32:43:e9:ad:69:9f:88:82:48:bb:1e:
         ca:97:e8:04:14:0b:e6:91:d1:4a:0e:5e:4b:5b:4b:33:ba:e4:
         26:83:b9:58:e1:2e:65:dc:09:1d:a3:e0:cb:d5:b4:fa:28:d3:
         e0:be:d9:11:fe:5d:ef:85:f6:0b:d2:31:33:69:26:27:93:6a:
         52:e1:e3:ab:74:15:ed:40:64:cf:2a:de:3b:3d:01:90:c5:b8:
         fe:fc:03:ee:4d:21:14:48:76:49:9c:da:42:2c:a9:2d:32:14:
         f5:25:1d:a6:f1:7d:5e:f6:90:ee:6c:fe:29:9d:27:ac:4e:83:
         45:e2:89:09:4b:5f:ba:d4:64:77:cc:fd:6e:06:12:aa:5c:73:
         a2:c3:21:b7:68:01:52:b3:fa:75:24:dd:a5:cb:d3:d4:cd:77:
         dd:62:f5:74:e5:5a:7c:ea:a5:f3:89:c4:a6:c4:fd:9d:68:57:
         7c:f4:4a:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:53:27 2026 by rpki-client