Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
File:                     vjfHDxxn7KF3WnCckjXWovVVFrg.mft (raw, json)
Hash identifier:          GZufOTSqnHNvKLdjsHSHHFp+DSdU4n5E9NuyQSh+SZg=
Subject key identifier:   13:30:EE:7F:3A:53:F4:82:52:33:04:4A:8D:EB:9E:75:2B:0D:B2:ED
Authority key identifier: BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8
Certificate issuer:       /CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
Certificate serial:       019EC1B788B746BB9222AE87E94F0B883797
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
Manifest number:          0D5C
Signing time:             Sat 13 Jun 2026 16:01:31 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:31 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:31 +0000
Files and hashes:         1: FKH8xZJ_YHOc07BQdMH2-QcT4rI.roa (hash: Yvb0PbUbYKGYDycEyweK+TQumsZjfiIHZGi6vLPV4RI=)
                          2: UFyGWXWcim7DlwzYRFdDDxFp02E.roa (hash: kKnEir5+3nk1ouhvn6251pQ8Tl1aQO6TIVnnwdHfSdI=)
                          3: sdzS0oCftjlUBF_x6Se_monNeYk.roa (hash: WoH/tQiUE8dkOdaeguscSVlQ0r0KBSj1gMZzcaTJ6DM=)
                          4: vjfHDxxn7KF3WnCckjXWovVVFrg.crl (hash: Xz7AHwVjEIPwQhSQvy6o+Anrji2lK2NWQG1RfV5eQq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 16:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:88:b7:46:bb:92:22:ae:87:e9:4f:0b:88:37:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be37c70f1c67eca1775a709c9235d6a2f55516b8
        Validity
            Not Before: Jun 13 16:01:31 2026 GMT
            Not After : Jun 14 16:01:31 2026 GMT
        Subject: CN=1330ee7f3a53f4825233044a8deb9e752b0db2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:15:87:ce:81:69:4f:cd:d1:b0:5c:57:f9:29:
                    bd:98:25:38:1d:a0:06:99:d0:70:6b:62:33:0c:e2:
                    5a:94:08:d5:54:68:38:55:4d:8d:29:d8:50:7e:b2:
                    84:2d:f0:ea:e3:5f:e8:a2:ad:c3:37:f1:b8:ec:a4:
                    c8:16:c3:a5:00:7d:09:c8:1e:b9:cd:80:b1:20:e7:
                    9a:6f:32:66:01:2e:8a:5b:8b:56:0d:e6:a8:12:67:
                    a3:8d:c8:d9:30:83:e6:cd:73:ca:f9:6f:0e:20:e3:
                    d3:d6:d5:54:42:26:7d:83:ca:1a:ad:50:a4:a9:97:
                    0d:3c:ad:0c:07:02:c0:af:af:e0:13:6f:97:e9:3d:
                    55:4d:0e:a1:26:3e:30:3f:ef:d0:ad:ba:2e:1e:27:
                    9a:35:22:0f:62:22:9b:9f:c9:fb:27:8c:5d:dd:35:
                    16:c1:ef:1d:4f:36:29:88:b0:d4:14:69:a1:da:f3:
                    00:b5:56:12:09:88:cd:25:78:8b:44:04:6c:69:bf:
                    5f:e6:f3:64:a3:93:40:08:ec:ff:db:a4:64:e7:4c:
                    f2:68:9c:f5:59:1f:c3:ca:a1:0b:b4:2e:0b:53:2e:
                    25:fa:47:dd:6b:ef:7c:ff:0e:e9:27:c7:3b:76:b2:
                    17:47:f4:df:8b:e0:b7:56:e2:d5:71:26:3a:54:e2:
                    2f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:30:EE:7F:3A:53:F4:82:52:33:04:4A:8D:EB:9E:75:2B:0D:B2:ED
            X509v3 Authority Key Identifier:
                keyid:BE:37:C7:0F:1C:67:EC:A1:77:5A:70:9C:92:35:D6:A2:F5:55:16:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjfHDxxn7KF3WnCckjXWovVVFrg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/973431-5ae4-4521-9454-c8eb08ce9089/1/vjfHDxxn7KF3WnCckjXWovVVFrg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:d9:6e:5c:5e:a1:6f:43:ea:61:56:15:75:db:fb:cd:5a:29:
         1b:df:be:75:c2:7a:a2:c7:46:6a:21:4f:59:95:6f:4c:e1:af:
         b4:1b:37:5e:a6:fa:f8:22:5f:88:7a:32:ff:64:aa:d5:1f:67:
         31:1f:18:27:7e:b6:3a:2f:de:52:a0:0b:bc:0e:76:28:4f:86:
         42:90:1e:0a:02:c0:81:e1:bb:02:62:d8:21:c2:ca:d9:41:c9:
         48:f2:e3:fd:6e:e4:83:3c:bd:91:a1:c8:ee:ce:10:0a:07:f7:
         85:9f:4a:e0:76:a7:1b:3e:47:bc:3f:74:3f:05:a9:65:1c:cd:
         30:3e:31:75:9a:6d:f6:de:15:4e:b7:c7:c9:6f:f1:ff:59:5d:
         2a:b9:a0:36:1a:cd:09:70:c7:72:95:83:9d:c6:2c:90:16:12:
         05:fd:8f:d7:eb:03:84:9c:a2:da:0a:38:af:4b:37:c5:68:14:
         22:ff:3d:a0:9b:3f:88:b4:37:de:72:73:f4:fa:ef:9e:77:14:
         0a:b3:d3:ad:ae:df:37:14:c6:d8:17:d8:4e:5b:5d:cc:d6:45:
         53:e8:b5:da:00:2f:d8:21:1f:50:df:db:e1:22:21:db:2b:b2:
         51:86:2d:aa:cf:e4:eb:89:ea:72:32:14:13:bd:28:43:04:b8:
         9b:c8:65:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:15:26 2026 by rpki-client