Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File:                     vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier:          wSNzUJ+ihLEJmIL0RSe6NZl2155Bb04RV53wEk1FYIM=
Subject key identifier:   D0:A2:B1:15:2D:2B:BF:10:D1:DA:0B:0C:CA:76:9A:1B:6E:58:7E:95
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer:       /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial:       019EC0DB2ECFCA9E33ED8AB5525B49F2C6D2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number:          0710
Signing time:             Sat 13 Jun 2026 12:00:50 +0000
Manifest this update:     Sat 13 Jun 2026 12:00:50 +0000
Manifest next update:     Sun 14 Jun 2026 12:00:50 +0000
Files and hashes:         1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
                          2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
                          3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: dTh3awpWjeclyL4Qs6SrTdmbhVnJk7DgMVf2QqSbxpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:db:2e:cf:ca:9e:33:ed:8a:b5:52:5b:49:f2:c6:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
        Validity
            Not Before: Jun 13 12:00:50 2026 GMT
            Not After : Jun 14 12:00:50 2026 GMT
        Subject: CN=d0a2b1152d2bbf10d1da0b0cca769a1b6e587e95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:24:bb:94:c9:47:70:a5:de:ec:85:e4:c0:48:
                    ba:1b:4d:56:9f:63:64:84:99:a4:f9:d2:2d:f5:24:
                    be:bc:0b:24:f6:31:21:f6:c2:14:96:a7:d5:32:16:
                    20:1b:1b:ee:e8:b4:9a:31:0c:58:e3:33:c2:5b:c6:
                    44:49:ff:0a:4d:2b:5e:d7:b6:5b:7f:0d:6c:09:05:
                    3f:ca:dd:82:5c:19:dc:e7:8b:32:85:88:15:d0:5f:
                    24:d3:9a:e7:b4:2f:09:d7:53:c6:78:a1:57:cf:db:
                    e9:ae:30:4f:d0:0a:72:31:e1:5a:ec:f6:49:d9:84:
                    de:25:92:e4:27:27:c0:dc:e4:2f:82:61:37:a5:f4:
                    8a:6f:6d:25:7f:79:3c:6c:c0:c6:33:b2:92:5c:42:
                    07:7b:dd:26:d0:5e:19:dc:50:b4:b7:3a:75:f6:5e:
                    9a:7c:21:c4:a7:d5:11:0e:17:5d:b8:eb:79:b0:f9:
                    af:5f:12:bc:4f:47:73:23:d9:1c:ff:c9:b0:eb:f9:
                    f7:9e:dd:21:f6:a7:9a:1c:80:8e:ad:b1:1d:3c:4c:
                    6e:7c:02:30:b5:13:e3:1d:cc:44:6a:65:8e:c6:e4:
                    bd:94:b0:02:3b:2d:1e:86:30:f7:c5:f3:b8:64:ce:
                    66:3b:f7:3c:2a:1c:30:24:58:25:c9:86:4a:ec:c7:
                    a8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:A2:B1:15:2D:2B:BF:10:D1:DA:0B:0C:CA:76:9A:1B:6E:58:7E:95
            X509v3 Authority Key Identifier:
                keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:5c:5a:e0:fe:b4:72:1f:08:2a:bd:78:92:8c:7d:75:2e:43:
         bb:b9:fa:0b:80:23:4e:62:29:f0:8f:8f:59:42:a5:3b:0f:0c:
         59:7d:a0:2a:4e:c0:78:89:4d:24:6c:1f:71:65:44:b8:c7:26:
         33:9c:58:57:a8:97:d5:ee:aa:c3:7c:19:77:05:dd:aa:df:41:
         85:44:e8:19:f7:65:54:7d:2b:e9:a0:d5:54:b8:92:73:44:6b:
         a6:b9:c2:9c:0f:18:63:96:9c:d9:f9:45:fa:f1:0e:93:39:07:
         b0:80:5a:9f:22:64:df:c4:8c:1f:50:26:3c:d0:99:9f:b0:23:
         65:12:ad:f3:32:62:73:36:04:79:0a:ac:b9:73:e2:4a:35:57:
         a0:13:32:10:eb:d5:5a:ba:cd:10:97:a2:1f:49:23:e9:c9:4d:
         05:94:34:e5:f6:df:e2:57:eb:95:f3:55:40:c7:bf:85:10:b6:
         82:ca:3f:19:55:94:59:0a:8e:3c:0a:c9:6c:82:86:fa:e0:c2:
         20:55:3c:f5:42:e4:37:ee:f2:0a:15:ff:af:fa:d7:65:e1:2f:
         72:2b:31:20:13:55:be:bc:e5:a6:b4:4e:55:cc:4c:5d:71:e6:
         59:3b:a0:48:01:17:5b:e1:0e:b3:d3:1f:2b:fc:33:7e:91:3c:
         0c:02:4d:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:39:57 2026 by rpki-client