Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          lPWYznasgPiEaXPJJ1TnomKU430AQJX9N57E3uFzpbU=
Subject key identifier:   3F:ED:AA:2C:9A:9D:00:1F:11:57:BB:1B:E6:DD:9D:CA:6D:F8:09:57
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       019EBE112AE960481A1415AD4844358A8637
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 23:00:56 +0000
Manifest this update:     Fri 12 Jun 2026 23:00:56 +0000
Manifest next update:     Sat 13 Jun 2026 23:00:56 +0000
Files and hashes:         1: CnLU5sdd9_xh2OEtCZx6z-2dgTY.roa (hash: n31FwsvZCRP5aWFMhgbGP9qd5w+wCRJhNJerptRYayU=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: /4w5g0ifksswrwzXnSX1FUiJydvAxmfP3SRGhlhE7bw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 13 Jun 2026 23:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:be:11:2a:e9:60:48:1a:14:15:ad:48:44:35:8a:86:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: Jun 12 23:00:56 2026 GMT
            Not After : Jun 13 23:00:56 2026 GMT
        Subject: CN=3fedaa2c9a9d001f1157bb1be6dd9dca6df80957
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:c5:f3:4b:6e:be:aa:1d:1e:0e:d7:4b:5b:
                    23:b3:a8:06:87:8d:31:ee:6f:94:79:d2:3a:85:b9:
                    81:16:9b:38:29:d9:c8:81:45:f8:03:1a:de:90:a5:
                    28:a5:d5:17:5e:6f:ed:5f:8c:4e:80:9d:3f:7d:94:
                    13:35:79:10:0a:77:f2:23:89:ff:51:8d:83:0e:03:
                    c0:ae:8e:48:7b:11:4a:9a:6b:c0:97:73:78:fc:74:
                    a7:75:68:63:7b:dd:24:52:6b:86:83:9e:23:92:4b:
                    92:06:31:0e:bf:9f:30:c5:fb:a9:3c:ce:c3:89:a6:
                    dc:91:0b:45:44:d1:0e:54:fc:e4:a3:7a:c7:d6:fe:
                    96:e7:42:98:8f:8d:c4:23:95:de:d1:a5:28:26:bc:
                    6e:c4:e3:89:da:79:a8:e9:a5:0b:2b:97:3c:66:0d:
                    d5:f7:f9:91:05:ac:f7:c0:c7:e3:70:1f:9e:51:cd:
                    d2:51:cc:e9:39:e9:47:a3:85:4e:16:b1:40:bf:d3:
                    0e:61:5c:5b:cf:bc:ee:df:74:b7:bb:ec:fc:58:bd:
                    ee:af:5d:b3:68:af:f1:03:9c:f0:39:17:37:a9:74:
                    50:2f:fc:5c:60:40:38:9d:29:05:82:c2:cb:97:85:
                    53:f7:ee:10:49:8f:71:19:04:ef:ca:13:65:16:76:
                    6a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:ED:AA:2C:9A:9D:00:1F:11:57:BB:1B:E6:DD:9D:CA:6D:F8:09:57
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:9c:1c:9d:22:47:3d:96:65:c1:ed:62:41:a5:02:de:f2:07:
         08:60:68:56:21:14:39:f8:ea:56:ef:a1:3f:8a:4a:66:6a:ec:
         e7:07:41:ce:31:b0:65:cc:6b:13:84:2e:14:28:83:12:7a:4b:
         06:cc:49:b2:b7:cf:99:b3:15:d6:c2:bf:b7:85:72:f0:a4:f4:
         3b:81:33:b7:61:97:24:ad:f5:b4:0c:1a:58:3a:3f:32:24:9b:
         96:34:3d:eb:2b:fc:e0:af:2a:65:37:89:18:7c:ce:89:cf:8b:
         19:47:5a:93:6a:cc:7b:98:f5:2e:df:10:5a:bb:45:ad:2f:f8:
         01:1a:2c:e9:73:57:1e:6d:4a:b3:49:e0:51:c6:0d:de:d3:2b:
         00:cd:94:c2:c3:eb:51:3d:0b:70:d8:5c:d9:5e:f6:d6:a2:ab:
         b0:eb:7c:c0:8f:7e:02:a0:2d:75:e0:05:7c:c8:cf:41:74:0c:
         25:15:a1:39:57:ef:d7:2d:04:bd:4e:25:65:dd:d7:77:9e:b6:
         c5:cc:c9:97:76:92:da:5f:17:54:e9:af:3f:4e:e1:4f:66:0d:
         16:b4:26:39:af:b1:2d:95:85:bd:29:fe:f4:b8:5a:c3:9b:17:
         c9:a8:ab:2f:34:e0:fa:45:bb:e0:1b:e9:6b:33:b2:f5:1e:63:
         59:91:54:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:01:53 2026 by rpki-client