Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File:                     vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier:          G1mfR/RTv2cdfb8ccIr/f4GnODF1vJHAkpfuCmOyWGo=
Subject key identifier:   80:83:23:7F:FB:03:8A:C8:B2:50:FE:00:48:B0:E5:FC:27:59:01:12
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer:       /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial:       019EC25B7321038DC8EEB452FE104D7102A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 19:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 19:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 19:00:33 +0000
Files and hashes:         1: 1-jVMWvCo1Ia8-NPvjqSraY5h6j8.roa (hash: UbgB51BsUdBtKMnN7GLkK8Ly1Wmd/yhJ431EUB3j0ds=)
                          2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: P3mIRCAwUymr08S/EHc0cncbbGfKJrijjm6KaTlGCcs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:5b:73:21:03:8d:c8:ee:b4:52:fe:10:4d:71:02:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
        Validity
            Not Before: Jun 13 19:00:33 2026 GMT
            Not After : Jun 14 19:00:33 2026 GMT
        Subject: CN=8083237ffb038ac8b250fe0048b0e5fc27590112
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cb:bc:b4:7b:d7:1a:ef:15:d9:4f:db:87:e6:
                    77:e3:1a:f7:87:c1:0e:1b:13:24:1a:8e:bf:35:ef:
                    36:29:fc:0c:59:14:01:e2:34:39:18:a3:9d:81:8a:
                    8d:f8:59:ee:38:cd:68:da:8f:5a:83:ef:29:36:a2:
                    2b:c5:26:d4:8e:4b:c4:1d:8c:e1:14:3a:c1:83:eb:
                    5e:6a:94:3e:4e:27:8f:77:33:28:ee:07:06:0a:bc:
                    d9:05:d8:37:d6:51:9b:58:84:85:27:97:72:40:18:
                    77:e7:8f:5b:6c:0a:09:ed:fa:ca:bf:f0:3d:47:98:
                    cf:01:17:08:36:2b:fe:10:df:0a:bd:4d:66:a3:a2:
                    0b:9b:f2:58:ab:9f:6e:35:eb:48:49:e3:1e:2b:83:
                    ad:be:2e:3b:57:6b:03:48:8f:4c:28:4d:db:ff:ed:
                    70:58:97:da:8c:52:3f:4f:bc:2c:fe:19:14:27:b4:
                    ab:f8:6c:05:3a:d0:2a:db:41:a9:77:78:75:8a:b8:
                    b3:a5:e8:5a:0c:aa:f2:48:34:ab:9a:66:d5:0a:ff:
                    21:bf:07:da:c7:8e:48:8f:5f:1b:bc:da:06:c7:b6:
                    0b:ed:41:16:4c:7b:a0:04:7d:2d:0f:cf:cd:ef:83:
                    7c:6f:22:75:d7:1a:08:b7:93:d5:01:77:21:47:63:
                    ac:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:83:23:7F:FB:03:8A:C8:B2:50:FE:00:48:B0:E5:FC:27:59:01:12
            X509v3 Authority Key Identifier:
                keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:15:78:8c:15:bd:3f:0d:e7:e8:1f:f6:85:69:66:a7:39:e5:
         90:b1:3c:74:c8:44:12:33:63:f4:e3:54:9e:2e:cc:21:1b:1d:
         76:9f:76:d7:5c:fe:73:c0:ee:e2:ce:47:1a:3a:aa:f5:d3:3e:
         cc:2d:fd:5d:a4:3c:e7:ab:be:7e:6d:12:42:34:71:9f:99:ef:
         e0:e7:85:6e:fb:2b:34:3b:14:dd:b7:f3:71:58:fc:ac:70:02:
         5e:98:84:f4:ef:48:a3:d2:d6:d5:c7:5a:18:c9:c1:80:f2:d4:
         13:89:52:2d:2f:e5:71:38:58:47:6d:45:fd:83:c5:bc:f0:46:
         2b:b2:29:9f:25:01:6a:4c:51:bd:07:3f:f5:3f:20:53:5d:72:
         31:7f:3d:00:45:d5:23:f6:ea:7c:ba:4d:16:c9:79:03:8d:79:
         85:fd:04:22:b1:df:a7:bb:0e:c2:6d:8e:89:70:ab:28:0b:80:
         19:83:fb:5f:d2:fa:d7:e5:4c:29:b0:37:22:dd:da:2f:d5:d3:
         78:d5:2d:0b:47:e1:da:47:3a:fb:33:91:7a:47:15:6c:2d:70:
         57:3e:e2:56:73:5c:d2:cb:5c:3a:0a:7c:1b:0a:3c:af:b6:72:
         a2:94:83:99:d9:68:0d:48:cf:11:ec:8b:95:b2:c7:a7:24:d6:
         ef:9b:be:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:39:43 2026 by rpki-client