Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File:                     VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier:          NDGC3EEReKX5luqu9XgkJUj9ch0axc1stDpA8AcVh/4=
Subject key identifier:   9C:E9:4D:B1:FE:F1:0C:DD:97:8F:85:ED:A8:4A:12:5E:09:D8:97:52
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer:       /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial:       019ED34FD07949BE6408B6ED18906A854771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number:          05CD
Signing time:             Wed 17 Jun 2026 02:01:23 +0000
Manifest this update:     Wed 17 Jun 2026 02:01:23 +0000
Manifest next update:     Thu 18 Jun 2026 02:01:23 +0000
Files and hashes:         1: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: fIM4pFYyMi6DQzVBPjffWV/MuQApMPqLNHTMtGz0qLs=)
                          2: ZHhc0L728ye9C_PaxE7QKIWysf0.roa (hash: IYrJXv7Z8+WyubB49OSinWGa68suJopradNDMs9g9yQ=)
                          3: mUqS4S5SL9Pvq3yISShuWCb9ZtE.roa (hash: uUcTOLjK+7qjGVmB7WyFwvHdMHjyRZf2FkbrhsEB5pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 18 Jun 2026 02:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:d3:4f:d0:79:49:be:64:08:b6:ed:18:90:6a:85:47:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
        Validity
            Not Before: Jun 17 02:01:23 2026 GMT
            Not After : Jun 18 02:01:23 2026 GMT
        Subject: CN=9ce94db1fef10cdd978f85eda84a125e09d89752
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:3a:46:84:9b:55:96:aa:61:8d:e5:85:c7:
                    1e:d8:9f:9c:09:f0:59:17:92:7f:fd:55:8d:10:20:
                    f0:1c:24:7a:bf:7d:73:3a:e3:ca:62:e8:5b:8b:e7:
                    9b:8d:44:1c:90:df:d5:9f:81:1a:15:07:b0:18:1c:
                    31:0b:cf:1c:0e:46:0c:5c:6b:1a:e2:0f:08:d8:08:
                    a3:76:15:47:f4:9a:6c:f0:02:6c:39:33:19:e4:fe:
                    e4:13:83:29:d6:4f:72:51:36:8a:95:eb:85:16:3d:
                    8e:af:f2:b5:1a:ee:3d:4e:f8:fb:b5:46:76:b2:03:
                    ba:43:6c:f9:63:a1:a4:e9:2b:6f:75:4e:d6:01:8e:
                    54:73:e2:f6:8e:af:6c:cd:7f:12:d3:a6:40:a6:49:
                    df:d5:eb:c9:3f:c9:14:8b:31:e5:98:0e:23:f4:6f:
                    a8:4b:f0:4f:cf:42:a4:8d:56:e2:5e:7f:a0:64:89:
                    74:d4:f1:b5:d2:98:b3:4c:bd:44:23:d9:dd:fa:74:
                    bc:b7:ea:f2:1e:6a:b3:89:bd:42:67:32:3e:77:06:
                    32:18:a6:4a:34:5b:0f:35:50:c0:7a:61:e5:8c:22:
                    60:88:28:6b:67:58:48:7e:2f:cb:91:65:7d:35:59:
                    f2:a9:a7:ab:08:af:59:d5:65:10:99:d1:9e:e6:32:
                    ef:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:E9:4D:B1:FE:F1:0C:DD:97:8F:85:ED:A8:4A:12:5E:09:D8:97:52
            X509v3 Authority Key Identifier:
                keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:86:67:46:7f:1a:46:3c:08:4f:14:a9:7c:68:4d:71:8e:9c:
         64:8d:4c:8c:c4:11:fc:e2:b2:22:cf:1f:3e:63:5d:55:4e:fd:
         87:1c:f5:34:b6:43:de:e3:af:42:5a:b0:1a:d0:d2:1e:e1:77:
         dc:9f:3f:69:75:76:e9:42:47:00:c4:22:42:4c:21:50:b0:8c:
         dd:7a:65:eb:dc:89:08:dd:48:61:90:23:85:fb:e4:05:32:82:
         64:7b:91:00:f3:65:77:06:3e:2b:45:10:2f:bc:88:a4:8c:23:
         48:85:25:7c:e3:c1:60:b2:8d:b1:5e:cc:db:b0:a6:cb:93:42:
         e3:28:85:8a:4e:32:24:17:78:cb:6c:46:ed:66:47:f9:c4:ff:
         43:21:90:7f:2e:8e:74:4b:fe:d0:4c:de:6d:d4:8e:6f:c9:d7:
         50:4a:b9:a4:e5:42:02:b1:8e:66:16:55:49:70:bc:6a:dd:a7:
         a0:8b:75:60:50:57:da:73:b7:49:75:55:4d:a3:4d:03:b5:63:
         d8:76:91:46:2e:d3:b3:b4:48:bf:89:fa:c0:e4:ec:a0:28:a3:
         b1:9c:d4:cb:c3:db:b1:c6:0f:d9:18:bb:74:88:4b:e2:dc:0a:
         f9:4e:2e:10:ba:f9:84:da:2f:4e:f1:9e:1c:ec:ec:ad:a6:c1:
         f9:d4:21:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 12:26:44 2026 by rpki-client