Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          feJLA4oSe64vCuEOCJzq05rxOpmYeN5sYfMCpawtWgc=
Subject key identifier:   05:EF:E7:D2:55:0F:62:65:AA:38:81:32:6D:17:3E:DD:9A:56:24:F8
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       019D98BDC26EC210535A87FE46CEEA48F4B6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          0BEA
Signing time:             Fri 17 Apr 2026 00:01:06 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:06 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:06 +0000
Files and hashes:         1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
                          2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: xHGVZMCSgfJUsvtrCBPssikhW/HvIe8MshNjz3vXO1I=)
                          3: kqmzm016eJM-jijUIFSE8gE6p00.roa (hash: gAMMlg6BzmaFhWE/fM7vHF/m24ObBw3vzLwmqGTTkPI=)
                          4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:c2:6e:c2:10:53:5a:87:fe:46:ce:ea:48:f4:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: Apr 17 00:01:06 2026 GMT
            Not After : Apr 18 00:01:06 2026 GMT
        Subject: CN=05efe7d2550f6265aa3881326d173edd9a5624f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d1:69:1f:e4:01:b2:e4:05:7f:e4:44:d6:48:
                    b6:7c:35:3f:1e:ad:a3:94:6f:bb:fe:f8:01:be:3c:
                    db:2e:3d:a5:07:35:5f:9d:30:84:82:c2:7a:d2:09:
                    ef:ca:24:11:62:ff:ec:6c:61:f3:c2:fb:98:05:c6:
                    2c:8c:59:1b:8a:5a:8f:7d:c9:89:4b:2d:38:9a:95:
                    0e:d7:17:52:ac:9d:d1:d3:b6:c9:7c:c4:56:80:f3:
                    21:fa:36:20:18:c1:f2:c5:a9:62:6f:05:9e:87:82:
                    c2:a7:0c:1b:ef:05:29:24:9e:ca:f6:d7:26:2b:52:
                    99:a1:88:d6:53:8c:88:2e:6a:92:f2:f0:3d:30:cd:
                    c8:3c:0f:d3:ac:67:bf:88:9a:fb:d0:2f:fe:78:1b:
                    fe:9f:37:94:77:cb:eb:4c:6b:95:23:d8:82:16:e6:
                    f3:e4:26:c3:2d:8f:a0:5b:b4:f8:f4:d0:65:20:19:
                    b5:55:7a:35:69:6a:d6:6d:b8:15:9b:22:ed:00:52:
                    e8:ef:ee:82:03:52:a6:be:2d:a7:f9:7a:8d:ee:14:
                    48:49:00:7d:e2:37:25:a2:e0:8f:67:27:ae:64:d4:
                    3f:6d:db:75:af:7f:7e:6e:4f:1f:48:d0:24:00:73:
                    5a:09:3a:77:a1:24:74:dd:9c:4b:79:7e:3c:b2:e8:
                    0b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:EF:E7:D2:55:0F:62:65:AA:38:81:32:6D:17:3E:DD:9A:56:24:F8
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:94:3d:86:3a:66:2c:38:b8:94:0d:b2:27:20:a9:d0:0e:a8:
         e4:60:62:ed:6c:76:6f:f9:64:a5:f6:dd:d1:c2:93:a0:ed:c4:
         88:dd:8e:79:7c:6c:c3:26:f6:5c:37:bc:f1:99:47:f5:0d:ae:
         d7:d9:fe:c8:57:ab:f0:9e:a1:e7:8a:e8:13:ca:8a:bd:41:83:
         68:9e:59:35:09:71:77:d3:a2:58:ad:90:0a:92:61:64:58:01:
         11:8e:60:5d:f2:9f:77:fc:e1:45:50:a0:c6:41:b9:6e:11:b7:
         af:26:34:af:e2:77:0a:cc:15:b3:e0:11:68:86:c1:39:a1:d9:
         cb:3e:ff:b2:b2:b7:0b:bf:a3:72:46:ce:30:51:a0:8f:e9:43:
         88:49:a0:4c:53:93:90:ec:28:cd:af:50:b1:c3:65:63:f9:d5:
         52:3a:d5:04:4e:d0:51:86:10:06:09:47:71:5b:c2:0b:6c:32:
         93:01:4d:6b:d1:41:2e:4e:69:1a:f4:72:ea:e0:ab:24:a9:57:
         b2:25:24:5a:7b:18:bd:df:d4:a8:eb:d8:8e:91:c8:6b:6b:4d:
         41:36:9b:6d:a4:98:9c:55:4b:88:75:e3:7b:42:aa:60:b6:94:
         59:9b:b9:a3:83:84:7c:9c:67:ab:b1:29:fa:f8:c9:fd:5d:ce:
         cc:05:cb:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:26 2026 by rpki-client