Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File:                     VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier:          xZUNkmprqKC4PWCYQnhA6+VEK3Fm9/R/bueN9arMaOo=
Subject key identifier:   80:68:7E:B7:EA:D2:D5:AB:8A:3B:6C:92:9E:9A:87:39:23:6D:EC:33
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer:       /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial:       019E20919EFDC5B3C90FF5D9AD38E5E61ECE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number:          190E
Signing time:             Wed 13 May 2026 09:01:14 +0000
Manifest this update:     Wed 13 May 2026 09:01:14 +0000
Manifest next update:     Thu 14 May 2026 09:01:14 +0000
Files and hashes:         1: 8ddVo-9kzKVGW2yLY3eaMsy1rnU.roa (hash: fYg9WUAZvsXCn60kBrtqhNECj69V0bbL3jvATcEdq18=)
                          2: MfN2Gu5BN4G7488wno6PGWe0FDY.roa (hash: kLhLY55A0NkLXCFXmojQ0uiumYsyv2wuegRkrcVkjbs=)
                          3: TUxGT6b7VmBODBTYsF2NgpIkI_g.roa (hash: 3zWjegldqSXFUKgzRCSieNP7a6jAxz4Yeeh+x/krXJ8=)
                          4: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: 3kUWWytN7O/hq5BFWPLsI9GfJ21H8RwYTQLJQe+YvZs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:9e:fd:c5:b3:c9:0f:f5:d9:ad:38:e5:e6:1e:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
        Validity
            Not Before: May 13 09:01:14 2026 GMT
            Not After : May 14 09:01:14 2026 GMT
        Subject: CN=80687eb7ead2d5ab8a3b6c929e9a8739236dec33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ed:7c:35:27:c3:b1:ca:21:e4:84:13:ca:06:
                    85:03:89:dc:d9:1c:ba:be:b2:a1:6c:06:ec:00:47:
                    a5:f5:b8:28:30:f5:da:60:a7:f7:4c:89:5e:a4:0e:
                    17:50:dc:62:79:81:f4:28:12:cd:cd:23:75:8b:dc:
                    2c:c4:11:31:44:4a:b0:78:11:96:b2:b8:73:dd:13:
                    a3:87:19:d2:40:18:45:46:75:93:46:77:d6:ce:2b:
                    c9:be:c7:22:4c:4d:f1:39:61:75:33:7d:ca:69:e6:
                    bc:a8:6b:1f:71:7b:22:18:e9:7e:f2:20:79:86:5d:
                    04:6e:ea:f0:c0:66:0a:6f:34:8d:30:84:a9:97:56:
                    c5:a6:d7:43:df:00:e5:39:16:53:fb:56:d6:9d:ce:
                    6b:36:72:bf:e8:f5:d8:e6:4a:8e:f0:f2:4b:60:be:
                    cc:f5:c2:2f:31:3d:b8:81:f3:cb:c0:ac:5c:4a:b0:
                    3d:d9:d1:14:cf:85:15:bf:84:a5:f8:0e:f6:8e:85:
                    3b:66:2f:77:7c:b3:f4:11:9c:78:30:ea:c6:a9:68:
                    28:58:ce:e2:94:1e:42:00:2a:52:ef:dd:a8:3c:08:
                    89:71:c7:f2:a9:dd:5c:94:ba:eb:44:b1:ad:11:14:
                    ba:aa:59:d9:3f:8d:82:02:70:17:44:95:f6:21:45:
                    42:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:68:7E:B7:EA:D2:D5:AB:8A:3B:6C:92:9E:9A:87:39:23:6D:EC:33
            X509v3 Authority Key Identifier:
                keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b2:81:a9:cc:c4:ef:73:c1:09:3e:bc:b8:6f:21:2f:6e:39:
         56:b0:59:3e:37:0a:39:4d:78:50:3d:92:09:56:d9:0e:c3:47:
         74:af:25:7f:03:fa:dc:0d:78:f1:b7:2b:a2:24:da:5c:3e:76:
         9b:a9:0c:bb:28:fa:9b:21:e8:84:6b:b1:68:4c:25:97:11:ac:
         ba:d2:a2:e7:0b:77:57:bd:ae:b7:b6:7a:1c:ba:3e:0c:4b:0a:
         ab:da:4e:32:2d:37:77:2a:05:99:ae:a2:34:e7:5c:b6:bd:00:
         31:d3:1d:b4:ca:20:b8:a8:79:35:f9:83:f7:1a:5a:7f:2d:56:
         a5:d1:2c:ef:6e:a2:3f:43:3c:b7:97:13:c9:06:a1:46:26:a6:
         76:4e:aa:41:cd:5c:6f:05:80:0b:aa:32:4f:17:ae:fe:05:94:
         6e:02:9d:5e:50:96:a4:5b:83:e2:c3:dd:9a:79:2b:b6:74:89:
         5e:db:1d:b5:a5:51:39:e1:b4:af:16:96:58:d7:8d:d1:e5:73:
         4b:c6:cd:64:ae:29:6d:3e:00:17:c8:64:48:72:73:67:5c:a9:
         1e:c7:73:c4:af:50:74:80:ae:17:47:60:16:4c:59:57:16:37:
         ec:10:e7:2d:d8:0a:6d:c4:4c:52:c1:7d:3d:04:07:d1:57:10:
         96:7e:43:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:22:44 2026 by rpki-client