Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          pF91kKPMTk1bnajbpG7Ws0Q+NlLFfALEdJli0ttx6WE=
Subject key identifier:   9B:A3:A5:F2:60:C6:E1:2F:86:01:B8:CC:93:04:16:ED:B2:CC:4F:4A
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       019E1EA3876018F352B289CB41CBA1B2FC69
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 00:01:33 +0000
Manifest this update:     Wed 13 May 2026 00:01:33 +0000
Manifest next update:     Thu 14 May 2026 00:01:33 +0000
Files and hashes:         1: 9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa (hash: 0t8+O9jLtAo/1H+w73CAi6kuuXrnIZhfR+LlCnD8Ix8=)
                          2: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: bDHXEbPlZ1PxfqvXWHbH0Egv0roWC/LrPhrFJreB0wI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:87:60:18:f3:52:b2:89:cb:41:cb:a1:b2:fc:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: May 13 00:01:33 2026 GMT
            Not After : May 14 00:01:33 2026 GMT
        Subject: CN=9ba3a5f260c6e12f8601b8cc930416edb2cc4f4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:03:d2:1e:b5:27:ca:b3:08:0d:64:12:a4:
                    a0:10:1c:65:bf:56:fc:97:a4:a7:1f:b6:96:d9:98:
                    d1:23:8e:3b:2a:a2:ef:11:b9:eb:a3:7f:c1:60:2c:
                    ef:98:28:7a:7a:33:88:b1:67:29:ad:d9:15:8d:7a:
                    b0:61:1e:d8:d0:01:43:96:44:ed:d5:d8:c7:8d:ab:
                    44:3d:c2:65:20:9d:5c:b0:75:18:66:02:4a:f6:44:
                    4a:00:ed:7f:28:40:a4:18:1b:43:63:ff:61:77:f9:
                    2f:07:f1:fa:52:79:50:17:14:0f:fe:9a:18:02:b1:
                    39:98:53:53:12:c0:58:a5:6f:e2:d3:76:c8:e4:8a:
                    55:a0:ca:69:f8:2f:e0:2b:e3:06:be:fc:59:bd:cc:
                    65:e0:73:b8:30:9e:68:94:e5:b3:43:63:6f:a2:20:
                    66:e1:cd:4c:cc:9d:45:68:a3:9c:9b:a2:51:25:f9:
                    24:c5:c8:a7:0c:4a:1a:da:b8:c5:3d:ed:3d:6b:11:
                    6e:c4:f9:f9:95:1f:1d:61:af:50:4f:0e:d5:56:91:
                    4a:f4:32:f7:75:87:4b:55:9c:39:62:c4:b5:32:42:
                    d0:1e:53:05:c5:7f:7f:78:16:09:99:1b:ba:5a:79:
                    5d:b9:b4:4f:9b:7b:7d:70:a4:23:ca:e6:c6:54:d0:
                    93:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A3:A5:F2:60:C6:E1:2F:86:01:B8:CC:93:04:16:ED:B2:CC:4F:4A
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:65:c2:45:b2:e8:dc:9e:06:a5:a8:96:7f:b2:fa:11:16:fa:
         70:5e:78:09:34:76:e7:32:cf:a9:ce:0f:ba:b3:89:e8:9d:0e:
         e5:ed:04:63:69:ee:20:b5:30:dd:f5:0f:58:34:c5:c8:67:2f:
         ab:2d:41:13:f4:f6:38:26:bf:bf:26:e8:b0:72:75:05:98:b7:
         24:44:13:e4:8d:1d:f0:4c:81:eb:fb:cf:0c:c2:00:08:d3:68:
         18:0b:36:98:10:78:4c:48:ea:2f:d9:56:82:ae:72:bd:45:06:
         be:17:4b:83:6f:4b:d7:cd:e4:0a:53:fa:65:38:21:68:8c:94:
         a3:39:dd:0d:c6:80:5b:3f:50:2f:2d:f4:2e:7a:02:2b:28:08:
         69:f5:91:da:78:2d:b7:a2:a4:be:8c:f8:a7:be:83:c8:96:af:
         c9:90:24:d1:a7:60:0a:96:b8:28:9b:d1:d8:c7:19:33:89:e5:
         61:66:d7:5c:a8:ae:26:c5:df:0a:32:cc:80:78:12:02:fd:07:
         88:ab:c5:4d:a5:2c:99:1a:b2:3a:68:32:23:d3:d8:ff:bb:26:
         91:12:5a:5b:55:18:7f:42:5f:6e:be:74:56:7b:a4:25:6e:55:
         02:60:dc:1b:c9:76:c1:c5:bb:71:c5:43:d9:c4:36:e8:95:74:
         d3:01:9c:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:36:33 2026 by rpki-client