Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
File:                     vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft (raw, json)
Hash identifier:          6bYbfmkT33qvmfC/mw29boMoy3JPwJ4K8gdThW+KyRo=
Subject key identifier:   79:D0:7B:32:C9:EA:7A:2E:95:8A:21:99:8B:2D:72:FB:63:19:19:F2
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       019E1C467845DF3A0A76EC4DBF4EB09885E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
Manifest number:          DE
Signing time:             Tue 12 May 2026 13:00:40 +0000
Manifest this update:     Tue 12 May 2026 13:00:40 +0000
Manifest next update:     Wed 13 May 2026 13:00:40 +0000
Files and hashes:         1: G4aM6x0AG2D6PtCOX1dZ7NbMyy8.asa (hash: alUP+9RKB/AQR/aizeOk3F0b/OLNxUq3IcysaUOsi94=)
                          2: vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl (hash: EEU/UY+WMvp5LAlglQE+dCfyjfOMsZztZvB+vdGj1cQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:46:78:45:df:3a:0a:76:ec:4d:bf:4e:b0:98:85:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: May 12 13:00:40 2026 GMT
            Not After : May 13 13:00:40 2026 GMT
        Subject: CN=79d07b32c9ea7a2e958a21998b2d72fb631919f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:d3:8b:4f:63:07:7e:c1:18:db:da:34:ed:f5:
                    21:c3:6f:6f:17:de:7e:cd:b4:04:2b:f1:92:a8:dc:
                    13:aa:de:16:98:7b:93:e8:40:f1:d5:e0:cf:86:90:
                    61:1f:49:2f:80:3c:93:54:62:a0:1b:ad:01:7c:f3:
                    4e:2d:d9:2a:c2:3c:1b:1c:d5:cb:27:50:ac:41:e4:
                    9a:c6:a2:6a:50:ce:41:40:bc:46:d0:38:a1:0a:7c:
                    6e:7c:13:a4:1c:0f:a9:9c:91:79:94:85:fa:53:dd:
                    b2:e5:82:c6:0a:89:bb:e8:e3:21:60:ec:5a:65:67:
                    0e:f4:70:81:b4:3c:a6:51:5f:85:57:ad:29:59:cb:
                    07:9a:69:a1:30:19:dc:69:3d:61:82:54:69:7d:3c:
                    e0:5e:1f:69:77:cb:67:0f:6b:3c:f2:da:95:93:1c:
                    d1:33:71:b4:ae:08:b0:b2:94:4c:0c:b2:84:5a:cb:
                    3e:91:fc:4c:07:4f:e1:6e:29:23:16:b7:6a:89:5e:
                    e7:03:6e:0b:cf:11:b4:e1:00:80:95:ae:67:7c:94:
                    7b:60:aa:0a:d8:4b:ca:90:04:56:ef:82:4e:bf:72:
                    d5:85:e0:a4:73:01:40:93:7e:c3:7a:81:a2:4d:ce:
                    84:d9:72:03:80:69:6b:9d:8f:c8:4e:77:85:ac:39:
                    6e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:D0:7B:32:C9:EA:7A:2E:95:8A:21:99:8B:2D:72:FB:63:19:19:F2
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ed:b6:55:bf:b7:e2:9b:b3:c6:43:c1:25:38:e7:8f:33:5d:
         8f:86:ec:b7:ff:b3:d1:59:d0:66:33:ce:99:30:c3:ea:28:d4:
         9b:7b:1c:31:a9:99:25:cf:87:9d:34:99:cb:1e:f4:f7:d9:eb:
         c2:ae:c3:91:43:98:91:05:f9:d7:c1:0f:0d:3a:26:e7:7e:5d:
         d1:f7:b1:44:8c:bd:47:72:f1:c6:74:d1:20:8c:e6:ec:9c:41:
         b4:d9:86:6a:cf:e8:41:29:98:24:bb:3d:b9:7d:34:4e:9a:7d:
         10:d7:c6:91:f3:e1:49:4d:96:d5:37:c9:96:96:db:05:4c:7f:
         1a:8f:d4:5f:cf:5a:c6:06:c6:8b:85:2c:d4:b2:ea:e5:4c:fe:
         08:0d:af:45:21:64:b3:2e:c5:cd:b6:1f:a2:dd:41:d8:6a:e9:
         0a:2a:a0:42:73:4c:68:b7:13:07:4c:27:3e:c4:29:c8:30:00:
         02:8c:74:e9:16:3c:ae:49:36:5b:6a:ce:63:f9:ad:88:ce:8b:
         c4:1a:2d:2b:73:8e:eb:75:02:24:3e:61:b1:47:46:86:81:f1:
         56:38:6d:db:26:01:b8:0c:3e:54:00:7c:e2:0f:90:4a:4f:7b:
         c1:f3:9b:23:3e:25:48:49:8c:38:42:10:74:2b:57:cb:c2:b0:
         18:92:fa:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4cRnhF3zoKduxNv06wmIXpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjEwZmIxNjViMjdmOGFhNzYyMTkwOWViODM3OGFiMTZm
YjhkMGEwHhcNMjYwNTEyMTMwMDQwWhcNMjYwNTEzMTMwMDQwWjAzMTEwLwYDVQQD
Eyg3OWQwN2IzMmM5ZWE3YTJlOTU4YTIxOTk4YjJkNzJmYjYzMTkxOWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdOLT2MHfsEY29o07fUhw29vF95+
zbQEK/GSqNwTqt4WmHuT6EDx1eDPhpBhH0kvgDyTVGKgG60BfPNOLdkqwjwbHNXL
J1CsQeSaxqJqUM5BQLxG0DihCnxufBOkHA+pnJF5lIX6U92y5YLGCom76OMhYOxa
ZWcO9HCBtDymUV+FV60pWcsHmmmhMBncaT1hglRpfTzgXh9pd8tnD2s88tqVkxzR
M3G0rgiwspRMDLKEWss+kfxMB0/hbikjFrdqiV7nA24LzxG04QCAla5nfJR7YKoK
2EvKkARW74JOv3LVheCkcwFAk37DeoGiTc6E2XIDgGlrnY/ITneFrDlu9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHnQezLJ6noulYohmYstcvtjGRnyMB8GA1UdIwQY
MBaAFL1hD7Flsn+Kp2IZCeuDeKsW+40KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldFUHNXV3lmNHFuWWhrSjY0TjRxeGI3alFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MGFkYzUtNWM1MS00ZjkyLWIwZGMt
ODg5Mjk2OTE2MjAzLzEvdldFUHNXV3lmNHFuWWhrSjY0TjRxeGI3alFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85MGFkYzUtNWM1MS00ZjkyLWIwZGMtODg5Mjk2OTE2MjAz
LzEvdldFUHNXV3lmNHFuWWhrSjY0TjRxeGI3alFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO22Vb+3
4puzxkPBJTjnjzNdj4bst/+z0VnQZjPOmTDD6ijUm3scMamZJc+HnTSZyx7099nr
wq7DkUOYkQX518EPDTom535d0fexRIy9R3LxxnTRIIzm7JxBtNmGas/oQSmYJLs9
uX00Tpp9ENfGkfPhSU2W1TfJlpbbBUx/Go/UX89axgbGi4Us1LLq5Uz+CA2vRSFk
sy7FzbYfot1B2GrpCiqgQnNMaLcTB0wnPsQpyDAAAox06RY8rkk2W2rOY/mtiM6L
xBotK3OO63UCJD5hsUdGhoHxVjht2yYBuAw+VAB84g+QSk97wfObIz4lSEmMOEIQ
dCtXy8KwGJL6Og==
-----END CERTIFICATE-----
Generated at Tue May 12 21:34:31 2026 by rpki-client