Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          LziI4mcO/n3jXo7p9V1OjXRCxk+7bTFDKfpMDuknvZs=
Subject key identifier:   7B:F6:97:DB:6D:90:D1:43:68:0D:56:44:E1:62:89:71:14:6A:C0:5F
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019E1D231AF586905B11C038247331B4C8E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          1193
Signing time:             Tue 12 May 2026 17:01:40 +0000
Manifest this update:     Tue 12 May 2026 17:01:40 +0000
Manifest next update:     Wed 13 May 2026 17:01:40 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: WJmbSQP8EN9k+746iBfC1Bhn23Ieuqh71lJKEjAOgMs=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:23:1a:f5:86:90:5b:11:c0:38:24:73:31:b4:c8:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: May 12 17:01:40 2026 GMT
            Not After : May 13 17:01:40 2026 GMT
        Subject: CN=7bf697db6d90d143680d5644e1628971146ac05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:39:46:11:f3:89:89:1a:f3:e9:25:ee:c9:a4:
                    e3:de:f1:a5:21:c6:b0:75:5a:4e:85:9d:ea:ba:6d:
                    b6:b9:30:c4:16:c6:59:2f:cc:ad:a9:69:23:39:84:
                    03:db:f5:fc:dc:80:c2:34:1a:ff:74:d1:25:ce:57:
                    e3:f3:1f:ed:47:75:c2:df:f6:c6:4e:c8:d7:f7:b0:
                    61:5b:10:3e:d9:04:44:a6:d6:99:f6:59:35:4e:de:
                    a3:8a:47:16:63:52:a4:a2:0b:ab:c4:45:3c:e1:a3:
                    2c:9d:e0:1e:09:85:f8:bd:12:82:21:d2:e9:2a:1a:
                    2e:56:c6:bc:9e:a6:8b:bd:4d:e1:59:d5:40:2e:70:
                    51:a2:9a:c6:e1:26:cf:45:c7:7f:25:a7:a0:e0:59:
                    6b:a7:39:c6:c9:81:df:6a:b0:0e:ca:da:33:4a:7c:
                    e4:4d:e7:bd:24:1c:c9:a3:a0:88:2a:1c:00:09:97:
                    da:53:a7:b9:c7:43:af:b4:b9:86:de:41:21:b6:eb:
                    d6:81:c2:e0:67:a7:d6:5b:9d:1f:b3:3b:dd:ac:e9:
                    c0:55:e2:0c:08:a1:4d:f4:10:91:aa:e9:63:8b:ed:
                    14:70:cc:e5:b3:21:44:9e:98:0e:8f:dc:19:df:47:
                    63:21:cf:50:d3:8f:76:22:ba:48:ed:cd:4c:82:a0:
                    99:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F6:97:DB:6D:90:D1:43:68:0D:56:44:E1:62:89:71:14:6A:C0:5F
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:b7:56:e8:7f:f6:8d:4c:f2:9c:9c:e3:e2:22:80:a2:9a:8c:
         49:e1:b2:06:dc:20:04:d4:06:ff:d9:26:c2:e7:a4:20:cb:3a:
         4e:cb:6f:05:98:9a:74:13:9f:a9:7d:ca:30:66:09:59:a6:46:
         9f:bf:80:20:c0:06:3e:a2:5e:c2:93:3d:6b:11:fb:e2:c6:dc:
         97:4f:f2:56:a0:ff:d8:48:e8:c4:e1:bd:a8:5c:af:f7:fc:c4:
         2f:21:6f:de:8f:4a:79:bd:22:35:63:a3:d8:27:3b:d0:23:85:
         a3:a9:21:c4:c9:ca:34:4c:67:46:ee:39:94:ab:a8:f3:73:4d:
         dc:60:c3:0f:bc:57:fb:19:d3:c7:76:77:4c:41:44:2e:99:39:
         fa:bf:1c:b1:dc:3d:5f:93:fa:ae:b2:48:6b:0f:dc:52:a6:7f:
         a0:38:01:4b:43:8a:4c:b1:49:86:d9:7d:c4:74:ef:15:62:23:
         08:3e:0a:68:fb:53:03:a8:37:fc:9a:6d:5d:e2:b6:44:51:b9:
         36:a4:e8:cc:42:5b:c5:31:7f:06:2e:86:61:55:1c:b4:dd:a4:
         45:d0:5a:3f:86:cd:80:8a:f9:58:30:59:06:27:69:1a:4a:af:
         be:3b:57:9f:8b:1b:58:16:12:c4:df:fb:41:a2:69:72:8e:68:
         62:80:10:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:59:35 2026 by rpki-client