Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
File:                     vCYT4PJtOQfwljQL4FDCAdNY1tU.mft (raw, json)
Hash identifier:          RKs+x+uISXI3ogUo+eqh/+qVi89cN0VnWQzjIrmoRE0=
Subject key identifier:   E0:1E:EC:37:93:E5:63:6D:70:F9:F1:6E:CD:43:BF:1D:14:74:37:89
Authority key identifier: BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5
Certificate issuer:       /CN=bc2613e0f26d3907f096340be050c201d358d6d5
Certificate serial:       019E1E6C7018D13BC95D24772128F28E9989
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
Manifest number:          05C2
Signing time:             Tue 12 May 2026 23:01:23 +0000
Manifest this update:     Tue 12 May 2026 23:01:23 +0000
Manifest next update:     Wed 13 May 2026 23:01:23 +0000
Files and hashes:         1: B34oPqlHImuH-HLoSxcYGHAVzXE.roa (hash: plTjEu9raIH59d+0TjlxC3YT2Qr6OxqXsZp3Znz5WRQ=)
                          2: FkDSObsiidn9XZeIw1lExVCwjQM.asa (hash: VzsOYBqqpd4u4HzkRfGMKmSD2wmsL9WFz3sLAKUaZT4=)
                          3: vCYT4PJtOQfwljQL4FDCAdNY1tU.crl (hash: U3ETmhZB+Ib2DndXTFIQPM6VGiH72yo2ZGhSFLk7CO8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:6c:70:18:d1:3b:c9:5d:24:77:21:28:f2:8e:99:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2613e0f26d3907f096340be050c201d358d6d5
        Validity
            Not Before: May 12 23:01:23 2026 GMT
            Not After : May 13 23:01:23 2026 GMT
        Subject: CN=e01eec3793e5636d70f9f16ecd43bf1d14743789
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:b9:c5:7e:f7:41:de:7f:22:e2:ab:b7:dc:c4:
                    da:59:6a:bd:f8:9e:84:77:f7:9d:ba:38:bb:2f:fa:
                    dc:28:d1:c2:54:2c:c6:59:92:07:66:c8:a4:bc:26:
                    e5:3e:00:15:b6:d8:33:4c:76:89:af:a1:04:16:9c:
                    f8:c5:1d:20:96:ff:66:f1:93:da:4c:cf:36:11:29:
                    73:2b:44:00:81:9c:ed:88:e5:4b:59:9b:e1:a1:47:
                    57:49:79:0e:e6:39:da:03:9d:b4:60:19:8f:26:2d:
                    a3:e1:97:fb:97:a0:1e:4b:40:ed:aa:1b:a1:6b:2a:
                    00:3a:a6:2d:48:6a:94:58:50:08:5f:b3:68:52:8f:
                    97:f7:5a:af:0a:c9:59:08:51:fd:eb:55:aa:65:01:
                    67:4c:46:af:56:44:3b:4c:51:99:7e:9f:b1:6d:f6:
                    f4:2d:58:24:94:e2:1b:6d:1b:29:81:33:d4:0d:1c:
                    bb:52:30:ec:f8:e5:02:3b:c3:6d:37:a7:b9:aa:82:
                    2f:a7:4c:71:cc:14:f4:74:0a:7f:82:18:cd:ab:bd:
                    b3:8f:dc:cb:6a:cc:26:16:16:b6:3c:e5:0f:70:dc:
                    1c:96:e8:61:2f:bc:3c:47:96:eb:1c:50:99:d7:65:
                    31:40:eb:78:9c:0a:ad:6b:db:dd:39:7f:59:19:77:
                    23:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:1E:EC:37:93:E5:63:6D:70:F9:F1:6E:CD:43:BF:1D:14:74:37:89
            X509v3 Authority Key Identifier:
                keyid:BC:26:13:E0:F2:6D:39:07:F0:96:34:0B:E0:50:C2:01:D3:58:D6:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYT4PJtOQfwljQL4FDCAdNY1tU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/36cd40-9081-40e6-97c7-1620cfdc7117/1/vCYT4PJtOQfwljQL4FDCAdNY1tU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:9e:c3:56:6d:ef:7b:f9:77:a9:39:ae:9e:3f:8b:3b:0f:56:
         64:79:19:1b:cb:ee:a6:ca:a3:f1:cc:01:84:c3:62:0f:ad:0d:
         20:ea:b2:0a:ec:f3:7f:fc:33:25:0c:63:79:19:e3:b8:07:e3:
         7b:cf:d2:48:dd:0c:b5:05:c9:fa:9e:e6:a7:50:1e:0e:22:05:
         8e:6f:02:25:df:d0:25:42:5a:b2:d7:aa:83:37:a2:50:55:4b:
         a9:26:b2:9e:10:18:15:6c:4d:0c:7d:1d:3a:14:59:01:21:32:
         8a:dd:84:ec:78:d4:fd:0f:8b:d2:79:93:8b:ba:7c:fd:08:26:
         25:ae:c7:06:5b:b0:16:e6:c9:41:ba:c4:ab:e2:f0:55:4c:80:
         76:9e:d2:1a:9f:31:d0:f3:03:80:4d:dd:f2:cc:36:3d:9a:6b:
         5f:d9:50:1c:54:31:26:9e:8d:cd:25:31:d6:5f:26:8a:b4:ad:
         9d:20:34:1d:ca:fa:f0:98:ca:10:51:ee:e4:72:0b:0b:6b:e4:
         a9:59:93:8d:7d:34:58:d6:16:62:f9:96:44:a7:b5:c2:ba:89:
         8c:ad:a1:81:da:fc:66:3f:af:38:30:42:53:bc:72:21:84:ea:
         39:75:97:bb:14:7d:1b:0d:11:f2:3a:1f:dc:66:6c:ba:27:e6:
         7b:01:35:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:27 2026 by rpki-client