Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File:                     vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier:          FLAUgQt6XHBoI87U1DVdZBeZRV151fShwkDfrvSuMKM=
Subject key identifier:   CE:B7:96:2F:59:9C:AE:03:F4:EB:15:3E:3C:7C:0A:03:44:82:D5:E6
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer:       /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial:       019E1F109B63570582AD282A43CB91A60EEC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number:          0B36
Signing time:             Wed 13 May 2026 02:00:42 +0000
Manifest this update:     Wed 13 May 2026 02:00:42 +0000
Manifest next update:     Thu 14 May 2026 02:00:42 +0000
Files and hashes:         1: ZJ-T6ueMae72SObhWhaz9nVHF40.roa (hash: Ow4/9pV+gX/QMnh7E9AZiapSKVWWKGuqpiJHgE1l0SU=)
                          2: g2RgzQfRtI2o8X5sMP-NXjF8Uho.roa (hash: QHdSplXR9hrky5KPz8Vf+POncO+1O6g9pizr3/G9QPY=)
                          3: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: 5Pby5/ivfZPDVbybpfPRUZAE6vn63MrN0xCKl1Uu7hU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:9b:63:57:05:82:ad:28:2a:43:cb:91:a6:0e:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
        Validity
            Not Before: May 13 02:00:42 2026 GMT
            Not After : May 14 02:00:42 2026 GMT
        Subject: CN=ceb7962f599cae03f4eb153e3c7c0a034482d5e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5e:c8:f1:9b:3c:fa:9a:2e:56:60:76:25:69:
                    49:20:39:e8:b8:7c:ee:8e:43:d2:f7:78:9e:9c:d1:
                    51:a9:da:66:ce:2b:80:84:26:af:6d:ab:54:5a:10:
                    fa:25:d0:33:ac:6e:41:e7:4c:9c:10:89:fa:55:7e:
                    76:d3:34:34:f5:6c:b3:ab:95:35:4f:ec:4a:10:5f:
                    7c:b6:c2:38:c8:74:7e:05:31:7f:3b:8c:03:31:72:
                    e2:4f:46:c8:27:d2:9e:e9:3b:10:4d:7d:5c:a8:b2:
                    66:5c:69:52:de:77:e0:d5:da:99:76:74:b4:95:be:
                    97:83:1c:1b:63:af:69:78:b6:1d:03:6c:94:6b:14:
                    84:36:d0:5d:68:d0:75:af:f9:8c:65:8a:8d:ff:fb:
                    e6:7a:81:8d:67:bf:48:8b:e1:7a:d5:3a:41:63:0d:
                    a0:8a:76:60:1a:fb:61:78:0c:41:e8:d3:7b:01:10:
                    8a:29:f2:4e:6b:5f:5b:4c:ef:77:e6:6b:25:4c:b7:
                    5c:a2:67:a1:9e:88:fb:97:d8:a3:f4:19:95:0b:77:
                    c1:a2:e8:18:f0:85:a7:41:e6:5f:79:d7:0e:6e:c8:
                    25:23:02:d5:54:13:e8:f3:5a:c4:2b:c8:f8:35:6a:
                    a3:92:8c:1c:90:25:80:27:7e:1e:13:12:23:ce:eb:
                    2f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:B7:96:2F:59:9C:AE:03:F4:EB:15:3E:3C:7C:0A:03:44:82:D5:E6
            X509v3 Authority Key Identifier:
                keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:44:d4:8a:f4:33:5c:22:f1:6b:14:87:49:6e:1a:a1:58:e1:
         63:69:76:88:15:c5:7c:8b:6d:49:92:95:1d:82:31:5b:a2:c9:
         6a:e4:5d:ff:3d:9a:02:c0:7d:48:87:9b:87:90:30:f4:76:ff:
         3c:de:cd:3c:3f:2e:43:17:52:78:bd:cf:10:76:2f:f0:8e:a2:
         fa:22:f5:d8:e4:43:18:3f:7e:96:80:59:cf:bd:f6:06:a1:15:
         f4:87:ab:5f:4a:08:b2:41:64:b5:0a:b8:85:9a:51:86:c8:c0:
         1d:f6:e8:e9:44:6d:9c:35:20:6d:f6:7a:1f:56:a3:26:4c:21:
         57:d6:78:76:72:72:36:02:c1:53:16:df:c6:14:75:aa:80:1c:
         1e:f3:88:68:76:67:c6:fe:46:9b:1e:ab:ba:43:43:d4:0c:d1:
         58:bc:9b:21:10:c1:8c:1a:20:e9:94:58:bf:1c:91:e6:bc:c7:
         ae:c1:3a:21:ed:4f:6d:3f:f2:a9:73:c8:4b:a9:39:1d:46:4f:
         0e:b1:a0:4f:4b:74:f5:f0:03:ac:5b:15:76:a6:96:83:7d:6a:
         fc:e1:14:99:b2:e0:0a:12:d3:e5:83:97:85:36:42:67:e0:43:
         68:96:6a:a7:cd:19:0e:9d:65:26:42:66:53:78:98:82:e4:a1:
         49:8c:99:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:40 2026 by rpki-client