Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File:                     vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier:          uh/0nZAq/AYlmzJwVIxYeqr8Ok2Qxtl4m2mmWWKiP+g=
Subject key identifier:   FE:6F:68:B2:18:3F:0C:F7:A3:BC:8B:C8:81:0C:D5:54:19:DE:70:79
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer:       /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial:       019E1EDA6F93E0F474216D2AC5818213F593
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number:          190F
Signing time:             Wed 13 May 2026 01:01:32 +0000
Manifest this update:     Wed 13 May 2026 01:01:32 +0000
Manifest next update:     Thu 14 May 2026 01:01:32 +0000
Files and hashes:         1: BaCjj0GLJaGkCIJ_iiWKcu73XDI.roa (hash: VP6Vr4TzbvdauH2ppsPw/bcyRKYsvp9ZnrBor6tuGNU=)
                          2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: q80hT0GEI0GW6lvduJheoGAm1Rmh0i45sPEzbvSfdt0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:da:6f:93:e0:f4:74:21:6d:2a:c5:81:82:13:f5:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
        Validity
            Not Before: May 13 01:01:32 2026 GMT
            Not After : May 14 01:01:32 2026 GMT
        Subject: CN=fe6f68b2183f0cf7a3bc8bc8810cd55419de7079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:92:76:6a:8b:7a:2b:1f:8a:5c:1f:17:c6:8c:
                    d9:d6:76:c8:d1:b8:bd:21:10:f2:75:af:4e:1d:23:
                    46:6b:94:35:ce:e9:6b:bb:fb:d6:34:4e:90:ce:56:
                    9b:3b:70:2c:1b:99:3a:43:f1:88:2f:e9:c7:7c:10:
                    22:bf:40:8e:60:5b:ec:35:0d:54:94:13:45:8d:a1:
                    ef:49:9c:f4:41:ae:77:d3:22:dc:b8:91:d4:e3:b0:
                    f8:18:a7:01:31:a0:f0:5b:e3:72:9b:94:08:a7:ef:
                    41:1b:ab:e3:60:61:01:89:5f:5e:8e:86:a6:2b:fe:
                    55:3c:85:5b:7d:63:dd:72:83:3a:69:1f:47:ef:59:
                    2a:5d:51:d9:de:45:8e:d5:22:a9:0e:0f:99:3e:9a:
                    68:36:5c:dd:5a:62:14:5b:96:f5:11:4a:da:2c:18:
                    d5:66:93:eb:10:a4:54:68:5d:b5:e9:48:99:7e:ec:
                    1b:1a:e2:33:00:20:18:55:ae:4e:73:c3:e1:e3:fd:
                    fe:d4:60:6f:8e:8b:ec:ef:90:c6:69:b0:66:4e:ac:
                    50:e5:8b:7e:3f:89:a6:e9:73:f5:cc:40:a0:a3:57:
                    21:c4:b2:fd:1b:2d:98:b0:af:bc:62:8b:d9:0c:50:
                    f8:e1:3a:95:dd:26:a5:4a:f7:3f:9f:8f:f9:31:bc:
                    44:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:68:B2:18:3F:0C:F7:A3:BC:8B:C8:81:0C:D5:54:19:DE:70:79
            X509v3 Authority Key Identifier:
                keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:22:21:45:f2:05:50:5f:82:76:70:36:af:14:d1:42:62:87:
         73:fd:f9:b0:a8:fb:3d:b7:e6:2b:74:c8:7c:75:3b:70:7f:c2:
         a4:65:6e:55:67:a4:35:10:ff:0f:9f:fa:73:c2:db:a6:2c:18:
         fd:7e:7d:d9:cf:63:c5:4c:69:22:e4:ff:d6:ca:d3:5a:f2:5f:
         79:64:9d:d3:40:83:8c:9d:b8:13:16:65:56:75:72:6e:07:95:
         ad:57:07:1c:03:f5:fb:61:d9:75:18:f7:1e:e4:a6:7e:01:33:
         dc:ef:12:09:fe:7c:6f:eb:28:05:34:c1:40:f4:91:73:49:5c:
         c6:8b:bc:89:ec:48:62:d4:55:b8:dd:14:26:78:75:9c:f9:d2:
         4a:ab:e1:71:fa:a8:9a:ff:9f:1a:34:4a:40:a6:f3:63:92:48:
         93:c2:1f:1f:c5:49:a6:22:8e:24:ab:0c:a9:c7:41:26:3f:ae:
         da:4d:be:f2:c9:a6:0d:56:66:bf:ee:56:bc:a6:fc:c4:b0:10:
         05:14:42:71:1e:d3:bd:c7:77:ef:d1:5f:17:b6:ba:62:48:1b:
         d3:94:2c:e0:77:98:42:02:b8:be:12:3d:54:68:bf:2d:f4:6d:
         c7:7f:e4:b2:66:d8:c5:8b:dc:e4:a9:b6:b7:e2:d2:2e:bc:ff:
         8e:0f:75:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2m+T4PR0IW0qxYGCE/WTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi
YWJjMjkwHhcNMjYwNTEzMDEwMTMyWhcNMjYwNTE0MDEwMTMyWjAzMTEwLwYDVQQD
EyhmZTZmNjhiMjE4M2YwY2Y3YTNiYzhiYzg4MTBjZDU1NDE5ZGU3MDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlZJ2aot6Kx+KXB8XxozZ1nbI0bi9
IRDyda9OHSNGa5Q1zulru/vWNE6QzlabO3AsG5k6Q/GIL+nHfBAiv0COYFvsNQ1U
lBNFjaHvSZz0Qa530yLcuJHU47D4GKcBMaDwW+Nym5QIp+9BG6vjYGEBiV9ejoam
K/5VPIVbfWPdcoM6aR9H71kqXVHZ3kWO1SKpDg+ZPppoNlzdWmIUW5b1EUraLBjV
ZpPrEKRUaF216UiZfuwbGuIzACAYVa5Oc8Ph4/3+1GBvjovs75DGabBmTqxQ5Yt+
P4mm6XP1zECgo1chxLL9Gy2YsK+8YovZDFD44TqV3SalSvc/n4/5MbxEYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP5vaLIYPwz3o7yLyIEM1VQZ3nB5MB8GA1UdIwQY
MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt
Y2M0MWM0YTMxOThkLzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk
LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyIhRfIF
UF+CdnA2rxTRQmKHc/35sKj7PbfmK3TIfHU7cH/CpGVuVWekNRD/D5/6c8LbpiwY
/X592c9jxUxpIuT/1srTWvJfeWSd00CDjJ24ExZlVnVybgeVrVcHHAP1+2HZdRj3
HuSmfgEz3O8SCf58b+soBTTBQPSRc0lcxou8iexIYtRVuN0UJnh1nPnSSqvhcfqo
mv+fGjRKQKbzY5JIk8IfH8VJpiKOJKsMqcdBJj+u2k2+8smmDVZmv+5WvKb8xLAQ
BRRCcR7Tvcd379FfF7a6Ykgb05Qs4HeYQgK4vhI9VGi/LfRtx3/ksmbYxYvc5Km2
t+LSLrz/jg91dQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:12:40 2026 by rpki-client