Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
File:                     vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft (raw, json)
Hash identifier:          tkUlsYgZwOlZJcBmvodkYTg2yIZmAMjckVN4N/PxrAg=
Subject key identifier:   35:52:60:D7:C4:39:46:4B:71:9E:42:22:12:9A:C3:5C:DB:A9:80:AE
Authority key identifier: BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5
Certificate issuer:       /CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
Certificate serial:       019E1DC77766180A496FC58DF066C8690F9D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
Manifest number:          1909
Signing time:             Tue 12 May 2026 20:01:11 +0000
Manifest this update:     Tue 12 May 2026 20:01:11 +0000
Manifest next update:     Wed 13 May 2026 20:01:11 +0000
Files and hashes:         1: vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl (hash: vVegeYRJMYh+xdIBwPpkUb2rOrIbRo2s516FVz4ASyk=)
                          2: zzDkvJaiRpsmi6O7kaXorv8G2lo.roa (hash: U4Wz/U8KhaG7QlShrJHjPRkbJ49L12u0oJF2UhXulFI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:77:66:18:0a:49:6f:c5:8d:f0:66:c8:69:0f:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9d7c42e917844cbc2de4a91c6c1701de5971b5
        Validity
            Not Before: May 12 20:01:11 2026 GMT
            Not After : May 13 20:01:11 2026 GMT
        Subject: CN=355260d7c439464b719e4222129ac35cdba980ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d7:46:1d:b9:1c:06:60:e7:13:3c:ba:2e:8b:
                    cf:d0:a0:68:37:b9:74:60:38:5d:89:0c:8c:30:af:
                    eb:97:be:eb:ed:4d:89:ac:67:ce:f7:1c:75:78:92:
                    f6:b2:e4:8d:23:be:3a:24:f9:79:6a:fb:e6:4a:b1:
                    76:c8:fe:c9:8d:75:a9:1f:73:e8:41:ab:b9:30:02:
                    f3:68:ed:6f:5f:a0:6c:c3:4f:0c:e5:37:c3:50:8d:
                    45:ca:a5:2e:c5:8d:3c:b2:99:ee:23:74:1a:b0:27:
                    03:3c:56:d7:f0:a8:e0:85:a4:47:fa:51:66:11:1f:
                    63:c3:e8:da:58:00:db:81:1c:ec:07:81:09:bd:5d:
                    87:ef:8b:7c:95:8c:e5:2c:1d:aa:92:08:3b:b2:97:
                    98:4d:cd:00:25:8a:a5:85:81:5e:a3:ab:75:74:c3:
                    73:54:c3:04:b2:e0:6d:14:46:b3:46:28:cb:80:74:
                    29:3f:a0:b7:24:3a:e0:17:13:ce:fe:a4:82:7c:93:
                    63:da:b3:cc:5d:f3:5c:7c:2c:f2:6d:b4:74:75:c2:
                    dc:90:01:60:a2:a9:e5:87:23:84:48:cf:6a:ac:1d:
                    0d:bd:bb:c0:b1:41:dd:12:1b:73:64:d6:52:35:ac:
                    48:d4:45:dd:c5:dd:f5:a2:f7:ff:71:3b:38:c9:28:
                    4f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:52:60:D7:C4:39:46:4B:71:9E:42:22:12:9A:C3:5C:DB:A9:80:AE
            X509v3 Authority Key Identifier:
                keyid:BC:9D:7C:42:E9:17:84:4C:BC:2D:E4:A9:1C:6C:17:01:DE:59:71:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ18QukXhEy8LeSpHGwXAd5ZcbU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/29aea2-b6c8-4af9-ad84-03fb54187ee2/1/vJ18QukXhEy8LeSpHGwXAd5ZcbU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:79:2f:06:aa:dc:8d:ab:51:f6:ff:f9:79:94:53:62:7d:af:
         a3:35:a3:e2:fd:cd:e7:a2:79:d0:fc:4c:6a:0c:74:05:2b:58:
         59:dc:29:78:47:9d:d9:1b:bd:c6:d1:3a:36:03:23:c3:e1:ee:
         fe:4b:d1:95:6d:4f:55:4e:3f:86:7b:6e:be:7c:23:2d:55:42:
         a4:4e:73:d8:f1:2e:8d:57:16:c2:17:91:5c:ee:a2:53:75:df:
         67:86:93:f9:63:85:d6:4f:58:96:71:1e:ce:e4:7d:4d:88:e3:
         ff:b9:53:f2:fe:ae:13:1f:1b:21:f9:91:3c:5c:3b:7a:80:7d:
         8c:07:86:74:a3:12:93:e0:78:ca:b4:1d:2d:56:cc:9c:50:f5:
         99:bf:96:48:61:23:49:62:7a:85:07:78:d1:ca:92:f6:c2:11:
         37:72:9a:7b:dc:26:eb:41:63:81:6b:ab:13:33:9e:7e:43:e3:
         00:42:1d:9f:00:4f:af:7f:9c:4e:78:db:98:df:96:24:aa:10:
         56:4e:b8:dc:17:98:b9:4a:ab:1c:f5:1c:2b:0f:49:b2:c4:f7:
         56:83:81:bf:9d:05:25:ea:e6:6c:0c:10:c2:3b:d5:f5:e5:6d:
         a6:31:4f:27:93:3a:8f:48:9b:51:c3:ec:9b:8f:2e:4d:2d:e3:
         57:b7:c7:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:18 2026 by rpki-client