Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          xAR3PvtaQRPBAqE1X2oHJjXzjeNa3OjxFJ21GpxwiO8=
Subject key identifier:   72:8C:34:67:E9:D5:4A:C0:F6:AB:00:0A:1B:1F:F8:47:8F:0D:CD:CB
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       019E209177581F9C0FF5CE603E7D4F5F8584
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 09:01:04 +0000
Manifest this update:     Wed 13 May 2026 09:01:04 +0000
Manifest next update:     Thu 14 May 2026 09:01:04 +0000
Files and hashes:         1: 1-VM5a5VKVQLBO_mS5M0AKzrssE0.roa (hash: IZ1q5GIjELLZgJlLEGzKrti0blpYjCurNkMWnWHLthU=)
                          2: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: C0FlopW0JAhE6njXgyjM9t3fsXftLVAjpr/3kNHbO9E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:77:58:1f:9c:0f:f5:ce:60:3e:7d:4f:5f:85:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: May 13 09:01:04 2026 GMT
            Not After : May 14 09:01:04 2026 GMT
        Subject: CN=728c3467e9d54ac0f6ab000a1b1ff8478f0dcdcb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f2:fd:4c:c4:26:2a:84:59:a6:25:19:e3:16:
                    7e:42:ad:48:7c:41:f5:34:47:fa:86:2b:e2:b6:cd:
                    60:51:2f:86:9a:07:7a:87:ee:ba:f8:ee:b4:38:cf:
                    9d:d3:72:fd:e6:3a:b4:21:d4:19:f9:22:1d:93:88:
                    b5:24:70:31:7c:ff:b9:2a:79:30:dc:6a:b8:38:c4:
                    d8:81:c6:5a:1d:d2:d8:10:9a:cb:63:d3:eb:cb:23:
                    db:aa:4d:f5:a1:21:4f:e9:b1:85:82:50:b4:16:5f:
                    4c:06:50:fb:57:78:91:18:dc:f0:37:32:ec:d5:47:
                    f9:bc:b9:fe:2f:7d:c0:2a:50:1c:fb:fe:be:b8:26:
                    bf:a9:45:82:ab:49:21:48:1d:bc:8f:d8:d6:48:e4:
                    6d:54:7d:7f:1a:8a:af:2e:9c:e0:c3:78:fb:41:2f:
                    08:d1:eb:ec:b5:47:3e:ed:6d:a3:63:13:89:1c:17:
                    c4:cc:c2:8b:40:a8:68:39:b8:0a:28:be:e6:38:b2:
                    b8:0d:69:a9:9c:4d:f2:a4:b5:bb:02:94:08:3d:50:
                    f6:d9:60:ba:aa:16:29:96:2e:db:77:34:72:55:0d:
                    bf:f0:db:59:94:db:38:8d:e3:6d:5d:e1:8b:bf:5f:
                    a0:22:2a:5d:e2:55:b4:6a:81:c9:ad:c7:08:b4:0e:
                    88:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:8C:34:67:E9:D5:4A:C0:F6:AB:00:0A:1B:1F:F8:47:8F:0D:CD:CB
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:00:48:40:51:4d:97:7a:77:51:89:e6:1e:5f:c1:06:eb:
         2a:a9:8a:36:89:34:18:38:99:16:01:17:fd:fe:45:22:17:90:
         6b:05:ee:a9:81:c5:18:6c:b9:52:4c:c1:e8:a8:6a:23:f8:76:
         91:38:c3:c0:6f:11:27:a3:af:cc:c5:ba:3a:43:79:76:6e:6e:
         e5:18:09:05:ca:df:f8:e2:4a:f2:54:01:bb:8d:fa:2c:4b:92:
         81:b2:ed:4d:ed:0b:96:00:49:40:48:58:a9:e6:30:2e:37:b2:
         4b:b6:6e:dd:ed:66:68:0e:87:45:74:49:06:52:ee:3d:3e:c8:
         89:aa:8f:66:7c:65:77:5a:b1:f7:2c:a3:31:d9:16:47:23:fa:
         25:2d:e6:03:f9:88:75:5c:2f:6b:2d:76:2a:c8:b7:92:dc:49:
         6b:50:a3:b1:c7:69:07:11:71:a2:3f:3e:55:3a:6a:91:49:ed:
         c4:a2:76:b9:ea:b1:4f:9a:0c:74:f9:31:3d:3a:c3:cd:1c:4b:
         49:ed:da:fd:17:1f:f8:f2:52:36:84:f8:61:de:7a:cb:73:e8:
         06:c7:e9:22:67:10:db:6c:6d:21:26:56:9c:10:f2:b8:54:4a:
         ef:fa:fc:7b:f9:9a:23:50:69:2e:3b:37:a6:39:af:6c:c2:91:
         d6:32:ad:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:07:01 2026 by rpki-client