Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          otGXzviGeY4OI9l4MwTEG+/5M8u4nLkVxrdThkUBdwg=
Subject key identifier:   C8:5C:C0:63:2B:CD:DF:0B:78:30:3C:5F:25:1B:73:E0:A9:62:41:7E
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019E1EA32211D7D1C5DE13F17D24A65D6753
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          149F
Signing time:             Wed 13 May 2026 00:01:07 +0000
Manifest this update:     Wed 13 May 2026 00:01:07 +0000
Manifest next update:     Thu 14 May 2026 00:01:07 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: tf2Shwl7byPo9kw+M5nzpZfKr7MMDSZaBSEZasx0b0E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:22:11:d7:d1:c5:de:13:f1:7d:24:a6:5d:67:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: May 13 00:01:07 2026 GMT
            Not After : May 14 00:01:07 2026 GMT
        Subject: CN=c85cc0632bcddf0b78303c5f251b73e0a962417e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:3e:f8:52:0c:ea:8e:d7:a4:1e:0b:64:7d:
                    b8:0f:db:e1:27:93:b9:50:00:2d:29:34:a5:f5:95:
                    7f:f5:9d:c7:fe:27:91:2d:10:da:04:3a:23:09:50:
                    9e:a5:bb:87:eb:36:cf:e9:db:f8:48:c6:f9:d8:cc:
                    2d:67:c8:61:92:a7:b4:ae:4a:c1:f8:61:90:2b:08:
                    93:73:08:b3:7c:8f:36:c1:f9:57:2f:ec:e4:89:19:
                    ce:57:d2:9d:6e:07:7e:05:d2:e0:9a:2c:07:d0:11:
                    76:d0:43:3a:5c:98:09:a6:37:b7:06:ff:c8:02:94:
                    fd:81:73:a4:19:ef:02:b5:01:a8:19:27:c8:69:28:
                    95:16:60:fb:7d:2d:a9:30:85:26:8d:a7:a6:06:7b:
                    bf:76:a4:96:33:52:5d:bb:85:f9:6e:35:4b:b9:b1:
                    55:53:0e:a3:08:8f:57:53:bf:7c:c4:8d:2d:c5:fb:
                    58:a0:81:92:c1:da:7d:c1:b4:93:86:74:af:0b:dd:
                    4f:ba:a6:d0:17:38:a8:98:0f:2e:6a:12:87:bb:86:
                    91:6b:6e:6d:0f:04:a7:a9:7b:21:de:43:d8:bb:4d:
                    12:13:b4:a6:7b:fc:98:f8:3b:fd:d4:a1:5a:b5:fc:
                    ed:a2:4a:21:6d:83:22:a7:b6:8d:3f:8a:06:e8:7c:
                    64:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:5C:C0:63:2B:CD:DF:0B:78:30:3C:5F:25:1B:73:E0:A9:62:41:7E
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c4:0d:8e:13:b0:4b:6c:23:37:bd:ec:dc:21:f2:88:e5:f4:
         44:33:b8:9e:7d:b8:07:2c:82:cf:cc:b1:aa:3d:77:b2:70:ff:
         7d:9a:aa:a6:8c:11:ff:a0:e3:b5:2e:96:e7:97:0a:28:7a:a5:
         87:9f:22:e6:f3:8b:41:87:f6:91:07:10:8d:d8:30:4b:74:65:
         4a:9a:05:f4:55:90:47:c6:02:a8:25:32:71:2d:98:f4:8e:90:
         7c:27:4c:19:8f:82:39:e8:61:72:37:86:3c:22:f2:2f:21:ca:
         84:41:d4:aa:cf:ba:8e:47:e9:1b:82:c9:9f:3a:39:d1:86:ec:
         57:c3:78:8e:4d:40:65:cc:fc:e8:b4:4d:65:f5:ab:63:c2:a6:
         82:ff:9e:47:48:20:ae:f6:77:75:ad:00:28:2b:1c:52:35:6e:
         0a:4a:c0:d0:4a:cf:8d:54:a7:95:a8:73:a3:7f:b7:f3:df:c8:
         fb:a4:4a:e6:f2:51:f5:55:96:72:6a:62:77:8c:f5:a6:ef:15:
         bd:c0:2c:3c:fd:b1:7b:34:ae:1c:14:80:e1:a9:66:7b:8d:ac:
         ea:f1:ab:b8:3f:bb:f3:dd:7b:97:ce:4c:21:ed:f5:16:dc:4b:
         d6:6f:0c:3b:b4:13:cf:50:30:63:05:f1:31:33:7e:9b:fc:de:
         57:a1:b6:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:48:16 2026 by rpki-client