Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          PiZK5KiMeyzMyFnDU7+Ue1AdrG9vMOm1eHQrkOJ17rg=
Subject key identifier:   FB:9F:A8:25:4E:91:D1:E3:25:48:FB:B9:07:FE:FF:3F:95:27:E4:28
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       019E1DC73ECBFF20B2B0BC1F893C39E316D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          1897
Signing time:             Tue 12 May 2026 20:00:57 +0000
Manifest this update:     Tue 12 May 2026 20:00:57 +0000
Manifest next update:     Wed 13 May 2026 20:00:57 +0000
Files and hashes:         1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: z6ks7z47kLrlRiHyc/NGDXXS88Q4tNWBX9rsWk4pJD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:c7:3e:cb:ff:20:b2:b0:bc:1f:89:3c:39:e3:16:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: May 12 20:00:57 2026 GMT
            Not After : May 13 20:00:57 2026 GMT
        Subject: CN=fb9fa8254e91d1e32548fbb907feff3f9527e428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d3:fa:56:94:05:4b:39:db:9b:eb:1f:1c:59:
                    83:ad:74:0f:69:39:ac:f1:79:c5:d1:6d:b7:97:8d:
                    c2:50:c4:c0:02:89:97:bc:c6:07:24:91:7e:ad:d6:
                    75:eb:10:4b:a2:eb:5c:2d:f3:36:56:bb:c5:72:c2:
                    a4:59:af:e0:ae:40:8f:87:14:1e:2d:cb:d4:ac:f7:
                    91:c6:1b:0d:8f:dc:35:20:92:12:aa:52:f9:12:d4:
                    e8:0d:22:ae:95:47:9a:51:cd:98:60:1c:8f:cf:e7:
                    60:34:ac:b5:15:e1:b5:f9:64:b0:51:23:ed:5f:5f:
                    8f:f1:4a:fc:9d:72:41:74:5f:bc:4c:02:e3:98:e0:
                    97:24:71:00:67:3c:fe:e8:d0:2a:98:9c:f5:00:fe:
                    61:3c:f0:64:5a:c8:b2:35:c7:69:88:e5:f3:5d:bd:
                    46:f9:89:37:2e:e0:ea:77:6f:8c:55:eb:62:db:88:
                    c7:53:f7:dd:76:3b:08:f3:27:97:10:55:ad:ff:32:
                    7c:19:c1:14:15:e8:8f:78:75:72:1a:87:f9:c3:45:
                    f5:2b:dd:ae:f0:9b:1f:91:01:88:db:74:f6:18:b2:
                    c1:65:db:75:3f:19:f4:be:f7:7a:50:1f:bc:db:dc:
                    0b:39:c3:d0:63:a1:b7:e2:c4:8f:3e:68:f3:a9:32:
                    43:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:9F:A8:25:4E:91:D1:E3:25:48:FB:B9:07:FE:FF:3F:95:27:E4:28
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ac:0b:69:20:72:59:b7:ef:46:da:a1:63:01:58:9f:6e:b3:
         70:14:95:db:44:0a:ac:9e:05:e3:a6:18:d2:53:a5:86:8e:95:
         1c:6d:3f:1f:43:83:92:dd:bb:7c:95:ba:b4:b3:77:dc:74:a8:
         5e:f2:33:ea:8f:92:ac:73:81:7f:cb:1f:2d:33:b3:37:43:bf:
         4a:48:58:40:6c:60:3c:3e:75:d5:15:e1:9b:f6:91:06:fe:e0:
         3a:99:01:99:66:e9:f8:e7:9b:81:fa:b6:64:7c:03:6c:41:d6:
         79:27:65:36:6c:f8:97:85:f6:b9:cc:07:ec:42:da:3e:e0:c9:
         f4:96:06:44:73:d1:52:c7:48:6a:25:6c:86:ec:ba:59:f1:50:
         c3:2e:53:3b:3a:96:20:7d:7c:07:7b:b6:4e:88:07:b9:0b:1c:
         6b:1e:79:d6:52:f6:ca:0c:cb:9a:38:30:27:4a:2b:7b:1b:8a:
         aa:be:9e:4e:c7:9c:c2:20:cd:1f:d1:9b:0c:8e:cc:5e:bc:ac:
         04:e2:16:41:1d:9e:86:71:85:7c:4a:f0:bd:44:a1:f4:76:9a:
         23:0d:a9:23:fb:51:49:59:9f:07:26:4b:6a:32:44:20:d0:f9:
         e0:95:49:95:87:95:60:72:34:7d:2f:a1:c0:cc:a6:7c:cf:fe:
         90:0f:4c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:06:04 2026 by rpki-client