Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File:                     V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier:          VlIzXnwliZ8EutdtK18NXvmj0VSr4GCugdkLaZwJYaI=
Subject key identifier:   FD:D4:8F:05:F3:F6:E8:FF:27:9D:01:B0:FE:3D:9B:CD:1A:37:E4:2B
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer:       /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial:       019E1D9114E6C58E822FBC482D0C9C85160C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number:          1897
Signing time:             Tue 12 May 2026 19:01:47 +0000
Manifest this update:     Tue 12 May 2026 19:01:47 +0000
Manifest next update:     Wed 13 May 2026 19:01:47 +0000
Files and hashes:         1: 8BMsIpep3t4zLDNzNTQPbvhtEs4.roa (hash: Kc6FDAfUDHb/D1pz1W/TVvRE/xKyOIdC92JUUP2l6Co=)
                          2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: QJDm1ikVhU0Z3k7ZrakKfwCpBRGI0kDTNXqPiZNOh1Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 19:01:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:91:14:e6:c5:8e:82:2f:bc:48:2d:0c:9c:85:16:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
        Validity
            Not Before: May 12 19:01:47 2026 GMT
            Not After : May 13 19:01:47 2026 GMT
        Subject: CN=fdd48f05f3f6e8ff279d01b0fe3d9bcd1a37e42b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:05:fe:3f:77:96:13:e6:fd:34:66:d2:96:eb:
                    26:96:18:d7:4f:99:89:58:20:7f:7d:ad:d7:a1:68:
                    56:77:e9:15:5d:27:c6:2e:a1:ff:ed:47:f4:95:b8:
                    4c:c8:71:d4:d1:4b:b0:56:88:f7:1e:58:8a:f7:4e:
                    3d:7f:43:e9:7d:aa:1f:24:25:75:e8:be:df:cd:0a:
                    4e:1f:84:c4:6f:7f:69:36:c0:19:8f:53:67:fb:c2:
                    89:fe:c5:e2:fc:1e:b9:53:03:9f:8d:81:fe:8e:79:
                    67:c3:06:d8:64:d6:c3:52:a3:dd:f2:14:37:fa:2d:
                    e2:99:f8:6b:a2:9c:70:e5:56:65:e5:18:19:c2:96:
                    a8:ca:b7:9d:08:03:9a:45:ca:f0:1c:f2:f4:0c:2f:
                    ee:35:29:c4:ca:80:51:b0:6e:04:be:3e:59:22:53:
                    6f:4c:94:66:3d:b1:39:e8:c7:0f:69:85:b2:02:2b:
                    2a:c9:a2:46:43:a9:3b:d6:ff:c1:b9:bf:bc:d4:9b:
                    28:f0:b2:ac:bf:5c:c3:02:f6:40:df:85:a5:44:2a:
                    0f:44:39:4e:da:d7:8b:2f:f2:53:c3:1c:4b:e4:11:
                    4d:76:7f:06:f7:dd:f8:15:7f:41:7f:5d:0f:1c:be:
                    e3:d1:1b:25:45:c4:04:ba:6b:d4:4d:94:4d:e7:43:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:D4:8F:05:F3:F6:E8:FF:27:9D:01:B0:FE:3D:9B:CD:1A:37:E4:2B
            X509v3 Authority Key Identifier:
                keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:d2:6e:b0:f1:4c:10:ae:b6:53:1d:f8:d7:c0:ce:38:df:79:
         d0:3b:00:da:50:07:21:a9:60:16:b6:2b:08:9a:9b:b0:dd:7c:
         bf:a1:53:64:07:6c:43:80:89:9b:24:ac:c1:8c:ca:b9:54:08:
         74:e8:ac:1d:fc:b8:69:14:40:fb:99:8e:d3:d9:d2:af:f7:ca:
         65:8c:bb:a6:3f:e3:a5:a1:7c:be:ee:02:f3:10:6b:02:cb:d6:
         71:d1:13:77:9f:c4:19:7d:af:78:40:68:bd:56:85:f1:4e:bd:
         75:65:af:54:a3:48:8f:3b:28:e4:96:93:fb:d6:42:88:cc:da:
         6a:8e:1a:41:c9:de:33:df:a1:47:b5:29:a7:c0:aa:c5:2c:da:
         00:2c:4e:e5:6d:0e:04:be:19:7e:6c:54:28:24:24:8b:63:6d:
         f6:4b:9c:14:fe:ca:9e:5b:a2:ea:33:2d:3d:1c:4b:74:4d:a1:
         e1:1b:23:f3:c6:85:44:d0:4d:c7:2f:23:ec:7a:b3:63:d5:14:
         33:7c:0d:45:49:6a:fa:e2:99:16:b8:20:ea:ee:6c:5c:ab:fc:
         31:da:e2:dc:34:fb:c9:2d:35:7c:1f:30:7d:df:ba:a1:28:b9:
         1d:86:a5:d5:9d:e4:bc:30:bb:c0:1c:f4:4e:ae:a4:c2:a9:b1:
         07:b3:a5:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:50:27 2026 by rpki-client