Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
File:                     vDjusmw53w8ZTlDXZBmNkOHztck.mft (raw, json)
Hash identifier:          QZID/MEtODYpkfTCoVfZVjZTFy+CMRSmRxFAcnH4NJw=
Subject key identifier:   AF:76:E7:D7:A6:64:CF:57:1D:B3:61:F8:A6:7C:2F:68:3E:41:58:46
Authority key identifier: BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9
Certificate issuer:       /CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
Certificate serial:       019E1EA3276D7B3E4A1F467E857147A5E9E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
Manifest number:          0B71
Signing time:             Wed 13 May 2026 00:01:09 +0000
Manifest this update:     Wed 13 May 2026 00:01:09 +0000
Manifest next update:     Thu 14 May 2026 00:01:09 +0000
Files and hashes:         1: CMYGKasLmsjGblCK6IVsYcoAi1Y.roa (hash: 5I3la7dVRWMx/gZhUW1jrF5r1NdUNZ+7mT0gXM18zsQ=)
                          2: vDjusmw53w8ZTlDXZBmNkOHztck.crl (hash: tbme663pL6AjOakh8+eXeyQo/l8Udc5+mbpmYoKge7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 00:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:27:6d:7b:3e:4a:1f:46:7e:85:71:47:a5:e9:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc38eeb26c39df0f194e50d764198d90e1f3b5c9
        Validity
            Not Before: May 13 00:01:09 2026 GMT
            Not After : May 14 00:01:09 2026 GMT
        Subject: CN=af76e7d7a664cf571db361f8a67c2f683e415846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:40:4e:e3:9c:cb:75:10:14:76:21:d6:2f:ec:
                    b8:3b:9c:28:fd:e4:c3:3e:b4:1a:98:9d:63:c1:e9:
                    c3:f4:8b:7c:da:4b:3d:62:5e:1c:fd:0b:78:de:1e:
                    1b:68:6d:68:f3:ac:4d:50:f7:36:24:88:22:64:c6:
                    e0:c1:4c:af:6b:61:cf:71:cb:65:89:69:4b:bf:8f:
                    d8:a6:09:69:e9:2d:13:55:cf:d0:56:22:f2:53:4c:
                    88:75:a3:bd:5f:e8:05:cb:a1:21:9b:bb:9a:d4:aa:
                    f3:25:f6:1d:4e:8b:1e:63:e3:07:12:de:0b:07:a6:
                    8c:3d:45:b7:d5:32:05:d5:6d:6e:fc:25:6d:c3:e3:
                    fb:ce:34:ad:21:14:d7:34:b6:16:a5:39:b3:e5:6f:
                    8c:79:41:08:45:aa:a8:70:ac:28:36:0d:ef:b6:64:
                    f8:c8:da:ef:89:a1:5f:e2:6d:05:81:54:ad:82:d6:
                    ef:60:da:54:85:03:08:ee:6f:01:73:55:b8:10:85:
                    f6:39:97:20:ca:e2:e9:33:a6:33:bd:65:68:eb:5a:
                    b9:31:4d:e3:b3:67:37:0e:be:73:fe:ea:f2:73:06:
                    80:71:02:29:ec:39:0a:cd:75:27:f1:8e:80:a4:55:
                    c9:41:d7:08:0c:c6:37:15:a5:8e:d9:67:7c:cd:32:
                    93:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:76:E7:D7:A6:64:CF:57:1D:B3:61:F8:A6:7C:2F:68:3E:41:58:46
            X509v3 Authority Key Identifier:
                keyid:BC:38:EE:B2:6C:39:DF:0F:19:4E:50:D7:64:19:8D:90:E1:F3:B5:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDjusmw53w8ZTlDXZBmNkOHztck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/61b23c-a586-42c0-9ded-050da11491e7/1/vDjusmw53w8ZTlDXZBmNkOHztck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:cf:ff:05:65:75:f9:25:69:f9:ae:f0:4f:08:b7:04:57:33:
         d2:88:bc:1f:6e:92:29:bb:71:79:92:e4:0d:98:96:27:6b:34:
         b9:44:b4:18:4c:a0:03:46:6f:b9:f5:a2:52:72:b3:09:12:32:
         41:47:8b:32:f1:00:8c:81:b9:49:6b:a8:96:73:cf:77:c1:88:
         38:72:40:60:d5:2c:90:46:5f:f5:e4:e5:1c:1f:8d:3d:f1:c4:
         8a:02:79:d0:c5:81:09:2a:a6:10:9e:e6:22:1e:52:3b:0e:5f:
         80:4a:d6:85:bb:93:87:c7:1e:34:53:e1:4d:e8:ff:49:fe:a2:
         9e:88:8b:15:60:35:22:2b:92:a1:64:14:1d:e9:7a:86:86:16:
         8b:b2:48:32:c0:ba:00:34:bf:ee:2c:08:eb:fb:4c:f6:b8:93:
         7b:69:06:6d:98:20:98:d1:51:cf:c1:ba:6a:c9:2a:8d:cc:7d:
         40:3e:e2:8b:cf:b4:81:6d:c3:5d:c5:d6:f3:7a:95:59:48:6e:
         6b:ee:40:b8:4f:7a:b8:ad:52:0f:67:a2:83:f0:ea:1c:0a:6e:
         1e:b0:9d:12:8d:f0:90:fb:9c:44:4a:0a:5e:50:88:9a:24:a7:
         01:3a:c7:ca:9d:39:4d:f7:ce:26:eb:81:ef:f1:0f:56:5b:4c:
         46:8a:0c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:25:00 2026 by rpki-client