Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
File:                     fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft (raw, json)
Hash identifier:          dPxwLAfq85HOl0OYfkwaE6np65TurFHqSgLvMGsEL5E=
Subject key identifier:   A3:85:1F:58:27:41:1B:64:B1:6C:96:98:32:4D:0E:72:D6:F6:88:D6
Authority key identifier: 7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85
Certificate issuer:       /CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
Certificate serial:       019E20240B0632D589C50FED8EF72D523801
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
Manifest number:          0DE9
Signing time:             Wed 13 May 2026 07:01:33 +0000
Manifest this update:     Wed 13 May 2026 07:01:33 +0000
Manifest next update:     Thu 14 May 2026 07:01:33 +0000
Files and hashes:         1: JG54M9hQNDQTGG9DfTpX123rMZA.roa (hash: +0vKis9n9eNrXdMhQQ1uSWPpPcacFJxG7ZpcTVOdfcc=)
                          2: fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl (hash: Rq0mLyCAg/ToTZhdMUlYRf8PeUUAbl2FKL/m3fTXd2Q=)
                          3: jDmnMK_FmjsO2eDEz8u-P_V1MkU.roa (hash: t2nvduNkT/VapOuKsbrlXp7tqRlxHB7IeYwSDPY90Vg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:24:0b:06:32:d5:89:c5:0f:ed:8e:f7:2d:52:38:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5aa0afe8e6f0bb85e5c75f2f6c14121830ec85
        Validity
            Not Before: May 13 07:01:33 2026 GMT
            Not After : May 14 07:01:33 2026 GMT
        Subject: CN=a3851f5827411b64b16c9698324d0e72d6f688d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a2:cd:06:49:cf:91:dc:63:a8:41:81:8d:68:
                    ac:fd:2b:a7:34:2a:70:ce:ed:48:6f:5a:4e:72:97:
                    b1:06:3a:eb:e9:6b:64:cc:2e:07:ac:f0:d8:8f:47:
                    16:55:a2:40:c1:e3:55:a3:d8:3d:c8:6f:5d:61:56:
                    2f:6e:7d:26:87:97:87:ac:3a:1e:10:e2:6f:8d:9e:
                    33:b7:ea:9b:8b:ce:7f:a8:23:e1:3b:64:94:4d:7c:
                    a9:14:1d:29:58:8f:de:f9:09:e9:42:5d:83:16:20:
                    11:92:91:f1:f0:67:7c:97:ea:e3:30:41:d1:bf:8f:
                    18:53:9e:9f:4d:48:5e:64:97:ad:1c:b5:d8:8d:df:
                    36:c3:34:89:26:80:97:44:74:b7:f7:a4:b5:6d:32:
                    e1:3a:99:9f:12:07:f6:e3:67:3f:2a:cb:7a:3f:29:
                    77:b3:4f:53:64:c4:88:f9:49:94:5f:eb:df:49:20:
                    b6:d1:91:ef:70:23:14:6b:d0:b4:13:0e:4b:ae:07:
                    a2:e8:44:7c:38:f4:4a:70:3c:a6:f0:75:c1:26:5a:
                    a5:66:bd:f4:1f:21:19:4a:94:a2:c9:bc:52:46:6b:
                    37:b9:ef:cd:56:74:7b:5c:05:dd:34:67:6d:31:05:
                    84:0e:19:f5:b1:2d:59:d6:cf:7d:ac:65:09:05:cb:
                    d2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:85:1F:58:27:41:1B:64:B1:6C:96:98:32:4D:0E:72:D6:F6:88:D6
            X509v3 Authority Key Identifier:
                keyid:7D:5A:A0:AF:E8:E6:F0:BB:85:E5:C7:5F:2F:6C:14:12:18:30:EC:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVqgr-jm8LuF5cdfL2wUEhgw7IU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/aecb6b-7b39-47f9-b0cf-8ffb127b324e/1/fVqgr-jm8LuF5cdfL2wUEhgw7IU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:57:0b:0b:84:56:f3:0a:33:2d:f7:94:cc:e1:e3:c2:b0:e9:
         ff:83:a9:3e:ab:68:f3:cf:6c:af:df:40:97:ef:d3:26:0e:b2:
         c5:41:7b:78:9d:f1:a5:88:67:b2:35:9f:38:9d:68:41:91:3d:
         6d:54:04:8f:66:d3:0d:68:81:db:ac:c9:35:e4:85:55:ee:e8:
         83:64:89:d8:b9:37:e0:7b:3f:36:38:d2:1c:f0:5e:5d:06:70:
         88:b4:4e:a8:62:04:38:88:55:cb:de:38:37:e9:2e:d8:ec:8b:
         ff:32:5b:a3:c0:e5:d4:f4:a2:82:0c:84:8f:f0:ff:af:0e:c9:
         ea:df:14:d2:f8:a4:7a:22:06:75:a0:24:b4:94:4a:79:c1:60:
         9c:be:1e:20:7f:eb:6e:d7:2c:95:34:0b:8f:d0:84:af:a0:67:
         d6:5b:9a:5d:08:db:4a:63:96:7b:e2:f5:ac:11:37:52:e6:4c:
         b1:2c:4e:bf:e9:4c:e4:4a:e7:18:b3:7c:25:54:fc:2c:3f:49:
         5e:73:6d:29:d3:7f:e0:a0:f2:53:ef:8c:d1:3e:62:3e:60:d1:
         90:c8:e1:c3:ef:e8:4a:f4:71:e4:13:8e:42:a9:5e:97:97:93:
         11:b9:1d:29:73:d4:00:3b:89:ec:4f:f4:61:80:ac:3d:2e:0f:
         57:c5:c7:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4gJAsGMtWJxQ/tjvctUjgBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkNWFhMGFmZThlNmYwYmI4NWU1Yzc1ZjJmNmMxNDEyMTgz
MGVjODUwHhcNMjYwNTEzMDcwMTMzWhcNMjYwNTE0MDcwMTMzWjAzMTEwLwYDVQQD
EyhhMzg1MWY1ODI3NDExYjY0YjE2Yzk2OTgzMjRkMGU3MmQ2ZjY4OGQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6LNBknPkdxjqEGBjWis/SunNCpw
zu1Ib1pOcpexBjrr6WtkzC4HrPDYj0cWVaJAweNVo9g9yG9dYVYvbn0mh5eHrDoe
EOJvjZ4zt+qbi85/qCPhO2SUTXypFB0pWI/e+QnpQl2DFiARkpHx8Gd8l+rjMEHR
v48YU56fTUheZJetHLXYjd82wzSJJoCXRHS396S1bTLhOpmfEgf242c/Kst6Pyl3
s09TZMSI+UmUX+vfSSC20ZHvcCMUa9C0Ew5Lrgei6ER8OPRKcDym8HXBJlqlZr30
HyEZSpSiybxSRms3ue/NVnR7XAXdNGdtMQWEDhn1sS1Z1s99rGUJBcvSLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKOFH1gnQRtksWyWmDJNDnLW9ojWMB8GA1UdIwQY
MBaAFH1aoK/o5vC7heXHXy9sFBIYMOyFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2Yt
OGZmYjEyN2IzMjRlLzEvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9hZWNiNmItN2IzOS00N2Y5LWIwY2YtOGZmYjEyN2IzMjRl
LzEvZlZxZ3Itam04THVGNWNkZkwyd1VFaGd3N0lVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtVcLC4RW
8wozLfeUzOHjwrDp/4OpPqto889sr99Al+/TJg6yxUF7eJ3xpYhnsjWfOJ1oQZE9
bVQEj2bTDWiB26zJNeSFVe7og2SJ2Lk34Hs/NjjSHPBeXQZwiLROqGIEOIhVy944
N+ku2OyL/zJbo8Dl1PSiggyEj/D/rw7J6t8U0vikeiIGdaAktJRKecFgnL4eIH/r
btcslTQLj9CEr6Bn1luaXQjbSmOWe+L1rBE3UuZMsSxOv+lM5ErnGLN8JVT8LD9J
XnNtKdN/4KDyU++M0T5iPmDRkMjhw+/oSvRx5BOOQqlel5eTEbkdKXPUADuJ7E/0
YYCsPS4PV8XHIQ==
-----END CERTIFICATE-----
Generated at Wed May 13 11:13:21 2026 by rpki-client