Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
File:                     v0nfV38O5EMYjAKTI0V7vFoOrTs.mft (raw, json)
Hash identifier:          Wjs9gCtQjvMc3N7clBoTnbxulKfvbKGYB/nXUC+5Y3Y=
Subject key identifier:   76:78:90:2B:CD:E6:5C:8C:BD:EF:5F:1B:BA:0B:F4:29:E0:CA:FF:D8
Authority key identifier: BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B
Certificate issuer:       /CN=bf49df577f0ee443188c029323457bbc5a0ead3b
Certificate serial:       019E1F10E73D16FF5927A1860AD338B21021
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
Manifest number:          0188
Signing time:             Wed 13 May 2026 02:01:01 +0000
Manifest this update:     Wed 13 May 2026 02:01:01 +0000
Manifest next update:     Thu 14 May 2026 02:01:01 +0000
Files and hashes:         1: rANm87WqORmafEWHghrrK-0l72M.asa (hash: Fgz6vPciEn1J0Q0dP4IkhgZ0dZebnzwKhwY9olb/BWo=)
                          2: v0nfV38O5EMYjAKTI0V7vFoOrTs.crl (hash: xAi7NzwUIK2ObgJM18A8O5E39BssyJScW2wTstVsg2s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:e7:3d:16:ff:59:27:a1:86:0a:d3:38:b2:10:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf49df577f0ee443188c029323457bbc5a0ead3b
        Validity
            Not Before: May 13 02:01:01 2026 GMT
            Not After : May 14 02:01:01 2026 GMT
        Subject: CN=7678902bcde65c8cbdef5f1bba0bf429e0caffd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:08:b7:77:23:a6:22:8c:3f:6e:68:3f:b6:11:
                    39:54:29:12:e1:07:9e:08:83:eb:33:a1:d0:41:f8:
                    7d:0e:fb:0b:ed:50:d3:59:b9:41:b7:c0:42:9f:cd:
                    fc:40:8c:c9:fd:89:fe:14:8b:6c:9a:3b:2e:90:6d:
                    81:ef:06:54:ed:45:7a:aa:53:ed:b2:5c:b5:94:89:
                    83:65:38:68:c2:17:cb:e4:1e:2a:79:36:a6:e4:99:
                    00:a8:f7:e2:dd:c6:a5:8c:fd:a7:12:ef:e8:32:af:
                    62:90:7d:dc:d7:3f:9a:ca:5e:bb:24:35:4e:ff:a1:
                    bc:97:b6:9d:51:24:7a:60:ee:b5:52:12:85:4f:5c:
                    7f:9d:a5:53:6b:3c:73:8c:b0:57:fd:fe:81:2c:0e:
                    bf:c5:72:34:26:50:2c:cc:89:e3:5a:21:36:1f:77:
                    df:c4:2d:06:e6:45:f2:a4:e0:f6:04:d2:ff:36:4d:
                    32:f8:fb:e8:04:70:39:8b:a6:cb:fb:db:98:5e:fa:
                    93:f0:c4:ec:2c:55:cb:51:6d:1b:a5:f2:d6:0a:95:
                    f0:b6:a3:4e:6c:32:98:86:ee:9a:af:c3:cb:8f:e3:
                    f4:75:a7:48:3d:4f:2c:10:ec:4a:0a:cf:0f:9a:fd:
                    f9:da:c6:5a:16:db:fa:2e:55:b0:0e:81:08:1a:8a:
                    27:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:78:90:2B:CD:E6:5C:8C:BD:EF:5F:1B:BA:0B:F4:29:E0:CA:FF:D8
            X509v3 Authority Key Identifier:
                keyid:BF:49:DF:57:7F:0E:E4:43:18:8C:02:93:23:45:7B:BC:5A:0E:AD:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0nfV38O5EMYjAKTI0V7vFoOrTs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6711a-3729-491b-8dbc-98c2a3c57b88/1/v0nfV38O5EMYjAKTI0V7vFoOrTs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:9a:d1:2d:69:d7:f1:ec:21:ea:cc:38:d5:79:9c:49:e9:98:
         b9:4a:1b:82:3f:b7:9c:f3:fa:0d:6e:99:18:3a:62:4b:98:66:
         63:e9:91:a6:ab:82:3e:20:1f:83:85:78:6c:a9:aa:8a:e0:cc:
         8d:8a:5c:3c:50:91:91:1e:98:62:5c:c8:13:64:e8:6a:b9:d7:
         b9:3b:38:24:3b:13:02:4c:e2:e1:71:f2:a1:70:f7:bd:e4:dd:
         11:ff:f8:2f:e2:51:c1:ef:7c:22:f5:15:6f:df:72:4f:27:ba:
         8d:73:2e:ee:41:57:2c:15:3c:5c:c2:06:f1:97:e7:90:91:64:
         0b:2e:39:ba:35:26:19:a4:12:89:90:35:8e:ad:2b:e9:be:6c:
         91:cc:f0:82:d9:bf:08:ad:0d:6f:70:0f:0f:0c:88:f8:6e:93:
         4f:86:03:24:96:51:0a:4c:1c:05:8e:f7:89:a9:63:7c:a4:68:
         3f:2e:10:74:5d:23:07:a5:a5:75:71:2f:c5:9a:14:a9:7b:d0:
         12:a0:8a:67:6c:8f:d6:0f:26:d0:1b:36:03:3c:20:9a:15:7c:
         7d:a4:2c:68:f4:aa:6b:2d:08:c2:5a:af:2f:6b:92:0e:fa:6b:
         73:ad:4d:77:20:f7:05:d9:aa:7d:c8:e6:45:ea:9d:a5:6c:0e:
         92:6b:83:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:19 2026 by rpki-client