Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File:                     VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier:          MTwG5JUZ0+8K8Lhx3VKxixLT7CzEz9p2AkzO8Vcr2F4=
Subject key identifier:   3F:32:83:39:27:AE:57:53:FE:CE:DA:E0:AF:F6:5E:D9:1B:57:20:2C
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer:       /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial:       019E1F109EA4B6BA030A3EA9FCCA0CC1643E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number:          1620
Signing time:             Wed 13 May 2026 02:00:43 +0000
Manifest this update:     Wed 13 May 2026 02:00:43 +0000
Manifest next update:     Thu 14 May 2026 02:00:43 +0000
Files and hashes:         1: MNjnhXm-X8Hr0m1FHNhPNeqizN4.roa (hash: raAdAgwgOSAOE32N6oyH/Cjh2N1jq2esG0G8eaE+sBg=)
                          2: VGfbO2AoEkVgiEe7eol8Fa0FJHI.roa (hash: Gg/sfmzaxHzq46KeR5IMMhXbjJpGims7dj0ED45jROU=)
                          3: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: lJBPC+iwpdXVn6K8C+8Y7uymZWnI4s8pSeAKraB+YXY=)
                          4: ZTjij_xarY3uSsETPrHbCQMjDbc.roa (hash: xPTovrvehpwr+F/o3Md/DIUCvNOGAiWZfmbE0SFBPKU=)
                          5: kADVg105h_GWzfxThtyA_fhTqC0.roa (hash: LC09wEDqsrJf0AUeaUkaZqlAVX+H70zFJW/aF5Y55P4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:9e:a4:b6:ba:03:0a:3e:a9:fc:ca:0c:c1:64:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
        Validity
            Not Before: May 13 02:00:43 2026 GMT
            Not After : May 14 02:00:43 2026 GMT
        Subject: CN=3f32833927ae5753fecedae0aff65ed91b57202c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:d9:f7:cc:51:2d:23:4d:e2:1d:d0:25:0b:
                    94:6c:45:10:57:9b:15:c1:33:1a:92:5e:80:b8:74:
                    83:97:16:ce:40:55:74:5d:24:2e:31:00:71:4c:09:
                    8d:e8:70:51:b4:2f:55:30:1c:bf:48:28:10:54:5c:
                    d8:ba:72:b3:16:09:33:a5:2c:5a:3a:97:22:9c:0b:
                    b2:fe:1a:a3:67:f1:2e:05:ec:19:ad:11:f1:23:a0:
                    be:8f:00:19:d6:f4:e2:a7:bf:bb:62:81:c3:19:7f:
                    84:25:6d:d8:86:dd:e1:e2:ea:55:e9:32:29:8d:a8:
                    df:d8:af:35:d2:d9:b1:63:25:60:4d:0e:55:92:d6:
                    10:77:c4:8b:b2:c8:67:25:f3:3f:94:cf:a5:56:aa:
                    3a:b9:1a:42:de:e0:bb:81:57:a1:cb:d8:8e:56:33:
                    2a:33:59:8c:cf:ef:42:b1:5b:ed:fd:ea:46:8f:5b:
                    78:bd:81:cf:7e:97:8e:97:3b:2b:f2:f4:04:69:c5:
                    af:f8:db:4c:22:37:b6:c6:9a:1f:c6:18:4f:96:4b:
                    33:1e:d9:30:eb:3a:94:c4:14:36:66:9e:d0:de:19:
                    fd:11:03:3e:8d:d4:d9:27:fd:8c:1f:27:a0:f1:20:
                    42:36:3f:77:dc:2f:b7:1e:cb:c0:5c:60:46:27:33:
                    92:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:32:83:39:27:AE:57:53:FE:CE:DA:E0:AF:F6:5E:D9:1B:57:20:2C
            X509v3 Authority Key Identifier:
                keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:6f:ad:e1:3e:2b:b1:b3:2f:0a:cf:28:83:28:cc:1b:69:ea:
         e6:b3:81:19:c2:66:40:0c:ea:bc:8f:63:ae:54:55:a0:10:eb:
         d6:d6:8d:40:04:e0:f9:fd:6a:69:e7:1d:79:63:2f:76:cf:5b:
         f4:3c:b1:67:bf:00:87:be:c3:09:82:cd:50:68:5a:33:b0:e7:
         9c:e9:ec:e6:6b:87:7a:85:8e:79:26:d0:ef:12:00:67:99:fc:
         20:1d:74:01:4e:fb:82:d5:0a:b7:f7:eb:83:61:ba:7f:83:af:
         51:6b:c8:5c:db:d7:54:d0:52:83:52:ce:f8:4c:50:26:93:a0:
         4c:d6:58:d8:d4:4f:3b:51:66:1c:7d:c6:2e:1d:c4:81:6b:95:
         f5:9f:ef:77:24:f8:65:30:8d:c0:66:42:a1:ab:d7:17:7e:5d:
         2c:18:5a:07:7d:d9:cb:25:4a:88:cb:c1:33:b8:63:92:f2:f5:
         67:91:bf:d8:3d:c9:a3:49:a3:bc:16:81:97:b0:21:34:cf:3b:
         88:ed:f9:4b:8e:a5:48:f3:aa:50:e4:3b:06:0a:7c:3f:88:b5:
         77:ea:f3:51:5c:f2:cb:ca:1c:29:e2:85:d3:af:7d:6e:91:58:
         f1:8f:89:2c:b5:51:67:45:c0:f2:91:92:cf:be:b2:a8:a4:3a:
         9a:2d:23:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:41:39 2026 by rpki-client