Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          aXsaHbcC/jyzkrAwoMPlPErsMRja2zk7NbyXZmqqyto=
Subject key identifier:   21:AB:55:36:23:81:E8:A4:84:DF:4B:CC:BD:A6:82:EC:2A:A9:1E:FE
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       019E1F118B4AF377E8CD465F48D62D7A81D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          174D
Signing time:             Wed 13 May 2026 02:01:43 +0000
Manifest this update:     Wed 13 May 2026 02:01:43 +0000
Manifest next update:     Thu 14 May 2026 02:01:43 +0000
Files and hashes:         1: 6jWojyxSyaLCVEVrlwUXpc7pdZI.roa (hash: 2OvlAKvq6Z4TSn3m+HkdC95W0frjGZoZLJ+JjdZcHag=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: qbkzYpSstaATdQJNrUxotyCFkSN47KejrdhV436zLXY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:8b:4a:f3:77:e8:cd:46:5f:48:d6:2d:7a:81:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: May 13 02:01:43 2026 GMT
            Not After : May 14 02:01:43 2026 GMT
        Subject: CN=21ab55362381e8a484df4bccbda682ec2aa91efe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:55:f0:e1:a1:88:ed:6c:fd:b5:58:1b:01:ff:
                    aa:ee:27:af:4f:ce:31:4f:75:fa:81:3c:4a:7a:1d:
                    24:d2:35:a9:22:7e:3d:37:45:fb:18:28:53:88:c6:
                    e2:bf:4c:5b:03:da:71:53:ff:29:84:b6:7b:09:bf:
                    e6:6e:d2:92:e1:c6:b0:17:65:aa:e6:1c:cd:19:17:
                    03:b1:57:76:7c:eb:e7:9b:d4:c2:52:ef:2d:2a:b0:
                    12:f4:db:35:fe:dc:32:e8:52:64:47:8f:20:72:72:
                    9b:f8:a9:96:ee:a6:83:81:f9:36:07:24:fc:2f:30:
                    ea:40:bf:5e:2a:2d:61:03:a2:ae:43:5e:bf:58:8e:
                    0e:c2:91:63:72:8f:98:b1:3c:a4:bb:b3:ee:44:0b:
                    69:54:5b:ee:76:e3:19:b9:96:0d:df:8c:1e:00:6e:
                    e5:28:c6:51:a0:04:11:2d:79:c2:74:45:dc:ad:80:
                    27:cd:2e:a2:64:34:91:7e:c8:e8:34:22:a9:fa:4c:
                    91:9b:83:ea:fa:e7:59:b2:66:4b:5c:95:37:0d:7f:
                    56:c4:9a:ea:ae:15:39:33:d2:bb:26:65:8f:4f:a2:
                    25:7e:70:06:b3:28:4b:49:f6:8b:3e:7a:52:aa:7f:
                    ce:bc:0b:b3:75:51:b2:7b:e0:78:07:5c:48:ca:0d:
                    3f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:AB:55:36:23:81:E8:A4:84:DF:4B:CC:BD:A6:82:EC:2A:A9:1E:FE
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:90:89:42:4f:22:19:fd:1f:cd:7e:9c:ff:c8:f8:6d:c6:90:
         27:64:bc:50:e0:83:6e:1f:97:2b:d8:7c:b0:27:48:4f:3a:11:
         53:fb:33:93:37:25:24:32:53:42:c1:60:8d:a9:0b:19:69:d9:
         3a:16:88:3c:65:5d:a6:8a:45:84:6b:5b:d7:4f:9d:1c:68:5b:
         5f:d2:d8:94:14:06:9d:2b:c0:fc:d7:62:38:b3:21:f9:17:02:
         74:3b:61:56:88:59:f3:bf:0e:00:56:51:bd:92:44:94:c4:8b:
         a4:a5:f4:35:70:17:11:41:92:f7:3a:bc:15:81:73:e1:59:92:
         1d:9f:61:0c:45:2d:25:b2:19:44:c6:e1:29:c3:dd:92:1e:91:
         c9:8d:1a:90:26:06:9e:ce:30:56:c4:c1:e8:82:bf:4d:f8:5f:
         c6:08:eb:80:fd:a2:76:c2:18:66:f3:8b:e8:33:a7:e3:d4:95:
         4b:64:d4:8a:b7:0c:a1:d5:0a:10:bc:a1:19:b0:e7:08:67:91:
         1e:45:d9:ef:02:fa:cc:9e:5a:e6:95:9c:5e:64:14:ee:e0:98:
         0d:a6:3e:04:32:34:d9:46:b9:b4:02:74:ed:6f:cb:f0:61:9c:
         c9:1d:38:5b:06:bf:ed:ec:3f:11:5a:5d:ad:8b:1d:25:d9:06:
         2e:91:b4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:04:26 2026 by rpki-client