Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File:                     vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier:          cZDr4LQd76XThyItUgZrlFLS4Aynfxha7GkbfAky4/4=
Subject key identifier:   79:41:40:1E:EE:40:38:F7:6C:7E:1F:26:B9:9A:31:4D:95:53:90:FF
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer:       /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial:       019E1FB5825CC7F7A0788B6A771BB62DCD51
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number:          0A9E
Signing time:             Wed 13 May 2026 05:00:49 +0000
Manifest this update:     Wed 13 May 2026 05:00:49 +0000
Manifest next update:     Thu 14 May 2026 05:00:49 +0000
Files and hashes:         1: gOX8D8p806A5CJ7mpndk-EXr948.roa (hash: 2sz6qMSJk6TSCV4AbeeKZkEdeqE+n55SbpZkpDDbX6E=)
                          2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: K+s8aHgjDpbCvs5dW8+qQOLJyaQ5Yub0zwlf9Gc8Pno=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:82:5c:c7:f7:a0:78:8b:6a:77:1b:b6:2d:cd:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
        Validity
            Not Before: May 13 05:00:49 2026 GMT
            Not After : May 14 05:00:49 2026 GMT
        Subject: CN=7941401eee4038f76c7e1f26b99a314d955390ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:83:f2:c2:da:62:9b:d8:5e:53:79:dc:62:
                    95:6c:32:c9:75:32:06:dc:16:2d:2f:b8:09:72:2a:
                    45:cb:a5:24:71:95:20:ad:99:9b:16:3d:9b:e6:5e:
                    4a:e6:df:74:ab:65:29:ab:18:ce:ae:5b:d9:4e:a4:
                    d4:eb:21:ec:bf:cb:02:17:c9:c5:2d:87:36:b5:64:
                    27:af:e8:0b:01:d7:96:45:2a:06:9f:32:42:0f:67:
                    31:27:e0:33:98:16:eb:f7:e1:ed:e5:0f:50:f2:86:
                    eb:80:b6:40:d4:fa:3b:bf:d0:32:1e:0d:25:cb:4a:
                    12:91:c0:1c:97:6b:f6:6c:e4:fb:ea:b3:3b:93:76:
                    51:3c:fc:0e:35:cd:d3:4e:58:6c:c7:1e:17:80:82:
                    dc:ed:53:b5:2b:0d:fc:d5:3e:93:4d:2a:ec:a9:76:
                    7c:02:a0:a4:6b:6d:f2:5c:d5:3c:d4:b6:17:8a:c3:
                    ad:2b:ae:6f:21:ef:0c:1a:fe:7f:a7:c6:cd:8e:7d:
                    82:5b:6e:d6:5a:53:31:69:2b:ff:07:83:32:76:0f:
                    b4:44:37:46:57:35:9d:77:dd:83:1d:1f:77:b7:15:
                    18:df:ff:0a:57:ec:04:6e:95:4a:28:85:9a:a5:9f:
                    05:b1:54:b4:9d:33:7f:6c:c1:b4:8d:4e:ae:ca:f5:
                    b6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:41:40:1E:EE:40:38:F7:6C:7E:1F:26:B9:9A:31:4D:95:53:90:FF
            X509v3 Authority Key Identifier:
                keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:95:d6:75:51:f9:44:69:30:a9:97:c1:a3:61:55:e4:62:7b:
         ce:49:51:b7:ac:bf:de:c5:78:09:bc:1c:6a:6f:14:84:85:de:
         4e:ad:e2:3e:23:b2:ac:81:2b:9e:0d:4a:05:e4:a4:1c:29:85:
         71:c8:d4:cd:f0:1e:d2:fe:3a:46:59:11:1f:23:6f:5d:f9:4d:
         14:9c:79:cd:b0:08:c6:ad:7e:07:1b:4e:13:48:64:9e:17:c5:
         c3:3c:71:75:2d:f5:aa:de:2d:df:1f:f3:06:b6:1e:2c:96:1f:
         97:fc:eb:db:56:2e:5c:0e:57:0c:d1:c3:f7:d0:f1:11:8a:b5:
         69:9c:b0:06:0c:81:a6:c6:b0:16:b4:3d:4d:6b:26:d0:56:07:
         8a:d5:a0:91:b9:81:f7:61:03:c1:a5:95:70:5c:b3:ac:33:4f:
         9a:ad:d9:50:e2:dc:2f:c1:f8:ec:03:af:9d:d5:4d:b8:47:bc:
         48:29:60:30:8b:fa:f3:7b:c4:ea:cc:9c:f3:8d:be:7b:da:9d:
         16:84:67:16:79:99:19:c6:ae:07:48:dc:6a:e6:31:30:03:47:
         ca:34:bf:c5:aa:b8:42:ef:73:2a:6c:f0:59:fe:5a:c0:85:a1:
         a8:2e:2d:11:20:e6:ca:bc:78:ef:b5:c4:81:03:81:76:a1:40:
         a4:66:f6:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4ftYJcx/egeItqdxu2Lc1RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh
MjQ5YWEwHhcNMjYwNTEzMDUwMDQ5WhcNMjYwNTE0MDUwMDQ5WjAzMTEwLwYDVQQD
Eyg3OTQxNDAxZWVlNDAzOGY3NmM3ZTFmMjZiOTlhMzE0ZDk1NTM5MGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNmD8sLaYpvYXlN53GKVbDLJdTIG
3BYtL7gJcipFy6UkcZUgrZmbFj2b5l5K5t90q2UpqxjOrlvZTqTU6yHsv8sCF8nF
LYc2tWQnr+gLAdeWRSoGnzJCD2cxJ+AzmBbr9+Ht5Q9Q8obrgLZA1Po7v9AyHg0l
y0oSkcAcl2v2bOT76rM7k3ZRPPwONc3TTlhsxx4XgILc7VO1Kw381T6TTSrsqXZ8
AqCka23yXNU81LYXisOtK65vIe8MGv5/p8bNjn2CW27WWlMxaSv/B4Mydg+0RDdG
VzWdd92DHR93txUY3/8KV+wEbpVKKIWapZ8FsVS0nTN/bMG0jU6uyvW2VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHlBQB7uQDj3bH4fJrmaMU2VU5D/MB8GA1UdIwQY
MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct
ZmViMGU1MTVjMDJjLzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj
LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsJXWdVH5
RGkwqZfBo2FV5GJ7zklRt6y/3sV4Cbwcam8UhIXeTq3iPiOyrIErng1KBeSkHCmF
ccjUzfAe0v46RlkRHyNvXflNFJx5zbAIxq1+BxtOE0hknhfFwzxxdS31qt4t3x/z
BrYeLJYfl/zr21YuXA5XDNHD99DxEYq1aZywBgyBpsawFrQ9TWsm0FYHitWgkbmB
92EDwaWVcFyzrDNPmq3ZUOLcL8H47AOvndVNuEe8SClgMIv683vE6syc842+e9qd
FoRnFnmZGcauB0jcauYxMANHyjS/xaq4Qu9zKmzwWf5awIWhqC4tESDmyrx477XE
gQOBdqFApGb2sg==
-----END CERTIFICATE-----
Generated at Wed May 13 09:11:01 2026 by rpki-client