Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File:                     vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier:          RHvUljLnJhs7Z1UiXKrOq9xJBulkqp0Ye25DszhT2lI=
Subject key identifier:   A3:1D:CB:9A:A3:21:6F:55:83:8A:53:CE:23:F5:E4:E4:83:46:D0:D7
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer:       /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial:       019E1EA3B936319C68D0503EFFB8F31A7914
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number:          06BC
Signing time:             Wed 13 May 2026 00:01:46 +0000
Manifest this update:     Wed 13 May 2026 00:01:46 +0000
Manifest next update:     Thu 14 May 2026 00:01:46 +0000
Files and hashes:         1: LgX3EnuU8OfYYtzP7MkhOHIuG6k.roa (hash: tdx965ReIy+ujDSCSzvpO67kGikMuRqJQAFubursvgs=)
                          2: gzoeZ2AgO1ey7ZNcukJz3zjT1LY.roa (hash: argro5YsxjIunpkmHi4BZRWmPpTrNV/wF+jpyXPN3DM=)
                          3: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: DDVqPZRuUyhXNreH3eKIE9boxy55vYOhntYoHXsycCc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:b9:36:31:9c:68:d0:50:3e:ff:b8:f3:1a:79:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
        Validity
            Not Before: May 13 00:01:46 2026 GMT
            Not After : May 14 00:01:46 2026 GMT
        Subject: CN=a31dcb9aa3216f55838a53ce23f5e4e48346d0d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a4:33:3e:54:89:60:73:82:2d:b8:bf:7d:eb:
                    9c:00:a9:d4:b0:4b:92:1b:14:79:fe:70:33:10:46:
                    91:cd:c6:e4:0f:6e:e0:92:9d:29:47:bd:84:33:d1:
                    df:b5:54:60:96:77:0a:2a:b9:18:03:e3:bd:74:79:
                    5e:ee:ee:ac:6c:b3:99:01:27:91:af:92:6d:a4:1a:
                    96:6e:b6:50:2b:2f:60:f7:97:8c:18:52:9b:4c:5b:
                    0f:26:1f:49:93:6f:98:31:47:a3:22:9d:09:ce:25:
                    0a:e6:a5:66:70:9f:b4:5d:ed:ab:a8:c3:79:da:70:
                    18:b2:ff:88:04:21:f2:5a:a5:7a:6c:90:c0:0e:01:
                    4b:e7:a0:03:bf:77:06:f6:7e:42:0b:e2:96:2c:96:
                    2b:36:33:a6:c2:c6:54:a5:56:4f:98:87:fd:3c:18:
                    ae:b1:df:27:68:89:66:63:8f:8f:1d:6e:50:7e:4c:
                    80:d4:86:5e:dd:58:8b:79:a9:57:85:2c:72:99:c3:
                    3c:ce:01:3c:5c:66:d8:8c:af:1d:88:32:fe:fa:cb:
                    4b:ae:92:ce:16:d0:8c:47:ea:c8:1a:48:ce:63:7c:
                    69:04:c8:16:1d:86:c6:5f:88:6a:db:2c:b6:1c:3d:
                    43:d5:76:e4:c4:c9:30:11:a0:f3:07:04:8e:a0:d3:
                    6e:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:1D:CB:9A:A3:21:6F:55:83:8A:53:CE:23:F5:E4:E4:83:46:D0:D7
            X509v3 Authority Key Identifier:
                keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d7:0f:ca:63:82:9f:a2:bd:b4:34:04:9c:c0:fa:5c:d4:15:
         ce:15:17:ec:9f:86:94:28:d3:19:89:54:7e:dd:8a:ff:40:c9:
         04:3c:5d:8e:c2:2c:a1:0e:23:b3:fb:c1:ed:be:95:a2:49:09:
         7c:30:d5:3b:46:7e:9b:c3:b4:81:41:8d:22:ae:62:d6:27:8c:
         a6:90:ce:39:ce:df:2b:3e:c3:22:85:2a:60:ee:41:d9:aa:38:
         f5:17:10:2b:33:ca:8f:a4:3d:f1:47:c9:3e:8b:cd:b3:15:2b:
         f6:37:ea:6c:05:6c:9b:b2:17:3d:8d:10:c5:27:c5:33:c4:08:
         1a:62:ff:64:d0:3d:3f:db:91:df:67:c9:88:29:3c:45:f0:01:
         7b:73:4e:db:65:82:ec:b8:76:e1:0d:24:49:52:fc:09:45:10:
         4a:cf:a0:72:d0:38:5e:f0:de:3e:fe:92:a8:b4:24:b9:b3:c1:
         17:5d:3c:80:a2:61:96:e6:9f:12:8b:f5:55:74:a3:57:52:cf:
         cf:6a:0d:95:bc:73:da:bf:e4:28:da:9a:d2:93:cc:d2:6f:bf:
         47:31:33:55:75:e4:94:3b:32:21:13:fa:7e:84:8b:56:0b:a6:
         1c:7e:a7:58:83:21:06:49:b4:5e:60:8f:01:a8:e9:a2:e6:f0:
         2e:18:83:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:45:34 2026 by rpki-client