Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
File:                     V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft (raw, json)
Hash identifier:          MYYsW8j0AB/ZLG+yE2UleGi1az5FlMNskAWFEoUF8HY=
Subject key identifier:   23:18:95:CE:17:82:08:4A:60:6C:5D:CB:F6:EE:44:F6:46:54:79:45
Authority key identifier: 57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26
Certificate issuer:       /CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
Certificate serial:       019E1F10AC75C75D300492F055BC10B31380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
Manifest number:          12D9
Signing time:             Wed 13 May 2026 02:00:46 +0000
Manifest this update:     Wed 13 May 2026 02:00:46 +0000
Manifest next update:     Thu 14 May 2026 02:00:46 +0000
Files and hashes:         1: V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl (hash: g9RWKhGeRNrVlHI3jgg0hTgpi4EfNTep5vAMwcEgkQk=)
                          2: w56TnwX4cr4ATnThatgYvBivtVM.roa (hash: dXWFj+tUei1h+c7PDPVm46TSYPdBUygpPg5c6Zw98TI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:ac:75:c7:5d:30:04:92:f0:55:bc:10:b3:13:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57fbb6eb2cec9a9b7bb81a3b160c1aab990e4826
        Validity
            Not Before: May 13 02:00:46 2026 GMT
            Not After : May 14 02:00:46 2026 GMT
        Subject: CN=231895ce1782084a606c5dcbf6ee44f646547945
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:83:37:9f:06:65:bb:b4:61:b5:4f:26:07:4e:
                    d8:34:7c:6c:ff:dc:0e:df:1e:87:66:80:4d:32:5a:
                    77:50:91:83:f2:40:60:bb:0f:1b:1d:3f:e6:59:b1:
                    ec:cd:21:67:53:eb:a4:15:8a:e5:cd:ff:a8:76:28:
                    b7:06:7a:b8:65:d7:df:0d:e7:d9:48:43:20:76:ee:
                    e8:7b:28:9c:7e:cb:f5:0f:61:74:45:d8:97:74:3e:
                    4c:7a:c2:66:61:d4:36:3c:bf:31:a9:af:a6:8c:b7:
                    8a:5b:7f:c5:6a:f4:77:fe:1f:18:31:cf:4f:6e:53:
                    ff:5e:22:22:32:31:eb:ef:90:e2:da:cd:3c:85:44:
                    d8:71:1d:e6:40:35:9d:27:e8:d0:c4:5d:20:fb:af:
                    4c:1f:5e:55:a9:f6:87:83:08:2d:51:18:16:b6:2e:
                    10:b8:dc:a5:cd:c1:82:a6:e3:5d:9e:5d:71:67:04:
                    2f:85:67:47:d9:30:34:5d:cd:88:33:a3:e1:14:ff:
                    b0:58:70:e4:94:b8:17:79:b5:cc:0f:b3:4a:c7:72:
                    dd:48:23:2e:07:8c:a9:18:63:6f:4a:f7:15:a3:31:
                    6a:a8:72:93:03:c4:0e:09:a9:d3:dd:f7:f6:4c:3d:
                    14:13:b8:5e:b5:11:e6:79:f9:73:d5:b3:da:79:1f:
                    74:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:18:95:CE:17:82:08:4A:60:6C:5D:CB:F6:EE:44:F6:46:54:79:45
            X509v3 Authority Key Identifier:
                keyid:57:FB:B6:EB:2C:EC:9A:9B:7B:B8:1A:3B:16:0C:1A:AB:99:0E:48:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_u26yzsmpt7uBo7Fgwaq5kOSCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/5888ff-3b8e-4556-adf4-4d9ecfce0dbc/1/V_u26yzsmpt7uBo7Fgwaq5kOSCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:9b:bf:89:f2:ef:22:cc:86:06:d1:4b:e8:c7:be:43:56:b6:
         11:0f:db:41:54:4d:67:52:37:ea:8c:90:e1:19:be:ee:8b:ba:
         08:70:4d:ff:8f:54:01:79:13:37:70:67:de:dc:f3:f6:a7:7e:
         84:90:e8:f6:41:15:ae:b9:d1:4a:cd:f8:8d:32:04:7b:8c:be:
         59:e3:2e:7c:da:23:b0:35:24:e4:9f:b1:74:8e:02:c5:f8:fb:
         4f:ce:eb:0f:24:ac:d0:47:ed:82:fa:59:aa:44:ed:64:03:b1:
         b9:45:16:c4:28:37:2e:42:52:3d:df:5e:28:f1:b0:b1:93:cb:
         f1:c6:a5:9a:a3:06:e9:fe:58:d5:7f:bd:5e:c4:25:93:3a:32:
         65:08:d3:b2:0e:f7:6b:35:80:de:b1:47:13:31:27:98:c4:36:
         7a:b5:04:7d:a3:7c:c9:7b:3a:37:bb:1c:3a:d7:a9:95:66:3f:
         7b:bf:74:7e:c4:d7:f6:38:cd:4f:d3:8b:92:64:ab:25:c0:82:
         fb:ca:f2:74:e3:80:dd:e4:b0:c3:8d:28:98:07:bc:c4:ac:2a:
         c4:88:87:89:60:e2:4f:65:33:2c:26:c2:f0:c2:ef:3f:5a:48:
         be:20:b2:7f:10:0a:58:0f:e4:a6:63:e6:00:5e:d5:12:9d:92:
         9e:8c:39:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:18 2026 by rpki-client