Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File:                     vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier:          eg09wTAUKgguVKQ7fl07NFQBxrAGP7tUOe5G01CYPx8=
Subject key identifier:   69:82:FE:03:85:1C:94:C5:31:6C:A0:C9:A0:2F:66:13:28:D9:61:89
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer:       /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial:       019E1EA3CDA28049431DA1EFF46D7E8B9DDC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number:          1886
Signing time:             Wed 13 May 2026 00:01:51 +0000
Manifest this update:     Wed 13 May 2026 00:01:51 +0000
Manifest next update:     Thu 14 May 2026 00:01:51 +0000
Files and hashes:         1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
                          2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: AbHd/+YMUGx5tbo3y5ab43JRfWPTEiCexE31lY60CwU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:cd:a2:80:49:43:1d:a1:ef:f4:6d:7e:8b:9d:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
        Validity
            Not Before: May 13 00:01:51 2026 GMT
            Not After : May 14 00:01:51 2026 GMT
        Subject: CN=6982fe03851c94c5316ca0c9a02f661328d96189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:1e:07:44:ce:22:e4:33:d4:58:ee:20:84:dd:
                    75:1a:db:33:23:fe:69:e8:5d:f2:8e:2a:65:08:2a:
                    8c:67:2c:9f:66:91:de:78:0c:b8:fe:15:a5:55:a7:
                    bc:11:4f:f7:eb:00:b7:ad:01:6c:f1:ff:40:fc:98:
                    4a:cc:40:78:06:f1:df:7a:cb:e9:fb:70:fd:b6:25:
                    36:7b:88:09:cd:14:04:d7:e0:8f:1c:5c:b5:7c:6a:
                    35:84:ed:c2:34:db:aa:f2:a2:70:c5:83:91:43:8c:
                    10:cd:9b:a9:8e:c3:15:4f:c6:82:09:60:ad:70:d1:
                    46:eb:a8:8f:ff:2a:19:63:8b:a4:8c:48:dd:89:0f:
                    81:76:b4:f6:9f:7b:92:af:36:51:38:ad:05:70:29:
                    dd:5c:50:49:30:44:8b:d0:5f:06:22:1b:cd:56:99:
                    c3:09:bd:ca:52:43:d4:72:75:e5:74:47:bf:0a:fb:
                    75:0a:bb:54:fd:67:fc:e7:bc:84:12:bf:ab:2b:d2:
                    ae:06:56:e6:02:c9:34:a7:4d:f9:d3:06:fe:fd:e6:
                    0c:57:e4:9b:45:c0:82:1b:d9:82:96:e0:b6:a9:53:
                    38:47:65:bd:83:3b:d5:67:5e:59:e9:10:9e:24:a9:
                    04:81:70:ab:ec:98:0b:7d:e6:f9:8b:c8:4d:c3:e5:
                    32:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:82:FE:03:85:1C:94:C5:31:6C:A0:C9:A0:2F:66:13:28:D9:61:89
            X509v3 Authority Key Identifier:
                keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:00:78:75:fa:b5:37:01:78:3e:96:25:43:b7:44:ea:4d:
         9c:ef:8d:7e:a2:3d:38:5f:1a:a2:dc:e8:8e:fd:c4:14:6b:ae:
         e8:fa:3a:9b:2a:77:c7:71:65:cd:bf:77:9f:6e:77:4a:60:91:
         6d:89:41:5b:c0:3f:16:c8:ba:d8:7f:ba:3d:8d:33:c7:43:61:
         c2:be:c0:5e:98:6a:86:58:1e:c2:84:90:45:c5:75:ba:83:06:
         4b:d6:58:3d:e0:a5:78:85:f9:bd:00:93:13:74:d6:be:68:89:
         ca:0a:25:d6:df:57:31:ca:03:35:fa:8d:a3:af:72:f6:0d:08:
         6a:3e:49:4c:7d:c0:48:47:9a:24:10:ce:65:10:08:43:4b:ac:
         5d:bf:0b:c4:92:a7:f6:2f:9c:ce:de:94:66:c0:8b:bf:6e:bd:
         79:28:f4:cd:23:ba:76:62:f4:64:85:64:55:b1:68:5d:34:91:
         00:30:22:93:06:77:46:4a:7e:d6:3f:0a:5a:8d:30:b8:60:0b:
         6d:32:ac:65:71:ec:8d:c1:bd:4a:79:73:e3:77:be:cc:a3:1c:
         12:7b:77:72:5f:0b:d5:60:f1:27:77:28:bd:c8:d1:00:1b:eb:
         4e:0a:2b:ba:cb:f2:d4:5b:ca:f5:46:af:41:3d:07:70:d7:92:
         31:f6:d0:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:24 2026 by rpki-client