Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          dsLCf4sI6ILdeXZmsj2HIIgq2sooJhPpWSvhNG17tN8=
Subject key identifier:   7B:1E:1F:34:84:76:CC:BC:C6:4C:0A:4D:98:72:FC:16:0D:C7:D5:8A
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       019E1FB55EDE93E7FD9EEE41177A28365C8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          1907
Signing time:             Wed 13 May 2026 05:00:40 +0000
Manifest this update:     Wed 13 May 2026 05:00:40 +0000
Manifest next update:     Thu 14 May 2026 05:00:40 +0000
Files and hashes:         1: CnLU5sdd9_xh2OEtCZx6z-2dgTY.roa (hash: n31FwsvZCRP5aWFMhgbGP9qd5w+wCRJhNJerptRYayU=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: ZRXshRxrnOQxHXR5OauCwONqbocSkN7w1xIm7IQL4qU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:5e:de:93:e7:fd:9e:ee:41:17:7a:28:36:5c:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: May 13 05:00:40 2026 GMT
            Not After : May 14 05:00:40 2026 GMT
        Subject: CN=7b1e1f348476ccbcc64c0a4d9872fc160dc7d58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:24:a8:cc:df:f2:4c:8a:7b:04:f0:34:67:25:
                    50:ee:79:85:bf:8a:7e:60:58:28:e9:c4:3b:1f:c5:
                    d6:34:e7:f6:46:30:09:3b:de:c6:e7:de:0d:22:98:
                    b2:41:a4:75:b0:a9:19:6d:ce:10:bf:20:77:eb:0a:
                    48:cf:7b:c8:32:77:e8:0c:53:de:b2:f9:e8:46:38:
                    9a:70:71:94:d9:e3:20:9d:a5:04:cf:3e:49:8b:9b:
                    e5:cd:00:39:6f:19:1a:3a:a5:99:f9:d9:d0:c0:d1:
                    f2:36:59:33:ae:f7:1a:2a:f0:74:01:a8:ab:ca:22:
                    9d:3f:88:5b:df:39:1a:fe:5f:fb:c2:bf:7b:bc:8d:
                    5a:00:bb:74:9d:ed:1c:40:64:75:1a:0a:9b:cf:9d:
                    8b:b1:fe:36:50:44:99:84:75:3f:01:a9:78:2b:fb:
                    fa:af:d1:de:2f:e7:92:3c:c9:62:dc:d9:32:b3:8a:
                    87:57:37:63:66:cb:1a:3a:89:98:c4:84:ad:b0:f5:
                    a7:e8:0d:7c:25:cb:f6:c7:df:17:96:0d:85:57:64:
                    69:1f:08:70:3f:37:63:17:89:33:9e:c4:3a:f9:e7:
                    f0:c1:91:bb:9f:8b:5e:49:51:4e:99:7b:70:40:b4:
                    03:11:6d:28:0b:e4:1a:66:ad:a1:b3:e7:c4:5b:b3:
                    44:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1E:1F:34:84:76:CC:BC:C6:4C:0A:4D:98:72:FC:16:0D:C7:D5:8A
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:5e:fb:d3:c5:fb:e8:bd:d5:fb:18:04:80:fd:c4:0b:78:1d:
         32:02:17:ec:e9:4f:bb:44:e9:14:38:dc:c1:ef:2a:27:a5:2e:
         1a:96:3f:09:b9:e0:b5:76:51:bf:cf:76:d8:32:a0:4f:c2:d0:
         c7:8b:32:21:18:2c:37:d1:bc:02:3e:ac:54:41:fb:14:20:8c:
         79:11:84:9b:31:02:4b:d7:01:ab:3e:a8:ce:bb:3a:c0:bf:9b:
         f9:59:a5:49:1a:88:84:39:1a:c6:ed:f4:e4:d5:3e:22:72:1a:
         86:6c:47:78:89:4a:62:68:b1:a3:31:a9:ee:19:fd:2c:06:c9:
         db:03:28:79:5e:f4:fd:21:57:e5:e9:bd:6a:b3:60:eb:03:7f:
         b2:db:22:59:b6:21:34:48:0f:a9:c1:69:a0:0a:9d:b0:98:66:
         be:58:36:b7:61:16:8d:ab:70:3b:5a:00:fc:c3:eb:5d:f9:f6:
         46:22:83:17:cd:cd:bd:27:77:c2:2a:1e:3d:7a:75:07:96:69:
         55:95:44:eb:ab:4c:f3:3f:42:02:c0:4b:66:5a:be:2e:02:1b:
         69:20:1c:fc:69:e9:7a:68:84:ab:c0:05:42:76:d9:18:16:b3:
         fb:68:09:20:b7:5e:a0:79:96:05:0a:b3:a1:1c:0c:92:71:15:
         6c:f0:be:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:49 2026 by rpki-client