Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
File:                     vY-cA-dX89tRTKONFa2kUfoulhU.mft (raw, json)
Hash identifier:          OAgU4kmHWMMT7VDwKZU2L8WfhOnLRdoH3DCb+o6TsE4=
Subject key identifier:   60:F6:99:28:06:0C:BE:A5:93:3D:C1:38:4E:79:24:E6:8E:98:79:68
Authority key identifier: BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15
Certificate issuer:       /CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
Certificate serial:       019E1FB594B9B08E5F8857F0149EFDA7FCB9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
Manifest number:          0C7D
Signing time:             Wed 13 May 2026 05:00:54 +0000
Manifest this update:     Wed 13 May 2026 05:00:54 +0000
Manifest next update:     Thu 14 May 2026 05:00:54 +0000
Files and hashes:         1: 5DhZq_rBdW3po_ZrXdjJ55GpFqA.roa (hash: QKy+PuVbWKIlnbGB9uOk/snfAnZg1+WrdQuHuNMld0k=)
                          2: SDLTrQjkiw192HmXLpffrpBlDcs.roa (hash: BhXmkSXu3As8CiQ1UvxuCgeN4cbmIJZN7UIHsihXBW8=)
                          3: eJqsemrX4r9IuhcHQVX7WZ3vipk.roa (hash: EYEupg+CuEQXFJeFdsXHjk15qYcFEa8u1+yv6+YuTRw=)
                          4: vY-cA-dX89tRTKONFa2kUfoulhU.crl (hash: 9ZN7+5Jj3NSP17ktI6CMy+S3+pbnZHqEmECIc4WAlzY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:b5:94:b9:b0:8e:5f:88:57:f0:14:9e:fd:a7:fc:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd8f9c03e757f3db514ca38d15ada451fa2e9615
        Validity
            Not Before: May 13 05:00:54 2026 GMT
            Not After : May 14 05:00:54 2026 GMT
        Subject: CN=60f69928060cbea5933dc1384e7924e68e987968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:69:05:2b:82:69:1a:6b:ef:52:ca:ee:ff:ed:
                    4d:6b:7b:cb:4e:2b:5d:7e:b8:c8:67:f2:08:eb:0c:
                    3e:ea:01:3d:6b:b2:ff:f2:d0:00:54:c4:50:9c:af:
                    89:e1:14:0e:96:cb:d5:14:95:3a:16:85:9e:af:c4:
                    49:f0:d9:48:ab:09:43:ec:d2:f0:f7:49:1b:0b:af:
                    65:be:04:a3:c5:68:f1:45:e2:f3:bd:c4:05:77:78:
                    b0:a3:e7:d7:ba:af:e3:9c:2a:23:1e:f9:4d:85:28:
                    a9:51:31:f2:7b:09:4c:43:90:cd:b8:af:bf:35:bc:
                    f2:34:2c:78:4b:b8:06:39:29:9d:26:de:aa:43:7d:
                    ba:81:7a:a0:8c:b2:d3:cb:34:51:7b:b6:2a:1c:70:
                    c6:44:65:07:3a:cb:ef:be:03:01:f8:32:1f:5f:4f:
                    2a:cc:f8:e7:9d:f3:ac:37:3b:f6:0f:a7:08:1c:30:
                    17:99:b2:d7:66:60:90:a8:93:12:6e:fc:cf:86:8c:
                    12:f4:1e:2a:69:89:9b:8f:13:37:3f:21:fb:f3:aa:
                    83:11:cf:d5:b8:1a:e7:da:8a:f7:f9:e4:67:26:2c:
                    c0:9c:90:30:42:27:49:1c:3b:eb:29:23:70:71:34:
                    3f:e8:fa:c4:f9:db:62:76:c4:15:cb:15:b6:e4:4e:
                    c9:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F6:99:28:06:0C:BE:A5:93:3D:C1:38:4E:79:24:E6:8E:98:79:68
            X509v3 Authority Key Identifier:
                keyid:BD:8F:9C:03:E7:57:F3:DB:51:4C:A3:8D:15:AD:A4:51:FA:2E:96:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vY-cA-dX89tRTKONFa2kUfoulhU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/b83e47-bc04-492d-9a07-ecdd8174007a/1/vY-cA-dX89tRTKONFa2kUfoulhU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:7a:3c:22:a4:56:9c:b7:2c:31:6c:60:8a:94:3e:7c:49:bf:
         b2:b6:25:ac:4a:a3:af:1d:35:af:04:04:65:0b:ab:3b:84:cd:
         48:e3:05:b8:36:6d:64:6b:c4:bb:72:63:b7:dc:91:90:a1:0a:
         f9:d6:a5:86:8e:84:84:b5:3b:11:ad:db:cb:d2:55:33:07:b0:
         9f:36:9e:fc:37:8c:ad:a6:0f:91:cd:0b:35:80:37:d1:05:71:
         52:47:5a:82:3d:7d:09:32:3b:60:7f:31:4d:35:90:0c:d2:a8:
         0b:50:b3:92:ec:f5:c7:25:0c:2a:b7:ab:f0:08:30:9a:21:b7:
         c9:99:22:e8:07:b2:97:21:00:91:8c:dc:1f:e7:8b:b5:75:80:
         f3:2c:cf:6a:41:51:af:d1:88:0d:83:b9:0f:7e:51:0a:c1:5b:
         e8:8b:bd:5f:5a:d3:b9:6f:6e:e9:07:95:10:e4:1f:a5:c0:76:
         91:50:bc:91:6b:7f:c4:2a:f7:56:da:a9:1d:cb:4e:54:15:74:
         6e:89:d5:00:05:64:c1:a6:f7:05:b0:80:ab:dd:2e:66:42:80:
         83:e7:03:30:d4:71:be:21:3a:ec:b6:cf:0d:e8:c8:1e:28:61:
         f9:66:99:75:0e:63:36:93:d5:e7:a1:26:1a:ca:63:9b:86:d5:
         e1:ba:df:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:20:50 2026 by rpki-client