Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          vh0dSIM8gUCQF1GgeGKOtfScFtYUk1YJSgjWpFl70Pc=
Subject key identifier:   49:2C:27:F2:B8:58:AF:A1:B7:95:8A:27:32:EC:4A:6A:1F:B3:8A:26
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       019E1F7E7DAF709A0E7276FBA0DA8A977D14
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1898
Signing time:             Wed 13 May 2026 04:00:43 +0000
Manifest this update:     Wed 13 May 2026 04:00:43 +0000
Manifest next update:     Thu 14 May 2026 04:00:43 +0000
Files and hashes:         1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: i1HGJ0/uNGZQfrexPq/DlXfh9ZLkuceJGmQNzUcgB9Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7e:7d:af:70:9a:0e:72:76:fb:a0:da:8a:97:7d:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: May 13 04:00:43 2026 GMT
            Not After : May 14 04:00:43 2026 GMT
        Subject: CN=492c27f2b858afa1b7958a2732ec4a6a1fb38a26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:bb:10:06:5f:cb:a6:3c:cb:d3:d7:ef:8e:e7:
                    c7:b1:cd:ea:58:c9:50:c7:96:dd:82:2f:28:58:54:
                    0a:11:7f:0b:6b:52:e2:7b:2f:05:46:95:9f:b6:11:
                    b3:2f:78:e3:43:fc:67:f8:cb:9d:95:e2:f3:41:8b:
                    6e:76:d9:fb:ae:34:bb:b2:31:d0:33:fa:e3:9b:a2:
                    b0:50:2d:8b:3d:a0:c1:2c:c6:e8:04:3d:0c:0c:4c:
                    70:1a:e6:80:ea:96:bb:18:0f:c7:1c:de:c3:50:c9:
                    b8:a5:49:2c:0b:90:fc:68:75:96:52:67:b6:52:bd:
                    e0:e8:c7:8c:50:ee:ec:6d:64:53:71:e2:30:6d:52:
                    1e:9f:97:20:e9:bf:9e:df:0d:52:7a:cc:b2:36:d8:
                    30:32:d2:b1:f8:65:93:43:ff:1d:89:b0:25:ac:99:
                    2b:f5:db:2a:36:2d:f5:7e:8a:77:ba:ec:a7:ee:e2:
                    8c:a3:4b:5b:56:37:85:b0:ab:c5:2b:f4:f5:31:e4:
                    11:2b:3f:ee:87:60:32:80:c9:ca:ef:b4:79:74:de:
                    1b:78:b2:cb:ab:3d:c7:c8:5b:a2:72:fd:6f:0f:9d:
                    ce:81:78:c7:b3:9e:bf:f6:4c:7b:64:09:e9:65:06:
                    de:4d:ed:ae:8f:92:d9:64:49:6c:bb:14:4a:75:08:
                    0e:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2C:27:F2:B8:58:AF:A1:B7:95:8A:27:32:EC:4A:6A:1F:B3:8A:26
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:07:67:0a:da:ab:7d:0e:6a:94:3b:bc:8f:d5:ca:d2:28:34:
         1e:0d:ef:99:f8:62:d0:85:57:1f:cb:ac:3d:25:89:85:0f:cc:
         a1:98:82:1a:64:9f:da:45:b5:5a:76:11:64:07:f1:da:dd:7f:
         c2:70:1c:6e:e9:38:9f:5f:d9:d6:9f:e5:9a:c8:25:cb:94:79:
         0e:ba:17:ac:6a:d8:f7:c8:ef:66:92:9a:83:46:0c:90:24:3a:
         fa:7a:11:b2:2f:89:ba:d1:45:ff:f7:da:c3:2d:6f:39:81:7d:
         3b:34:9d:2b:c8:f0:b8:98:34:da:a8:bb:96:02:ae:1d:05:f3:
         f6:ff:83:34:46:9a:59:35:4d:0a:38:4d:9f:0e:f8:e4:ea:f1:
         dd:dc:0d:28:66:f1:6f:e2:53:f7:0d:7d:ea:fd:55:e4:5c:b4:
         76:84:96:52:f9:89:0e:15:70:3c:54:de:7e:0c:cf:62:58:98:
         df:05:f9:74:ea:2f:79:bb:c3:ab:9f:dd:fc:79:83:20:da:c1:
         a4:bb:74:6a:62:ba:de:c5:51:19:a8:5a:58:5f:1d:92:fa:0b:
         7b:81:87:06:c7:d9:92:1e:a5:7f:f0:f6:d0:f0:13:45:04:3d:
         66:a4:fd:b3:4b:84:a0:b6:4c:77:52:7d:96:2f:c4:82:a0:c7:
         54:18:25:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:47:52 2026 by rpki-client