Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File:                     vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier:          eV5CnJ852IMyk95YTtrLhjtsfZbDjf1pAtuBqWDRAK4=
Subject key identifier:   28:35:57:E6:6C:A1:65:B3:47:AD:D9:85:6F:46:9A:32:2F:49:27:F2
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       019F8EA300638AA92579EE907D2873838AAC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number:          05C0
Signing time:             Thu 23 Jul 2026 11:01:14 +0000
Manifest this update:     Thu 23 Jul 2026 11:01:14 +0000
Manifest next update:     Fri 24 Jul 2026 11:01:14 +0000
Files and hashes:         1: j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (hash: U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=)
                          2: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: 191HbjFevH+H+hWTpjgsxmzoCXWAV07fOZ99e+XKHLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a3:00:63:8a:a9:25:79:ee:90:7d:28:73:83:8a:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Jul 23 11:01:14 2026 GMT
            Not After : Jul 24 11:01:14 2026 GMT
        Subject: CN=283557e66ca165b347add9856f469a322f4927f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:84:7b:f7:cf:03:ce:a3:87:38:e0:e8:14:
                    87:22:b4:c1:2d:d5:e9:9e:e5:d7:2e:82:b3:4f:6a:
                    8d:fd:c6:9a:d0:c2:20:ad:a2:ab:e2:3e:21:d8:3c:
                    ad:a3:53:32:4d:29:1e:2a:2f:a1:71:2b:19:85:5a:
                    62:0f:0c:43:59:3f:d3:42:07:0d:75:64:15:eb:ac:
                    88:d3:f6:3e:ce:8a:73:cb:0a:21:14:9c:c4:0f:21:
                    66:45:46:2f:fb:c1:29:6d:d2:50:67:1b:39:0d:c4:
                    4c:b4:a1:55:51:e3:d4:a0:f2:fc:49:b4:05:66:21:
                    bd:8c:62:d4:56:0a:79:6c:a1:19:67:91:53:83:f4:
                    5e:3c:fb:2e:92:a0:53:05:64:d9:21:f7:e7:5c:8f:
                    b5:60:b2:93:e5:69:41:3c:61:00:29:68:e3:42:07:
                    b2:eb:cc:13:1e:73:47:d4:ee:91:5b:c5:9b:9e:55:
                    52:11:c1:66:9c:8f:ca:43:8d:34:22:ab:55:aa:b3:
                    11:6e:d2:34:c8:e7:f9:ba:ab:43:6c:c5:0b:fc:61:
                    c5:65:7a:be:56:4f:39:75:82:8f:63:d1:7e:0a:75:
                    32:e9:52:65:a4:51:64:17:cf:9b:bc:7a:13:fb:1f:
                    19:3f:ac:b3:1c:ca:ab:5f:4f:96:f4:36:18:51:7a:
                    86:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:35:57:E6:6C:A1:65:B3:47:AD:D9:85:6F:46:9A:32:2F:49:27:F2
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:50:54:78:cb:f1:4e:a8:49:85:79:2a:13:02:47:fa:59:
         d2:6f:2c:fe:59:9b:31:f5:ed:f0:dc:d9:db:aa:c0:82:0c:22:
         08:92:36:f3:9f:78:47:97:8f:b4:1e:a2:74:51:3a:70:29:19:
         fa:e9:ff:3e:16:37:cc:e1:24:79:2e:3a:45:94:4b:3b:e9:84:
         f2:f1:2d:94:95:93:a6:3a:b6:87:ee:64:cb:e8:ee:ed:3f:1f:
         5d:d2:1c:26:8d:d9:4d:10:3c:8a:07:99:29:27:07:b8:de:ee:
         25:62:c7:6d:4e:be:89:73:73:22:18:27:5c:a3:d8:85:57:df:
         87:70:da:d0:aa:9e:f8:34:e8:20:38:b5:cf:4a:8e:5b:2d:22:
         da:6a:91:3c:df:92:fd:10:1e:0e:ba:0b:bd:3f:a4:d9:8c:41:
         49:9b:10:cc:0b:a9:f4:a0:a2:b1:23:05:01:1f:e4:63:39:9c:
         88:c7:ee:76:94:83:44:09:a1:ba:66:17:36:f4:87:e2:9d:9d:
         7d:4c:06:cb:f5:3a:7e:36:f4:a6:9d:ca:dd:a8:0e:fa:56:2f:
         45:e6:c1:29:fb:62:0f:98:e1:2d:30:1d:c9:cd:1c:ff:6c:87:
         ae:ea:0c:05:32:53:70:2e:70:d1:eb:f0:7b:aa:5c:f3:e0:89:
         b3:f0:66:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:03:54 2026 by rpki-client