Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
File:                     vmWzDa10rHadS1syMS2o-oGrM9E.mft (raw, json)
Hash identifier:          pr4Tf1N43HNWiupRoU56WCmMmjdh50IiulGJvHVdJL8=
Subject key identifier:   5C:E7:28:73:03:4A:CD:5C:91:DE:08:3E:D7:34:8E:57:9A:B5:11:A8
Authority key identifier: BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1
Certificate issuer:       /CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
Certificate serial:       019E20FF2618F7CDB8B2C38A3494F2B690FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
Manifest number:          0E60
Signing time:             Wed 13 May 2026 11:00:52 +0000
Manifest this update:     Wed 13 May 2026 11:00:52 +0000
Manifest next update:     Thu 14 May 2026 11:00:52 +0000
Files and hashes:         1: t1JXKPULVgSgvQ0I80otAQ7Epzg.roa (hash: sx0p3fASYGJ0JSBWFt0pc+jsNHZgbTF+OTJo6DFYN9A=)
                          2: vmWzDa10rHadS1syMS2o-oGrM9E.crl (hash: AXTMlJ/kc7pnCuk0QkZ0mswRPv6F0hTHP0ZWty86KqQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 11:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:ff:26:18:f7:cd:b8:b2:c3:8a:34:94:f2:b6:90:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be65b30dad74ac769d4b5b32312da8fa81ab33d1
        Validity
            Not Before: May 13 11:00:52 2026 GMT
            Not After : May 14 11:00:52 2026 GMT
        Subject: CN=5ce72873034acd5c91de083ed7348e579ab511a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2f:a9:f1:e7:66:fd:04:25:90:62:e7:a9:dc:
                    f1:55:44:3f:28:22:eb:07:ff:bd:0c:1b:65:c5:82:
                    bb:3b:d8:d1:52:f5:8b:69:87:7f:b9:25:c9:9f:ed:
                    24:5d:40:6f:4b:42:63:59:57:7e:a0:60:35:36:1d:
                    21:5b:15:62:c7:6b:15:e9:47:8d:e7:e3:2f:9f:53:
                    66:c3:2a:b3:58:79:98:62:d2:9d:c1:52:e5:36:ef:
                    2d:88:99:b0:d4:b5:aa:81:37:5d:49:b8:af:6f:dd:
                    51:2e:e8:f4:6a:f7:f8:c2:67:32:fa:aa:84:55:43:
                    62:34:fa:2d:de:42:ca:ad:80:aa:c9:79:c6:7e:05:
                    f7:34:d1:26:9b:7b:63:1d:6d:d4:41:db:04:cd:5c:
                    0c:5b:d0:56:07:96:3b:6f:58:23:50:bb:ea:03:23:
                    a2:98:ba:91:ea:c0:1d:9b:3f:57:f7:ae:86:fd:9f:
                    a4:af:36:b7:a3:0e:34:f3:7a:71:79:fa:c9:d1:ed:
                    fb:9e:bf:b8:c9:4c:84:c1:9b:e7:86:7a:75:f6:51:
                    aa:68:79:6c:e4:5e:a5:c2:a5:99:f6:4d:a4:af:5a:
                    e7:6d:be:ec:85:4b:09:8d:07:01:d2:9a:d1:f7:26:
                    99:82:14:2c:38:0d:52:6e:17:9a:11:16:55:a2:59:
                    bf:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E7:28:73:03:4A:CD:5C:91:DE:08:3E:D7:34:8E:57:9A:B5:11:A8
            X509v3 Authority Key Identifier:
                keyid:BE:65:B3:0D:AD:74:AC:76:9D:4B:5B:32:31:2D:A8:FA:81:AB:33:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmWzDa10rHadS1syMS2o-oGrM9E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/66e032-ab6a-4d3a-a12b-510cfa455640/1/vmWzDa10rHadS1syMS2o-oGrM9E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:62:08:c9:7a:dd:78:6c:8c:04:65:be:66:59:cc:b6:77:5b:
         fe:c8:a2:ac:f0:6c:4a:56:a4:56:09:11:4f:0c:3b:16:40:50:
         c9:62:a6:ee:30:c0:93:16:36:20:e6:dd:3f:b0:e2:09:e5:a4:
         93:22:36:11:5f:ce:29:f8:48:1d:25:33:c3:c3:2d:e3:25:8e:
         18:0d:a8:9b:0f:00:ba:a6:09:e4:40:70:78:a5:db:2a:6a:1e:
         ba:26:b5:43:cb:02:4f:09:13:b5:4d:3c:88:1d:89:df:a5:97:
         4c:17:f6:c7:88:c6:39:70:dd:bd:b3:aa:90:b1:99:6a:3b:39:
         10:aa:c7:62:cf:71:d5:b9:1c:91:73:8e:b6:5b:2c:43:31:aa:
         c3:d1:6a:9f:97:01:d8:bd:5f:de:0b:2f:07:fe:a2:6d:0a:03:
         38:a4:2c:1c:d6:a5:67:bb:1b:29:3b:df:ca:da:60:89:d8:f4:
         9d:5b:9a:63:d7:7b:25:39:c4:81:67:0e:5f:d4:d5:ae:59:50:
         62:63:9e:c2:00:d1:59:36:0a:94:4a:12:30:2f:5c:c6:cd:bd:
         81:85:ee:ae:9e:42:b8:ae:ce:64:01:ec:6e:a0:21:37:2d:e4:
         02:f0:2e:e3:28:0c:f2:59:d1:dc:f4:5b:40:aa:e2:9a:6c:52:
         34:c7:a8:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:54:09 2026 by rpki-client