Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          DdaDDX/cDcy6IBesHDxuov4AZct+GZqw0Obk1QJ8cc0=
Subject key identifier:   7B:99:B5:14:FA:06:C6:A2:57:C4:6C:0F:89:AA:C0:6F:0A:41:D2:3F
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       019E205ACBF7A7E447B59924577616C6C264
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 08:01:21 +0000
Manifest this update:     Wed 13 May 2026 08:01:21 +0000
Manifest next update:     Thu 14 May 2026 08:01:21 +0000
Files and hashes:         1: Zhqy7g8lJUOishUdKqXaWCvxzx4.roa (hash: UN8EUtXHVUb/yxu+HKPvBFBWS56nPQFqhJoUEVPPqMY=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: H9Q1BfbfC+hqoL6HlmlIsBsKurfE+Qrm+01KL+kWeCs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:5a:cb:f7:a7:e4:47:b5:99:24:57:76:16:c6:c2:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: May 13 08:01:21 2026 GMT
            Not After : May 14 08:01:21 2026 GMT
        Subject: CN=7b99b514fa06c6a257c46c0f89aac06f0a41d23f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:93:4e:5b:51:10:bd:e2:9c:da:ae:ec:90:
                    a4:3f:f5:55:e8:40:68:d1:bd:8a:ba:9b:5a:bc:b3:
                    ba:60:d3:40:8a:0c:4c:8a:81:bf:64:98:37:1b:ab:
                    0f:31:1e:48:43:41:75:fb:11:c8:45:3f:31:c2:7d:
                    63:cf:83:2e:b9:c1:d6:cc:38:bd:8f:c7:c5:0a:d7:
                    30:d0:8c:d7:e7:8d:95:45:ec:84:69:b0:0d:5d:cc:
                    18:d1:6f:7e:0a:ea:fe:07:f8:b7:cb:c7:58:df:3a:
                    7a:5c:b2:d5:68:ee:fc:89:e5:2c:2f:b9:a2:4b:6d:
                    98:5c:32:0a:32:dc:10:96:9e:e4:d4:1f:8b:da:24:
                    46:0e:85:e4:a7:c8:16:bf:17:1c:a9:4a:5d:35:eb:
                    25:77:b0:b8:05:27:53:cd:e7:53:d5:88:2d:98:cf:
                    8c:5f:4d:74:97:47:70:dd:ea:af:b6:9e:f8:d0:2a:
                    82:0a:a1:ed:ec:ec:ff:6b:99:5c:c5:ef:91:6f:f0:
                    0d:9d:be:f1:fa:e1:57:ea:ae:30:c8:de:58:a6:e5:
                    44:f0:78:dd:13:8e:35:fd:29:44:9c:99:7c:07:58:
                    fb:d0:18:ad:0f:b3:08:e0:d3:cc:10:03:39:0c:4a:
                    a8:fe:ef:4f:92:46:25:29:c1:a9:90:35:ce:69:2c:
                    46:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:99:B5:14:FA:06:C6:A2:57:C4:6C:0F:89:AA:C0:6F:0A:41:D2:3F
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:26:11:eb:93:77:47:78:70:b7:84:f8:33:5d:40:90:1f:8a:
         dd:97:c7:fd:23:4e:d9:7a:65:86:a8:7d:7d:32:8c:6d:cc:be:
         a0:7a:1f:53:6b:c1:2a:7a:50:12:7c:86:26:b5:0f:f9:13:61:
         f1:5b:37:1d:a2:33:74:c2:fc:4f:25:79:73:3a:e6:2e:a1:2b:
         a5:2a:24:7b:2d:ac:d3:2c:a7:e8:10:83:b8:e6:b5:1c:1d:aa:
         c0:b5:12:ca:ba:a6:28:b3:25:91:c8:bc:6a:ae:b0:a5:59:1a:
         cc:11:ee:75:0f:53:1b:37:9c:87:6b:ba:ca:6a:33:31:3f:0a:
         04:56:e1:06:14:24:d9:9b:e0:be:ee:6a:62:10:bf:3c:05:63:
         86:48:7d:8e:c0:8e:ed:7d:57:6e:8d:b8:fc:ea:15:35:1e:6b:
         73:59:ce:c8:73:b1:a3:f2:85:c2:91:6d:2b:c3:93:c2:56:bf:
         5e:dc:3f:3b:a9:03:cc:c0:5a:c7:d2:81:88:31:2f:df:f6:dc:
         68:51:64:41:78:47:ce:a6:06:9d:a1:53:81:6f:2a:df:a8:3b:
         31:56:83:69:a0:79:34:5b:74:fe:ce:3f:4d:28:07:08:c7:29:
         4b:dd:00:c6:72:f4:9e:b6:7c:2a:7d:39:1c:ee:09:b2:4c:f9:
         f8:cc:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:39 2026 by rpki-client