Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File:                     VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier:          P6qXAnET6oTOzY7IUC8s8rfJMkKLxdCqedmYw69+Kzo=
Subject key identifier:   95:E3:D2:D4:30:BB:CE:0A:83:98:58:81:DD:FF:8E:8C:08:E6:A8:C7
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer:       /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial:       019F951263415CFDC0EB4451B1D04B58DB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number:          08EC
Signing time:             Fri 24 Jul 2026 17:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 17:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 17:00:37 +0000
Files and hashes:         1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: G7jwOK6Um//qqwwVIod4S7GLb5dgMe9KgmZs33bbkxE=)
                          2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:12:63:41:5c:fd:c0:eb:44:51:b1:d0:4b:58:db:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
        Validity
            Not Before: Jul 24 17:00:37 2026 GMT
            Not After : Jul 25 17:00:37 2026 GMT
        Subject: CN=95e3d2d430bbce0a83985881ddff8e8c08e6a8c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5d:2a:39:42:24:b4:66:71:11:6a:04:56:b9:
                    40:f9:6a:2e:c2:73:a4:c2:ba:0d:4b:07:ed:6a:9c:
                    cd:13:47:f3:03:50:30:35:cd:41:01:1a:99:65:a2:
                    16:d2:cb:b2:b3:15:e2:50:03:f2:70:51:67:bf:12:
                    2e:82:1a:7f:80:72:50:b8:78:19:4e:6c:f7:d7:1d:
                    bd:04:5d:f8:46:48:2b:17:b9:f7:6e:9a:60:2b:d9:
                    d4:35:b8:a9:e2:4f:5e:9a:30:64:e0:44:87:08:d6:
                    19:3c:a1:9d:c5:df:15:74:84:51:0b:76:9a:00:52:
                    3e:22:aa:5a:4a:65:4f:a1:e8:40:91:8f:d3:c9:2c:
                    5d:f8:bd:4d:5c:a0:4b:18:cd:8a:8a:72:ae:24:45:
                    21:16:ef:6b:fb:3e:3d:9d:86:13:05:af:7d:f9:25:
                    da:92:bf:41:eb:ca:df:52:fd:3a:99:ed:b6:fb:da:
                    fb:51:18:9b:6f:f8:e2:e9:ce:d3:fc:0c:24:b9:80:
                    f1:1f:ca:32:cb:b2:25:03:9b:e9:77:d4:3f:2b:d2:
                    9c:86:9e:07:ce:84:12:ba:ec:00:b8:83:80:43:52:
                    09:3d:7d:4d:70:ba:41:50:e0:fd:27:e2:e8:18:af:
                    78:2b:88:d3:74:ee:f8:2b:16:76:19:04:86:fe:6a:
                    00:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:E3:D2:D4:30:BB:CE:0A:83:98:58:81:DD:FF:8E:8C:08:E6:A8:C7
            X509v3 Authority Key Identifier:
                keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:f8:46:94:da:59:ee:9f:5f:ec:2f:88:d0:59:4e:9a:ad:66:
         9b:50:da:52:d7:7d:ec:63:90:c1:89:3b:37:a9:aa:23:4d:0c:
         f8:1c:d6:0e:9a:b2:fe:e1:de:20:47:cc:aa:20:b8:c3:20:38:
         53:ba:1b:02:44:0b:cb:a2:f3:e6:85:24:e9:26:78:2f:84:eb:
         6b:87:56:6d:47:4d:35:c6:0a:e4:70:8d:27:b7:5c:0c:5f:98:
         09:26:c6:36:66:05:ec:bf:e4:42:3e:3a:7d:16:ce:55:a9:17:
         dd:10:0a:a0:ea:c3:ec:3a:e1:9a:5e:c8:30:93:1f:be:a6:5c:
         2d:5f:61:bf:53:cc:de:b0:55:1d:f6:54:c6:26:21:ec:2e:83:
         cb:a1:b2:8c:92:8a:ae:9b:d5:6a:3d:06:9d:23:d6:02:90:5e:
         52:81:8f:f2:8a:ee:fa:12:7e:b9:39:db:7f:49:80:aa:ae:1b:
         47:52:a9:01:b2:05:b5:f1:f3:f7:68:fa:4a:2a:a0:1b:8c:a8:
         40:c3:c0:7a:d1:b6:94:16:22:53:84:3b:8d:07:02:f0:60:ec:
         26:e0:05:e2:20:b7:d1:ee:19:d2:38:40:7f:7f:d2:6e:39:2b:
         6e:68:07:32:b8:73:ab:ef:39:f0:cb:d5:2d:d5:56:ce:bf:3d:
         64:29:5b:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:20:44 2026 by rpki-client