Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
File:                     vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft (raw, json)
Hash identifier:          JxKav7NPda7B71Ef32u/Yn0WPwlEIqy10rTW1dy/RU8=
Subject key identifier:   F0:C2:50:2A:5E:DC:27:89:96:0C:28:88:6A:E4:89:98:87:59:E3:BE
Authority key identifier: BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
Certificate issuer:       /CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Certificate serial:       019F935B2F92BA3D5C2F9C3ECB548343B845
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 09:00:54 +0000
Manifest this update:     Fri 24 Jul 2026 09:00:54 +0000
Manifest next update:     Sat 25 Jul 2026 09:00:54 +0000
Files and hashes:         1: sMBS9OzucQLYRw4kO5MEHGEFHUU.roa (hash: tUsaSUdwGiplp3q5jaJRxYUheCxbRt91fnz6Ktk8t8A=)
                          2: vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl (hash: AqzJoWYETn7sTNHvgfrhrojQHp17lgInZZR2rgS4A1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:5b:2f:92:ba:3d:5c:2f:9c:3e:cb:54:83:43:b8:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
        Validity
            Not Before: Jul 24 09:00:54 2026 GMT
            Not After : Jul 25 09:00:54 2026 GMT
        Subject: CN=f0c2502a5edc2789960c28886ae489988759e3be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:00:c2:3d:9c:86:70:d9:1f:8f:cd:eb:f8:9f:
                    fd:15:a1:19:fe:22:e4:c9:a0:79:5d:20:30:fe:da:
                    df:52:aa:ad:d5:cc:57:ad:c8:ec:52:ff:bf:5d:d4:
                    8b:91:16:de:be:05:54:0a:9c:e0:8d:d8:e2:21:5a:
                    b2:a4:ef:9c:6e:55:0c:f4:83:b8:76:22:5c:a5:4b:
                    5f:47:ac:0f:af:a4:47:1d:2a:6f:62:ca:21:8b:52:
                    08:e5:78:9e:9b:37:84:cd:58:ff:e5:08:8e:b4:23:
                    d6:b4:c6:b9:05:88:e7:df:3c:89:9d:79:3f:9d:4c:
                    6d:3f:2e:e3:dd:2d:0a:07:28:74:21:2d:3e:ba:e4:
                    e7:ad:1c:3f:78:17:2d:dd:bb:2c:1f:0f:97:0a:87:
                    43:81:e7:c9:0e:f7:2f:f2:34:4e:53:cb:cf:8d:5d:
                    8f:d8:b7:c8:46:b9:77:b1:d4:ec:97:dd:8f:03:9b:
                    46:19:44:59:05:66:24:3d:c1:ca:55:0e:77:4d:5a:
                    c9:cd:ae:4c:67:ef:30:2d:57:fa:c9:06:1e:4b:fd:
                    78:06:32:fe:03:0b:82:a7:fb:22:55:80:4a:81:dc:
                    e0:3a:1f:bb:13:da:13:37:09:08:9c:51:a0:95:44:
                    09:8e:fd:7f:e1:44:67:2d:95:af:83:bb:98:21:dc:
                    e5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C2:50:2A:5E:DC:27:89:96:0C:28:88:6A:E4:89:98:87:59:E3:BE
            X509v3 Authority Key Identifier:
                keyid:BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:45:ff:a6:da:6e:c0:06:ad:81:01:70:cf:8f:54:ae:62:42:
         c0:76:c0:87:2d:c0:a5:7e:5d:cb:58:62:8d:2b:a6:5b:a0:a8:
         7d:f2:31:6a:65:f8:ff:01:d4:52:2e:85:0d:2c:c7:cf:a8:94:
         81:36:0e:ce:2f:6c:c0:07:1e:96:49:a9:b4:cd:87:93:7c:50:
         0d:40:9d:c9:6f:4a:6e:3b:96:6c:e2:49:ab:d8:24:ea:c6:35:
         2a:eb:b9:0c:96:24:1f:a0:09:06:0f:be:5b:c4:1a:9c:2a:ba:
         89:0b:4a:d0:a8:f7:7f:b0:8a:61:ec:3f:72:81:6e:44:48:9a:
         4f:79:1a:f4:a7:4e:c7:ca:55:6a:e7:b2:d7:70:7f:4e:b9:65:
         88:41:6d:b7:1d:4a:b4:d2:02:9d:7d:92:bd:bd:d0:0f:0c:31:
         8a:a6:94:1d:0b:e2:49:8a:19:69:c9:51:e6:4f:5c:e3:5f:f4:
         18:99:bd:17:a3:e1:d4:4b:ce:0a:14:7d:19:f3:9a:27:40:88:
         28:30:c2:b2:1e:ef:31:55:68:af:b4:5c:70:59:50:b2:0a:f9:
         00:1c:bc:e5:25:2b:3f:9b:f3:2b:8a:07:6d:74:b1:65:d7:cd:
         06:5c:4e:84:3c:02:45:1f:cd:93:60:f0:10:42:63:ba:76:26:
         18:8d:78:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:12:03 2026 by rpki-client