Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File:                     vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier:          DrHk9/TOuw/QuVclPVsdtotCXSw6MSgZRfk2fAA9W9g=
Subject key identifier:   2B:A5:26:F0:25:78:84:BE:BA:3B:D2:5C:47:99:8A:06:04:37:6B:08
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer:       /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial:       019F8FEBFB50DDE0029E95EF45C3F5F25112
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number:          19CA
Signing time:             Thu 23 Jul 2026 17:00:34 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:34 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:34 +0000
Files and hashes:         1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
                          2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
                          3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: Mez/EFIo1KweN3noMmpYVpu8+BktHKCYWVwJgj4tWbI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:fb:50:dd:e0:02:9e:95:ef:45:c3:f5:f2:51:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
        Validity
            Not Before: Jul 23 17:00:34 2026 GMT
            Not After : Jul 24 17:00:34 2026 GMT
        Subject: CN=2ba526f0257884beba3bd25c47998a0604376b08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:be:b2:cc:f4:e4:83:80:81:13:dc:31:81:f5:
                    62:0c:70:85:9e:d6:48:8e:ee:df:38:e9:df:29:50:
                    32:2b:e4:6f:42:1b:19:97:57:22:06:93:da:7e:2b:
                    89:f8:ea:07:99:7c:0a:ff:2c:85:51:5b:6b:3e:91:
                    1e:21:f0:05:14:fd:43:b6:ab:63:33:1f:f2:68:6c:
                    05:85:59:37:70:b4:58:1f:40:d4:0e:05:b6:f9:a9:
                    de:a7:62:24:4c:a5:ba:29:88:de:b1:6f:83:ad:ec:
                    c0:12:48:cd:6d:8c:4c:56:b4:64:26:9b:b0:e2:72:
                    e8:ae:4a:05:77:68:d2:32:85:9e:f2:5d:1e:cf:c0:
                    22:d6:fb:bb:d5:28:e2:87:d3:99:bf:7b:01:69:b9:
                    b0:2f:ce:8e:f3:b5:49:bd:f8:e1:18:38:e2:4b:b8:
                    df:26:dc:75:8d:64:d2:e5:2a:47:7d:d1:1f:66:6e:
                    b4:b9:e9:9c:99:66:f8:c9:6d:8f:58:3c:23:c3:6b:
                    b4:3d:13:50:48:f9:8c:73:50:c9:aa:d5:bb:97:20:
                    c1:3d:65:4f:c9:96:01:64:2f:0a:7a:fd:7e:56:6f:
                    e6:18:f2:8d:2e:53:df:2b:3c:93:f1:e0:e7:36:ff:
                    66:d7:5b:b2:13:b0:04:4c:ce:cd:bf:90:73:32:57:
                    b9:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A5:26:F0:25:78:84:BE:BA:3B:D2:5C:47:99:8A:06:04:37:6B:08
            X509v3 Authority Key Identifier:
                keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:43:a0:ff:cf:27:23:fc:72:6a:37:a8:48:f6:a2:2e:90:75:
         27:95:9c:4f:90:9b:02:81:77:6b:a8:a0:cf:1a:fb:92:e1:ac:
         57:33:08:f9:08:05:7b:d5:55:c8:58:48:3d:74:77:82:66:fe:
         1d:47:61:b6:9b:04:9f:6c:cd:eb:91:f3:61:12:86:fe:e6:33:
         71:bd:f7:a6:37:81:96:fd:a9:4b:72:59:30:85:96:42:8a:d8:
         a1:75:90:54:7e:1a:eb:99:b6:43:eb:e7:c8:50:a3:3c:14:1d:
         94:90:e6:a6:1a:54:a0:ef:df:81:07:23:d9:91:37:e9:18:05:
         1a:aa:1c:ff:7e:ca:45:97:39:73:89:8d:99:7f:f6:44:6f:f4:
         52:b0:4e:58:53:84:c4:66:da:f0:36:d5:d7:18:1f:4f:14:9f:
         de:f9:63:eb:5d:17:82:0e:ee:a7:ec:b8:c6:6f:7e:9a:3b:94:
         01:a0:7e:a0:8a:d1:ed:1f:ac:63:e5:16:00:a4:a9:9f:28:0b:
         f2:ae:8d:aa:0b:43:d5:9b:c4:51:32:6f:a7:14:fe:fa:a9:04:
         c7:1b:93:f3:88:09:4f:1f:c1:0e:c1:b3:b6:7e:59:da:bc:36:
         23:20:14:f3:dd:28:ec:0d:39:8b:ae:04:31:b9:dc:81:0c:20:
         64:2b:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 19:07:39 2026 by rpki-client