Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
File:                     VW22ld3zHiiYRm757fukiA2OGfs.mft (raw, json)
Hash identifier:          1Ypwq0EwgoNyifsZO/1YIBkLaa975g++YC/adjOen+Y=
Subject key identifier:   0E:61:1C:2A:D6:13:D4:AF:8D:67:DD:63:B7:FD:B3:B3:69:ED:EA:87
Authority key identifier: 55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB
Certificate issuer:       /CN=556db695ddf31e2898466ef9edfba4880d8e19fb
Certificate serial:       019E1F1102199AA19094A07B03E25A9B390B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
Manifest number:          0401
Signing time:             Wed 13 May 2026 02:01:08 +0000
Manifest this update:     Wed 13 May 2026 02:01:08 +0000
Manifest next update:     Thu 14 May 2026 02:01:08 +0000
Files and hashes:         1: VW22ld3zHiiYRm757fukiA2OGfs.crl (hash: hhkXfJ08lkXq0uULTWKrdTXBY87rxK/tYrleVLwtTG0=)
                          2: rDteTEGGPxt7CaJGBgKr1ALLgTM.roa (hash: TV2GDIQbIwm8aM3NmO/8wyhyHPMnS3b2eZNvh57dJ/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:11:02:19:9a:a1:90:94:a0:7b:03:e2:5a:9b:39:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556db695ddf31e2898466ef9edfba4880d8e19fb
        Validity
            Not Before: May 13 02:01:08 2026 GMT
            Not After : May 14 02:01:08 2026 GMT
        Subject: CN=0e611c2ad613d4af8d67dd63b7fdb3b369edea87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e1:45:2b:0b:eb:22:fe:b3:ec:0a:17:24:d5:
                    97:76:a5:d9:59:55:33:a9:4b:a3:b6:05:97:34:e0:
                    6f:da:af:73:6d:c8:7a:af:a5:ee:3f:f6:68:da:03:
                    c1:f7:35:d3:d2:5f:ae:7a:df:05:2b:5d:58:7f:fd:
                    bf:1a:6e:26:0e:a7:25:20:42:23:c4:2d:6b:53:79:
                    df:e3:9e:57:9a:f8:9f:a3:fd:a7:0b:27:44:d5:4c:
                    2e:c9:05:c1:ee:e0:0b:30:70:7a:de:d3:6d:af:b7:
                    26:af:b4:d2:9b:55:26:2b:e4:94:b3:f1:57:63:be:
                    6b:5b:ec:38:fa:ff:1c:f1:c3:45:fe:36:28:95:34:
                    70:b2:51:6f:ba:89:d9:75:45:3c:74:cf:02:ba:01:
                    93:20:95:07:d3:09:93:2b:8f:63:a4:f5:78:cc:ac:
                    af:13:c3:8a:3b:a6:2f:97:7a:78:1a:b2:92:37:67:
                    06:1c:1c:26:f1:96:11:63:ef:02:1b:e8:2f:a5:29:
                    3d:a5:26:92:68:a9:34:85:63:15:b4:b3:64:1c:b0:
                    82:5b:be:ad:da:b3:65:e6:a7:82:e3:0c:20:a6:e9:
                    ca:c8:39:6c:3b:a9:fb:ca:b6:5e:ab:9d:9a:05:4b:
                    bd:da:7c:d8:4f:24:ef:87:96:32:b1:12:61:59:0c:
                    91:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:61:1C:2A:D6:13:D4:AF:8D:67:DD:63:B7:FD:B3:B3:69:ED:EA:87
            X509v3 Authority Key Identifier:
                keyid:55:6D:B6:95:DD:F3:1E:28:98:46:6E:F9:ED:FB:A4:88:0D:8E:19:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VW22ld3zHiiYRm757fukiA2OGfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/541462-adb6-4c66-b542-052eaeac647e/1/VW22ld3zHiiYRm757fukiA2OGfs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:0b:72:14:e7:7c:89:89:77:53:46:53:76:ae:7e:89:a8:8b:
         12:1e:36:27:46:6a:2a:7d:27:42:89:ad:28:91:34:f6:b7:3b:
         30:7b:91:8f:38:9f:9f:01:cc:6f:d7:ee:78:91:54:c5:f3:d9:
         db:0b:e7:4c:c4:da:8a:69:e8:b4:19:59:d0:f5:25:15:64:81:
         2d:1b:c8:ad:de:9a:9e:bf:5d:8c:f4:1e:75:32:37:ef:4c:47:
         2e:8f:10:eb:ac:02:7c:b7:b3:c4:03:4f:4e:93:f0:d2:70:89:
         9d:3e:b8:43:25:40:a9:46:83:1a:63:e2:a7:ad:c3:f1:83:21:
         5f:e1:31:e8:ab:d4:07:12:f0:2b:59:2f:e5:16:1f:ca:31:6a:
         63:2f:44:60:5d:93:6e:25:17:6e:40:cf:6e:5f:12:76:98:c3:
         ac:23:5d:8e:ce:c3:00:bc:a5:d7:d2:69:c8:96:69:86:ee:b1:
         74:16:1f:fb:b3:55:5d:c2:a8:e8:b6:ca:db:f5:48:2c:bf:07:
         c9:d8:0f:92:dd:96:a1:6d:b9:2e:8b:b3:54:11:50:26:bf:84:
         96:33:e2:a8:59:55:2d:1a:2b:15:e3:72:de:9f:a8:a1:e4:92:
         e6:6f:9d:15:79:00:a8:16:0d:1f:96:f6:16:6d:29:4f:f7:85:
         18:ac:50:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:18:44 2026 by rpki-client