Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File:                     VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier:          4CKXx6dPvyhcnXqVSO/hjZdBAwQTT9thVXmKyXMn/KI=
Subject key identifier:   4F:F8:67:10:24:03:94:B5:9D:55:5B:E8:81:8F:CC:26:3B:B5:74:B8
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer:       /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial:       019E20918D9834473304555E05E6E1B8622D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number:          1908
Signing time:             Wed 13 May 2026 09:01:10 +0000
Manifest this update:     Wed 13 May 2026 09:01:10 +0000
Manifest next update:     Thu 14 May 2026 09:01:10 +0000
Files and hashes:         1: MyEobwPvVlPZfo18i7oAV1Xhf8s.roa (hash: +PGToJCT+bUcRHVwTrA1c0sAhKUye1v74DJg5l+yDRc=)
                          2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: fmrXPGlIPeBz3XoCtYxcC2r1MfGsGT/q/YRFHHxtbWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 06:33:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:20:91:8d:98:34:47:33:04:55:5e:05:e6:e1:b8:62:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
        Validity
            Not Before: May 13 09:01:10 2026 GMT
            Not After : May 14 09:01:10 2026 GMT
        Subject: CN=4ff86710240394b59d555be8818fcc263bb574b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:be:23:b4:31:1c:86:a5:83:01:3a:47:db:8b:
                    f5:14:18:c6:52:ab:4a:af:68:7a:ae:b9:46:4b:46:
                    9e:a3:48:9f:ee:e7:f7:d8:13:c0:96:a0:4c:38:85:
                    17:94:91:7e:25:52:64:0d:d5:da:c4:80:14:00:16:
                    f1:68:01:b4:a5:21:63:c9:70:d1:27:b9:10:4d:36:
                    ec:57:77:db:2c:ab:aa:4a:9d:7a:92:ee:98:61:a2:
                    c9:16:fd:7d:30:de:55:d4:51:9c:1a:d2:51:a2:66:
                    f6:89:91:11:c0:92:19:9a:2b:f6:56:36:d4:fb:96:
                    dd:d6:0a:57:7d:fc:d9:3d:60:36:09:b8:22:2a:f0:
                    a9:94:5d:5a:36:37:67:63:b9:2d:df:5d:90:76:16:
                    8e:10:a1:f8:68:f7:0b:1f:75:21:e7:e8:18:ff:15:
                    7f:0b:ff:e7:0d:04:49:81:4c:45:eb:27:a3:74:a2:
                    b2:e0:be:2e:00:db:d3:cc:ad:3f:36:da:c9:82:4d:
                    7f:23:0a:a6:4c:b9:59:ce:c2:06:6c:95:86:9d:74:
                    8e:66:cf:5f:c6:f9:77:57:a9:a5:2b:fe:75:94:68:
                    15:02:0d:87:67:a9:be:aa:4e:5d:e1:95:3d:ab:5e:
                    d8:bc:81:06:48:f1:dc:ed:e6:93:6f:f8:50:a4:ba:
                    dd:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:F8:67:10:24:03:94:B5:9D:55:5B:E8:81:8F:CC:26:3B:B5:74:B8
            X509v3 Authority Key Identifier:
                keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:15:82:a5:36:b1:fa:7e:3f:b9:e9:64:2b:5c:c6:bb:22:f7:
         42:f7:e1:d3:16:41:db:87:8d:f2:3e:b4:3b:78:79:47:5f:be:
         36:ef:91:c1:25:bb:70:98:96:4b:b9:22:55:7a:d0:45:04:3a:
         05:2c:71:fd:8f:e7:b6:6f:ca:c2:69:8e:59:94:db:7d:89:4a:
         f3:84:0c:e4:db:17:9f:e5:c8:30:63:0d:ad:32:a0:27:68:de:
         8b:37:8e:f1:71:1a:0b:ff:17:df:17:2c:93:a0:d3:b5:5c:f0:
         e4:e5:99:1b:2f:f4:df:5e:aa:fb:b9:cb:2b:a5:c8:33:80:0c:
         79:a7:2b:ec:8b:ef:0e:58:69:ca:1a:b5:12:d5:63:c0:36:06:
         d8:17:f5:a6:5d:4a:d9:a8:98:ca:66:7f:19:3c:73:1e:f2:5c:
         91:d6:14:c9:c0:b1:63:a6:ed:31:ea:b9:6c:48:be:fa:96:29:
         b9:29:26:21:7b:bd:fd:df:1b:fa:fe:18:73:c1:2b:e5:4c:51:
         f0:7c:e0:54:be:eb:fb:08:1b:31:3a:ed:9e:1a:53:bb:70:a2:
         57:72:62:c7:1e:3e:61:ce:18:c5:8b:8f:73:55:64:b7:d7:d7:
         4e:c6:71:ec:8c:47:27:05:7d:b8:3a:d8:41:85:50:1d:8d:05:
         71:cb:f0:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:12:41 2026 by rpki-client