Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft
File:                     vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft (raw, json)
Hash identifier:          h1EaTl0SVv9hFMYA2yzzGV//s2dwKQCkP9/qBx5z1aE=
Subject key identifier:   6D:29:26:B0:E4:8E:D1:D0:01:AE:9A:2C:28:F8:FD:47:38:06:88:7C
Authority key identifier: BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6
Certificate issuer:       /CN=bc4354be4f31e518c89b52aebc9b789778a193a6
Certificate serial:       019F954A66555B150D21BE9C044FC3DCC183
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft
Manifest number:          42
Signing time:             Fri 24 Jul 2026 18:01:48 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:48 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:48 +0000
Files and hashes:         1: 4LWM9jmu5dEFIkWMj4lsis4bf5Y.roa (hash: oLteZeeC9ZgyjupmFjgPqihhDa9Wy5C3AGWlzOhe6Mk=)
                          2: gf-mbvYelMZO4djLNspDDD7ssWQ.roa (hash: 79ESkRKaxOUYjBkQdKc4U7UHSI1oqoPqHILtwTLWy+Q=)
                          3: tRavD7X3x-pkyK2-nAiMdbIdqoI.roa (hash: GqJojixsG233I+gLh+j8vr578QE9LBaBDivJpB3UI+k=)
                          4: vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl (hash: mouhTZ62Uv8eLuts59xgfIKigmbdBTMYUe2af5WeQmg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:66:55:5b:15:0d:21:be:9c:04:4f:c3:dc:c1:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc4354be4f31e518c89b52aebc9b789778a193a6
        Validity
            Not Before: Jul 24 18:01:48 2026 GMT
            Not After : Jul 25 18:01:48 2026 GMT
        Subject: CN=6d2926b0e48ed1d001ae9a2c28f8fd473806887c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ea:0f:88:3a:a9:13:15:5e:cb:82:54:cb:77:
                    9c:50:b8:1c:d5:6d:0e:2e:55:26:15:e8:61:86:30:
                    e0:39:ed:7d:0c:7b:6c:0b:b9:d1:06:1d:b3:af:d7:
                    fa:3d:f6:66:da:d4:98:d6:92:2f:e8:a2:2c:f0:03:
                    c9:ae:d4:74:5a:60:8f:5a:81:0a:e3:2a:d9:9d:d5:
                    b3:9a:86:48:a8:c2:fa:cf:45:e1:47:de:7d:85:a8:
                    a8:f3:25:9e:ec:bf:aa:61:1e:c6:71:f0:f7:00:82:
                    c5:55:8e:4b:7c:1a:6e:62:c0:13:a4:72:d2:98:b8:
                    76:33:c8:54:7d:1f:7c:4b:b7:00:fb:db:24:a4:1b:
                    b8:5a:02:fa:e9:ac:c6:ea:9a:0e:6b:ab:69:b2:d4:
                    b3:45:cf:49:76:d0:f0:ea:be:4d:25:d9:e8:00:03:
                    7d:ec:5d:2d:55:01:51:c3:ce:be:90:ed:08:8e:94:
                    d5:fe:72:45:ca:10:69:27:2a:a2:94:9d:a3:02:8c:
                    8d:26:da:95:12:c2:da:34:f6:a2:89:a9:bd:4e:64:
                    68:2b:c9:70:00:1d:0c:82:ac:57:06:00:7b:18:61:
                    be:be:3e:ba:7d:83:cf:d7:d5:00:8f:0d:6e:ce:18:
                    a7:e8:46:fe:43:2c:e4:23:9c:06:6c:85:33:e8:6d:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:29:26:B0:E4:8E:D1:D0:01:AE:9A:2C:28:F8:FD:47:38:06:88:7C
            X509v3 Authority Key Identifier:
                keyid:BC:43:54:BE:4F:31:E5:18:C8:9B:52:AE:BC:9B:78:97:78:A1:93:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vENUvk8x5RjIm1KuvJt4l3ihk6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/465c40-6718-4ea9-91e5-912047153e01/1/vENUvk8x5RjIm1KuvJt4l3ihk6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:bd:3f:49:f4:13:b7:3e:b1:11:3e:aa:33:57:f3:c6:33:96:
         a9:7b:a4:97:ae:2a:5a:d9:ba:c1:b2:51:47:6c:5f:91:e6:a6:
         c8:ed:ec:54:c0:d7:40:8d:3b:cd:51:bd:41:29:56:c5:64:8c:
         c8:6d:a5:f3:f2:91:b8:5a:df:50:9c:4b:52:dc:ca:a0:8d:80:
         04:2e:e2:0d:7a:55:b6:b3:1c:23:fb:22:27:f0:3e:bc:69:ba:
         de:a7:79:f4:85:80:44:7a:db:9b:d9:d4:83:a1:40:2a:dd:9e:
         f2:a4:4a:bd:86:45:7c:8b:cb:53:f0:05:e6:2f:bf:77:24:34:
         a7:b1:c9:88:06:75:4c:6c:c1:87:13:7a:05:9b:5b:1a:8c:7c:
         23:c8:79:ec:08:9e:85:14:83:1e:a4:28:7e:61:06:1d:36:43:
         90:fd:b2:b0:ad:b9:cf:3f:c7:3b:4b:7f:1e:23:48:96:b6:e4:
         e6:7e:3e:51:aa:a9:1d:97:0e:56:4e:44:e3:3b:ed:e5:61:f4:
         e2:d3:92:e2:48:ff:26:83:53:b7:43:3a:a4:43:56:c9:6a:f8:
         82:25:31:ec:e1:79:6e:27:82:75:1e:5d:55:2f:6b:68:33:c0:
         9d:9e:39:54:ca:33:53:7c:71:72:0b:54:9f:95:0e:96:7b:73:
         99:81:0b:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:08:20 2026 by rpki-client