Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File:                     vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier:          1W2Z7L3h76j1PnXCSCa7lnQbyVCkksLHHbY3gEou/I4=
Subject key identifier:   AD:F1:AA:5C:1E:A5:6B:27:BF:77:88:2A:13:1D:27:B8:2F:30:B2:05
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer:       /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial:       019E1C4723CED27B48B27CADB66CA77D1E67
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number:          03EF
Signing time:             Tue 12 May 2026 13:01:24 +0000
Manifest this update:     Tue 12 May 2026 13:01:24 +0000
Manifest next update:     Wed 13 May 2026 13:01:24 +0000
Files and hashes:         1: DL1N_WLltaKiMUu8ebX9NozMvHY.asa (hash: GBlkMfbXm3G5bf+OMcuJMbHMOCV88FK9f+Gi2F4HMkU=)
                          2: ntc1WC3vm1k3JcSErDirE-bzwtM.roa (hash: L9yeSfoh1wmxKMxYP1W4Vm7cz9VV1GGVVoomG/BNrTg=)
                          3: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: YhUMe0Yyfk05pdcTiA2uYLxFa4h1jh0qCev26Mv38nQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 13:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1c:47:23:ce:d2:7b:48:b2:7c:ad:b6:6c:a7:7d:1e:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
        Validity
            Not Before: May 12 13:01:24 2026 GMT
            Not After : May 13 13:01:24 2026 GMT
        Subject: CN=adf1aa5c1ea56b27bf77882a131d27b82f30b205
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:93:f3:e5:b8:27:fc:43:8d:71:ba:35:ab:58:
                    8a:56:4c:04:65:4c:ba:e6:dd:c6:a0:81:49:23:54:
                    fd:87:f6:14:a8:78:ff:db:88:4e:a3:08:f2:de:e4:
                    21:aa:10:6e:34:f5:34:2b:32:f6:07:50:66:b7:2a:
                    ba:6d:91:c2:ae:e7:32:fa:cf:16:86:79:11:70:53:
                    02:a1:6b:64:35:62:7d:cf:a0:b1:81:5e:2d:cf:7c:
                    37:75:7c:3b:72:93:6b:19:52:35:0b:a4:6f:da:41:
                    50:87:9f:3b:95:64:16:dc:95:5e:50:29:43:fa:0e:
                    b1:a2:df:6f:6a:38:c8:0f:43:64:d5:36:94:76:81:
                    5f:5d:e1:ec:c5:a0:52:bf:7a:bf:e5:fd:b1:53:6e:
                    65:11:61:b3:20:5e:aa:f8:08:9f:30:a8:d0:7a:39:
                    bb:56:a0:9a:7e:c7:43:f7:ec:a9:46:9a:bf:6d:b5:
                    e6:26:9d:1f:1f:1e:6c:42:1a:9e:7b:e1:8d:bc:e6:
                    54:7e:f0:5d:4c:0a:d6:2c:2b:89:65:d9:57:c7:b3:
                    f2:04:8a:d9:10:29:35:05:31:d2:ec:ab:37:b6:30:
                    b2:c9:d1:ce:4d:e9:c3:cf:55:d0:4f:3c:78:68:c4:
                    13:26:4e:92:0a:4f:3c:d2:fa:6d:ee:25:e9:c2:90:
                    2d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:F1:AA:5C:1E:A5:6B:27:BF:77:88:2A:13:1D:27:B8:2F:30:B2:05
            X509v3 Authority Key Identifier:
                keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:96:7a:da:f6:8a:d0:6b:51:0f:3f:1b:1f:58:f4:fe:e5:22:
         03:d8:63:9c:db:a9:63:1b:88:f3:11:af:05:de:f5:79:a0:b1:
         53:63:87:c0:83:e8:da:90:66:3e:a7:2f:73:28:c7:9f:14:cd:
         42:5a:84:6c:6e:6d:66:58:8f:41:4b:30:41:ca:24:4a:50:58:
         59:a3:c4:e1:de:c9:31:17:0a:cf:1d:48:c0:67:91:9a:dc:5e:
         34:3d:c5:45:92:b0:e5:80:d1:f5:de:b1:14:31:e6:8d:07:c2:
         e9:3b:8e:81:2e:54:02:1e:95:ff:c3:34:59:ca:fc:b8:d2:41:
         ce:e2:5b:63:ba:2c:88:54:a2:ef:21:fb:10:b7:f5:4d:19:fa:
         08:6f:d6:9c:50:8a:2a:86:21:94:24:07:d4:8e:08:9b:d6:4b:
         c0:34:a9:ed:20:0d:94:cc:23:98:ba:9d:01:99:e8:2e:24:a8:
         e0:4d:f2:6a:88:95:2c:01:1f:ed:2d:91:78:b2:c5:f7:40:25:
         3c:2d:34:1b:8f:7d:db:94:66:d1:1a:84:00:cf:73:ae:5a:fb:
         9b:8c:0c:b5:db:47:64:61:6b:05:0f:24:ee:c6:20:46:51:30:
         09:96:f7:d1:0b:64:73:e4:66:4f:17:b1:23:7d:80:db:43:9f:
         47:3d:43:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 21:27:33 2026 by rpki-client