Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
File:                     VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json)
Hash identifier:          l7/07jJv1dGtJMgiWSLi89RPGWkZtI0oFiUZJnF5qgg=
Subject key identifier:   C8:BF:0C:56:AD:0B:D1:89:0B:C6:57:49:94:66:61:A3:DF:14:DE:6F
Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
Certificate issuer:       /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
Certificate serial:       019E1F108DC5E51F1F9A4A4FD70736177380
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
Manifest number:          037A
Signing time:             Wed 13 May 2026 02:00:38 +0000
Manifest this update:     Wed 13 May 2026 02:00:38 +0000
Manifest next update:     Thu 14 May 2026 02:00:38 +0000
Files and hashes:         1: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: CgLl8E8D5DU42CzaeDXvl3rjjPHR/i22Ga2H5wmlnvc=)
                          2: ubGuCjFPVxiulreO2SsJV28pVp0.roa (hash: 3l6ifc5EarfHeykyetQk/cEwR8Fv+CohcJmFJI84qI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:10:8d:c5:e5:1f:1f:9a:4a:4f:d7:07:36:17:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
        Validity
            Not Before: May 13 02:00:38 2026 GMT
            Not After : May 14 02:00:38 2026 GMT
        Subject: CN=c8bf0c56ad0bd1890bc65749946661a3df14de6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:3d:5e:d5:ce:e8:ff:b1:e9:43:fb:80:65:44:
                    07:16:98:2b:9d:25:cc:03:ba:a0:ad:8d:01:8c:cf:
                    32:e1:c6:15:b0:64:27:a3:05:2a:07:4d:ce:3e:fc:
                    be:13:13:26:e0:2a:d9:68:8a:ce:9a:cf:68:63:54:
                    13:43:64:c7:5e:e6:93:b0:e0:ea:d0:c6:4f:83:2c:
                    e8:09:81:42:cd:96:51:fe:e9:fe:47:bc:82:71:2b:
                    57:0b:d2:5f:55:02:9f:f1:54:e0:0f:8d:a5:e3:f0:
                    b2:f6:cb:c8:6d:3a:ca:ba:88:95:95:23:c6:18:c8:
                    7f:a9:a8:bb:22:03:eb:a8:ac:b5:8e:6d:11:e6:c9:
                    de:5c:c9:9d:b9:dd:49:8f:b5:f9:c4:1d:e3:09:b1:
                    3c:4a:bb:9d:89:98:fe:a0:48:ff:e3:fd:0f:10:f0:
                    d1:90:2e:6a:9b:99:e9:b2:b5:40:52:2d:ad:55:b1:
                    52:89:c1:40:db:ac:35:88:3f:66:6c:2e:43:8a:b7:
                    52:fe:1b:c5:7d:bc:99:30:af:8b:fe:b1:ad:1c:0e:
                    e1:8b:e2:88:2b:87:a6:fc:db:53:ae:66:69:18:73:
                    d3:38:12:f7:52:b2:45:70:4c:5f:40:c6:46:c4:50:
                    f3:6c:61:94:a2:2e:14:f1:f3:94:a7:fe:f5:4d:fb:
                    d3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:BF:0C:56:AD:0B:D1:89:0B:C6:57:49:94:66:61:A3:DF:14:DE:6F
            X509v3 Authority Key Identifier:
                keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         91:cd:06:32:20:57:8b:30:c6:0c:c0:62:86:b1:e1:34:c4:12:
         15:cc:3f:74:83:50:b7:45:59:e7:8c:2c:49:02:63:18:8e:16:
         32:aa:5a:18:b7:da:47:26:58:67:d9:02:5e:73:a8:13:3b:ad:
         d4:f6:15:20:fb:15:5e:d0:42:9c:ce:50:62:64:64:6f:98:68:
         fe:35:fb:1f:fa:fe:1e:41:fb:c4:85:34:d1:36:32:56:ee:24:
         12:d8:93:e7:0d:f5:a6:16:93:4c:f2:e7:95:af:32:a0:86:7a:
         7d:16:18:e9:4d:5e:b2:d6:7b:66:32:dc:1b:59:ab:56:68:97:
         b1:5e:7a:85:1f:f6:db:ae:a1:97:9d:2e:84:13:ee:3f:c0:61:
         12:f1:43:d2:f7:6e:df:08:9e:c6:de:b8:dd:26:fb:51:dc:2c:
         8b:b0:69:2c:4f:28:11:2f:0c:8d:9a:4f:54:07:f1:14:13:eb:
         fd:32:a5:b4:f3:d4:34:57:f1:08:65:af:64:5c:7c:b5:97:b1:
         a3:07:7c:e7:b9:cb:84:ae:8b:8a:9a:9c:1e:4f:df:11:f2:72:
         c9:8d:f1:7f:60:09:eb:e2:b0:81:2c:52:90:31:94:78:e2:34:
         bc:49:3c:95:af:08:63:20:71:f8:4b:5c:7a:b3:ec:8b:72:f0:
         55:2c:a9:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4fEI3F5R8fmkpP1wc2F3OAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZGViMWQ2YTM3N2FjOWQxZjViODg4YzVjZDFkNDAwYzc5
OTcyNzEwHhcNMjYwNTEzMDIwMDM4WhcNMjYwNTE0MDIwMDM4WjAzMTEwLwYDVQQD
EyhjOGJmMGM1NmFkMGJkMTg5MGJjNjU3NDk5NDY2NjFhM2RmMTRkZTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkj1e1c7o/7HpQ/uAZUQHFpgrnSXM
A7qgrY0BjM8y4cYVsGQnowUqB03OPvy+ExMm4CrZaIrOms9oY1QTQ2THXuaTsODq
0MZPgyzoCYFCzZZR/un+R7yCcStXC9JfVQKf8VTgD42l4/Cy9svIbTrKuoiVlSPG
GMh/qai7IgPrqKy1jm0R5sneXMmdud1Jj7X5xB3jCbE8SrudiZj+oEj/4/0PEPDR
kC5qm5npsrVAUi2tVbFSicFA26w1iD9mbC5DirdS/hvFfbyZMK+L/rGtHA7hi+KI
K4em/NtTrmZpGHPTOBL3UrJFcExfQMZGxFDzbGGUoi4U8fOUp/71TfvT2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMi/DFatC9GJC8ZXSZRmYaPfFN5vMB8GA1UdIwQY
MBaAFFTesdajd6ydH1uIjFzR1ADHmXJxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2It
YjMzNmYzMWU0YTc0LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS8wNDQzOWYtNDJlMy00ZTZjLWJkM2ItYjMzNmYzMWU0YTc0
LzEvVk42eDFxTjNySjBmVzRpTVhOSFVBTWVaY25FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkc0GMiBX
izDGDMBihrHhNMQSFcw/dINQt0VZ54wsSQJjGI4WMqpaGLfaRyZYZ9kCXnOoEzut
1PYVIPsVXtBCnM5QYmRkb5ho/jX7H/r+HkH7xIU00TYyVu4kEtiT5w31phaTTPLn
la8yoIZ6fRYY6U1estZ7ZjLcG1mrVmiXsV56hR/2266hl50uhBPuP8BhEvFD0vdu
3wiext643Sb7Udwsi7BpLE8oES8MjZpPVAfxFBPr/TKltPPUNFfxCGWvZFx8tZex
owd857nLhK6LipqcHk/fEfJyyY3xf2AJ6+KwgSxSkDGUeOI0vEk8la8IYyBx+Etc
erPsi3LwVSypiQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:44:08 2026 by rpki-client