Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File:                     vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier:          VlY19ZqoLJi+acLyQxcC6qGf7CLOtHMS4sXjCwAn85s=
Subject key identifier:   9F:7E:B9:36:61:A7:26:D8:F2:19:3C:9E:2D:21:41:18:AC:D6:F7:E1
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer:       /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial:       019E1EA2D09F5533278632A8608B69D075F0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number:          0D93
Signing time:             Wed 13 May 2026 00:00:47 +0000
Manifest this update:     Wed 13 May 2026 00:00:47 +0000
Manifest next update:     Thu 14 May 2026 00:00:47 +0000
Files and hashes:         1: OmdvYxmrLn_L3wu-tKKe3CfgvKI.roa (hash: yDMfNBV69imWC+j1AfIyiotbGJSK6kkJjaiL93WMyvg=)
                          2: aCZ93vgD_JrnhMVE8ag6EFucpkg.roa (hash: YM2YwZolqo4cY7IySdgCVqucXddKsJE5ZWSJH8u/1Ww=)
                          3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: ICrwXnzHTPWQ9wyW54NL0SXsFxfeeIMPCiKV2Yu2T0k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 23:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a2:d0:9f:55:33:27:86:32:a8:60:8b:69:d0:75:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
        Validity
            Not Before: May 13 00:00:47 2026 GMT
            Not After : May 14 00:00:47 2026 GMT
        Subject: CN=9f7eb93661a726d8f2193c9e2d214118acd6f7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:b9:57:aa:1f:64:a5:53:7f:91:10:55:8e:bd:
                    64:e7:f1:9c:0d:18:c3:ef:0e:a7:64:bb:61:50:c0:
                    5e:27:36:df:4c:dd:3f:40:11:2c:1b:39:7d:47:67:
                    12:4f:db:9b:ff:7e:bd:f8:61:41:5d:cc:a3:fe:d6:
                    36:14:55:6c:a8:f1:dd:be:02:c1:5f:d5:d1:e3:de:
                    9a:23:7c:0a:6e:e0:b8:cc:5b:49:26:26:4c:b6:a8:
                    b9:55:a2:49:30:b9:e6:cd:98:ec:78:45:b0:d2:f7:
                    3b:0d:f9:04:a7:3d:de:80:4d:bb:bd:a5:34:40:39:
                    d3:8a:4e:1d:1f:19:e8:55:3b:bf:7f:28:ec:e9:4c:
                    55:13:0a:da:53:40:b7:fe:b6:5a:bc:53:b8:27:36:
                    fd:11:98:6d:be:e0:ae:30:c8:2e:63:10:13:6e:da:
                    92:e3:ae:93:fb:aa:65:2c:64:00:6f:4f:4f:ad:d6:
                    3a:bd:cb:71:8b:32:87:93:33:a8:79:5c:70:9f:9f:
                    c1:16:bd:03:29:b8:39:23:64:6e:62:63:81:12:3b:
                    36:2c:d6:8b:65:61:7c:0f:73:76:89:4b:b9:d0:c4:
                    71:02:1a:43:45:18:55:01:82:97:26:a8:e4:6e:2d:
                    7c:81:e1:2e:98:23:81:da:78:63:9f:3e:d9:1d:5c:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:7E:B9:36:61:A7:26:D8:F2:19:3C:9E:2D:21:41:18:AC:D6:F7:E1
            X509v3 Authority Key Identifier:
                keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:ee:b2:a7:54:8d:05:fe:63:23:5d:f2:59:8d:4d:99:dc:fd:
         48:9f:c3:4b:bb:c7:2c:8c:13:f9:cb:12:7f:0b:30:0e:66:71:
         c8:00:c9:05:39:f4:d5:3d:71:33:ad:05:49:57:35:c7:ca:14:
         92:49:f5:7f:fb:f2:8e:4d:f9:c2:95:75:8d:67:cf:78:6b:10:
         48:6d:23:a8:07:77:33:c2:c7:23:74:ba:c0:49:7e:eb:a5:dd:
         9a:4f:ae:81:61:a9:9a:89:f4:8c:2a:c7:67:a7:14:f0:d7:b9:
         df:9c:de:75:67:bf:df:e7:77:4e:e8:e1:8f:fe:50:f9:d3:f0:
         ee:e7:b4:6e:f0:41:7d:52:eb:e8:61:e8:4e:65:ef:a7:80:b5:
         54:ec:b3:47:55:37:22:cc:c9:90:cb:ff:80:be:25:06:64:04:
         d8:d7:a0:a5:a3:73:18:3b:20:3e:19:da:69:12:72:31:dc:ac:
         83:3f:eb:cc:86:59:4f:54:f0:03:00:d8:9c:70:9d:c3:ee:2d:
         40:12:59:4a:08:c7:e7:e7:07:f8:a5:a8:17:fd:b4:3f:7c:cd:
         61:b2:79:81:d7:91:6c:93:93:a5:12:f6:11:6e:ce:18:8d:b8:
         09:55:f5:57:78:62:33:68:84:0c:5d:d1:3a:a9:50:c6:b2:12:
         69:cb:fc:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:43:37 2026 by rpki-client