Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
File:                     VZNJZEMjMV-AbcZMpNntlVd2J1c.mft (raw, json)
Hash identifier:          qcK0BXaSLxid+I4XRc1iliF1dIJrz+Siz3tGbHeuEWM=
Subject key identifier:   91:44:82:10:BB:04:4B:42:06:55:17:63:76:53:5F:C0:AD:8B:A4:0A
Authority key identifier: 55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57
Certificate issuer:       /CN=559349644323315f806dc64ca4d9ed9557762757
Certificate serial:       019E1F7F6CCEE0E74ED6DC5AED348777035D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
Manifest number:          0D61
Signing time:             Wed 13 May 2026 04:01:45 +0000
Manifest this update:     Wed 13 May 2026 04:01:45 +0000
Manifest next update:     Thu 14 May 2026 04:01:45 +0000
Files and hashes:         1: LjJLqjcnZZvUB7mKjCH-7GZzeLM.roa (hash: A/qN/8X4NxsgNcRehmeeZdCg0e5U0+miw/dGRfft/VI=)
                          2: VZNJZEMjMV-AbcZMpNntlVd2J1c.crl (hash: T4I5VvMfq0F+aPEvYNgzSKZSXicl3aTRY6iDGPDC42A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 04:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:7f:6c:ce:e0:e7:4e:d6:dc:5a:ed:34:87:77:03:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=559349644323315f806dc64ca4d9ed9557762757
        Validity
            Not Before: May 13 04:01:45 2026 GMT
            Not After : May 14 04:01:45 2026 GMT
        Subject: CN=91448210bb044b420655176376535fc0ad8ba40a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:d5:ec:81:ce:0c:87:6b:a6:36:42:16:cf:ca:
                    87:4b:d2:51:78:e3:8f:26:06:6c:b1:54:ac:28:37:
                    c5:34:af:8e:c7:1f:57:fe:37:ec:51:94:0e:23:b7:
                    21:13:d6:af:d2:71:17:f6:05:d7:89:5a:08:3e:12:
                    ba:92:74:78:64:58:2d:4c:1a:8d:73:95:a6:e8:7b:
                    b7:e8:4b:86:ca:90:f7:de:7f:61:da:72:78:7c:14:
                    de:e5:04:aa:b7:6a:e9:c3:13:24:c5:71:23:9c:21:
                    6f:7b:7e:5f:c7:2f:39:1f:3e:6c:9a:56:e9:0e:40:
                    ca:3f:cb:fd:81:59:bb:18:22:a3:74:38:44:5e:00:
                    71:b4:9d:52:dd:88:a2:36:f2:fc:9e:2e:fe:7f:22:
                    52:13:30:6d:38:23:30:e9:5f:50:35:21:b1:42:18:
                    53:2f:ae:ea:66:e6:68:e3:23:05:86:ab:ea:b9:21:
                    64:7b:30:79:80:b8:48:9c:19:61:27:69:dd:88:b2:
                    17:34:5a:bd:c7:c3:ae:a5:c9:86:98:98:85:ba:d8:
                    da:34:dd:7e:a5:5e:65:72:d7:c9:32:62:f4:16:5b:
                    f8:65:8e:31:c9:27:b0:46:41:5b:75:e1:d7:17:74:
                    79:20:37:cf:cf:67:87:ca:e2:7f:ca:66:97:a5:cf:
                    fe:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:44:82:10:BB:04:4B:42:06:55:17:63:76:53:5F:C0:AD:8B:A4:0A
            X509v3 Authority Key Identifier:
                keyid:55:93:49:64:43:23:31:5F:80:6D:C6:4C:A4:D9:ED:95:57:76:27:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZNJZEMjMV-AbcZMpNntlVd2J1c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/df97ef-3435-4657-a1a2-6066d89f05b8/1/VZNJZEMjMV-AbcZMpNntlVd2J1c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:08:fe:73:05:a7:01:e1:5c:18:72:36:ad:dc:f4:94:62:15:
         14:a1:d8:32:94:b6:ab:3a:c0:6b:60:77:4b:c6:66:40:01:cb:
         59:1e:e4:a3:60:ae:a8:b7:e2:23:4a:8b:7a:41:90:fa:18:bf:
         85:5e:e1:46:97:d2:00:20:23:b4:56:51:5a:fa:96:4d:4c:57:
         73:1b:01:98:93:12:6d:c4:67:68:30:36:a0:de:04:30:34:e8:
         69:f1:86:73:f5:48:49:2f:80:76:7b:a6:b7:76:e7:da:ef:61:
         c9:04:2e:73:ed:57:67:48:26:83:37:b6:fd:a5:1f:cc:d9:f3:
         fc:54:26:0d:79:9b:40:7e:a5:0e:c4:2c:a0:84:fe:61:45:48:
         66:c0:0c:fb:9a:ce:a4:9b:6a:e6:03:d6:74:bf:07:de:7b:bd:
         c3:aa:b4:ab:4c:d4:2b:07:b7:2b:f0:17:4f:ef:39:b3:84:72:
         83:7b:cb:6d:22:ab:e3:69:bb:a9:13:47:14:08:c0:f6:38:cc:
         ce:bd:5e:17:27:a6:2b:b2:db:d5:57:00:8b:8f:49:f9:b0:37:
         b9:f1:40:de:26:91:4e:0c:a4:e4:21:dd:4d:89:7b:16:4d:1d:
         a7:48:99:d4:fd:2c:84:65:9f:77:4e:93:df:4d:c0:11:ce:e2:
         4e:f4:b8:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:03 2026 by rpki-client