Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          ESW3n2YClvCWA1BQ1ZYXtPDJRChNQaBlht17algAaNU=
Subject key identifier:   52:9C:2B:7C:70:6B:DF:E1:63:0A:36:F2:64:B7:F3:50:51:90:F4:89
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       019E1D90CFC153E1ABAFA78ED5C1EBC6ED74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          0C2F
Signing time:             Tue 12 May 2026 19:01:29 +0000
Manifest this update:     Tue 12 May 2026 19:01:29 +0000
Manifest next update:     Wed 13 May 2026 19:01:29 +0000
Files and hashes:         1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
                          2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: QakgFrEftSx2rS0HxfewQTwolAxRRvNYHLqfsDdwDIs=)
                          3: fzZPCo2MgwRNx0jBproZuv-eSHg.roa (hash: TUdwZLmcSuUajJ8XwoB2OnQqd7+GFsXBXptVyFTtu7c=)
                          4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:cf:c1:53:e1:ab:af:a7:8e:d5:c1:eb:c6:ed:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: May 12 19:01:29 2026 GMT
            Not After : May 13 19:01:29 2026 GMT
        Subject: CN=529c2b7c706bdfe1630a36f264b7f3505190f489
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:10:42:45:42:30:45:78:88:5e:76:54:50:1e:
                    62:68:b9:11:14:b0:11:e5:b2:aa:aa:97:7c:74:2b:
                    c0:23:94:fa:5b:2e:c2:6c:d0:44:e8:69:96:bc:26:
                    4f:d0:05:2e:13:43:e3:33:85:8b:9e:47:10:c6:e1:
                    ac:2a:1c:9a:8c:c0:d7:03:b4:4b:96:24:a2:15:2a:
                    32:7e:57:8c:43:42:59:44:fe:48:a6:7b:0d:51:12:
                    e8:cf:65:ad:af:fe:20:69:ad:e9:23:75:33:9d:80:
                    7b:75:03:0f:1b:c3:98:bf:a8:e0:40:ae:08:83:e3:
                    e0:d8:99:0a:1b:e1:56:2d:c3:25:4b:06:d7:0e:56:
                    0c:f6:c7:9e:86:b8:6b:52:26:9e:dc:ed:82:83:bd:
                    74:08:54:17:c4:f8:c3:3a:d6:64:37:2a:f9:b5:8b:
                    c9:2a:eb:64:3e:03:06:39:63:a3:13:99:d1:86:28:
                    53:e7:15:a0:24:ec:5d:a9:e4:da:73:a8:b3:6b:15:
                    78:fd:89:7f:e7:6a:8b:17:4b:3c:b5:af:6f:6e:4d:
                    bf:eb:99:95:6f:28:6f:aa:e1:92:84:14:9f:8a:df:
                    f3:8e:9d:07:7a:ca:ce:05:56:11:6f:ff:51:de:33:
                    db:72:9e:42:93:92:5c:2f:97:bd:4d:b2:73:8a:47:
                    9c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:9C:2B:7C:70:6B:DF:E1:63:0A:36:F2:64:B7:F3:50:51:90:F4:89
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:29:d1:4b:c9:b7:a0:cb:be:3d:80:1a:2b:0e:3e:34:98:48:
         99:43:69:a2:57:cf:90:12:b2:9e:88:7f:0b:81:18:a2:fd:c2:
         ff:d4:82:ac:b6:a7:52:61:b1:c0:6e:35:0e:58:29:94:32:7f:
         1b:a1:fd:56:aa:6b:e0:1c:1e:21:40:d5:29:a8:e0:50:36:15:
         fc:1b:c3:ce:b2:bd:c6:80:71:04:8d:2a:99:49:8a:b0:87:cd:
         82:8f:7a:1a:54:ff:66:83:b9:ac:38:e9:bd:26:79:f6:e1:82:
         21:29:9c:e4:e0:22:d0:4a:29:06:49:6b:20:1d:b1:40:2b:af:
         97:ca:8d:6a:a9:3e:23:95:78:7b:18:68:ad:9e:28:8f:2c:ad:
         b6:50:64:cd:d1:84:dc:16:95:1b:04:78:2f:6d:50:89:19:ea:
         93:14:6e:93:66:cd:0c:95:bb:72:ff:2d:19:50:c3:1c:ba:59:
         ff:81:68:e8:99:65:04:33:c1:ce:0d:23:c8:10:d1:13:51:f6:
         50:2b:ae:77:ae:09:06:ed:2e:c4:77:49:7e:43:d5:70:16:2b:
         3b:69:a8:c0:92:d4:f7:71:2e:4e:39:f2:a3:76:70:25:2f:d5:
         f8:9d:e5:23:41:54:d8:26:00:64:bf:2e:71:2a:30:b6:1f:8f:
         6a:98:ff:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:16:01 2026 by rpki-client