Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
File:                     VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft (raw, json)
Hash identifier:          IX9+N63FcdyDc3TfzabWOkhkvv4CEOKBuNbiWKA+xVA=
Subject key identifier:   FE:85:DD:4F:68:15:8C:72:C0:E4:3D:83:D1:98:E3:09:91:33:12:93
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Certificate issuer:       /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial:       019F84FA890C43DC9843712C4D41AF7785C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
Manifest number:          19C2
Signing time:             Tue 21 Jul 2026 14:00:39 +0000
Manifest this update:     Tue 21 Jul 2026 14:00:39 +0000
Manifest next update:     Wed 22 Jul 2026 14:00:39 +0000
Files and hashes:         1: 26y3-FCIjKPuULGuAbdkN8udFTE.roa (hash: 3xGJRZGv4+67a/QQcXMMfIKq4kUi6sQ1GWf2ofA+Ul0=)
                          2: JWW2o_oLbWGpxjMQwNSAqwhhqJQ.roa (hash: 5nCR6cc/bGUZmfvhdh345jAakzPx6XaPK0dVdsIkYOg=)
                          3: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl (hash: fzNWWYOfPxAD6nJRftrScBL1Kt9C2gLIOSFzlIzoZ6s=)
                          4: ZtZBjU0WYLzqgNFkzWWLjKRWDe4.roa (hash: Aa1FwsDclr77KnL36PHDkQS2BvAV7tYr/XQOCzDjAzU=)
                          5: t5f9uZebkbDVSowLOTLeEPd0h2Q.roa (hash: 0xEPrMrVD89X+wGNKbD1d1Cor+K8kwVUKbsyOrl9tUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:fa:89:0c:43:dc:98:43:71:2c:4d:41:af:77:85:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
        Validity
            Not Before: Jul 21 14:00:39 2026 GMT
            Not After : Jul 22 14:00:39 2026 GMT
        Subject: CN=fe85dd4f68158c72c0e43d83d198e30991331293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:48:b4:4f:8e:df:b9:75:80:5e:cd:e3:f9:9e:
                    eb:d7:55:87:fc:60:96:f6:0f:9d:77:da:7e:cb:f7:
                    7b:13:1a:71:ca:bd:3f:5d:39:b8:b9:e2:2e:32:15:
                    72:a5:65:9b:58:7a:e3:d6:37:da:1e:fd:21:6b:9a:
                    a1:e2:27:ef:00:90:12:17:8b:0e:ec:35:94:fc:49:
                    7e:a0:cc:61:4a:c6:5f:8d:a1:19:74:2c:dd:70:92:
                    05:a9:85:12:02:31:fc:e6:e9:23:2a:56:5e:35:9e:
                    d5:9a:af:02:bf:d8:ff:8f:b8:28:27:ec:b8:1e:b6:
                    69:94:16:98:d0:fb:59:71:6c:0e:da:f3:09:85:52:
                    6c:1f:fc:f8:46:19:ba:c2:d3:a4:f8:89:db:07:8f:
                    1e:22:b8:15:be:b6:ab:49:ac:ab:cb:f0:b6:88:04:
                    69:f3:2b:4e:d9:31:14:06:9c:6c:c2:39:a9:51:1a:
                    26:63:d8:49:14:68:69:de:94:25:97:7c:b0:48:67:
                    c3:b3:7f:41:5a:8c:60:ae:0c:1a:21:0a:e1:48:20:
                    3e:b3:9f:6c:85:d0:cb:34:0a:79:d9:94:41:bd:11:
                    1a:d6:f7:9a:72:90:9e:d6:f7:df:20:64:80:3e:50:
                    de:46:b4:1c:1b:76:8f:34:be:c7:0d:a3:7e:80:27:
                    f1:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:85:DD:4F:68:15:8C:72:C0:E4:3D:83:D1:98:E3:09:91:33:12:93
            X509v3 Authority Key Identifier:
                keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:fd:08:dc:03:63:dc:18:0a:a7:3d:0e:57:ca:99:bb:72:0e:
         41:10:5d:19:d6:1b:56:fc:3a:3d:bc:01:66:da:cd:9a:a3:3f:
         23:85:b8:6b:db:12:d6:2d:39:93:7e:91:66:36:95:b9:eb:f1:
         0b:03:db:c1:41:e3:38:63:22:ad:c5:e1:f5:04:97:b8:00:9c:
         27:be:ec:c1:90:5c:f8:bc:13:72:3a:34:22:3c:0b:7d:a3:8b:
         d1:82:f4:9a:97:ea:3b:7a:8c:c1:1c:78:ca:fe:d0:a8:1c:a9:
         48:53:9c:92:b7:35:84:c1:39:2d:e1:9c:f0:72:c2:60:60:a3:
         50:4a:4d:b8:16:1e:18:a3:e3:32:37:84:8b:70:2c:37:bd:e0:
         be:0e:e4:0b:dd:31:f8:58:67:d0:36:c5:df:db:3d:e8:0a:26:
         57:1f:7e:a5:41:84:fd:1c:06:d2:6d:05:ee:55:21:0b:31:0d:
         95:9f:42:0d:89:7c:fb:ea:f1:1e:97:28:3f:d2:ff:d5:43:ff:
         9b:dc:16:1b:5a:ae:8e:3d:20:18:5c:42:94:28:0d:af:43:82:
         cb:d3:ed:20:9b:7b:62:26:ba:96:0d:80:bf:39:e8:4b:22:fe:
         f7:5b:dc:a9:3d:76:07:85:fe:02:93:52:34:a3:06:98:a8:dd:
         c1:f3:a4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:50:42 2026 by rpki-client