Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          +d7FyjUWYaf52dur+TJTFob9q82V7kgOUt2QdNgUTuw=
Subject key identifier:   5D:B1:27:09:CF:38:6A:14:D0:80:51:A7:BE:88:27:D9:B1:DF:81:89
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       019FA1BB5D03277266413707BD6793C6D3DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1960
Signing time:             Mon 27 Jul 2026 04:00:38 +0000
Manifest this update:     Mon 27 Jul 2026 04:00:38 +0000
Manifest next update:     Tue 28 Jul 2026 04:00:38 +0000
Files and hashes:         1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: Ca6nfYhP81Gb7zZcBwS1CaLmNq7oHqDu+q5Uhudknqo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 04:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:bb:5d:03:27:72:66:41:37:07:bd:67:93:c6:d3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Jul 27 04:00:38 2026 GMT
            Not After : Jul 28 04:00:38 2026 GMT
        Subject: CN=5db12709cf386a14d08051a7be8827d9b1df8189
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3b:6b:29:9c:56:55:09:ac:65:16:f3:bb:25:
                    a4:e4:ba:f7:b1:68:60:be:09:da:a6:4a:2f:5f:6f:
                    8f:10:b8:fe:9a:f7:a6:e0:90:cc:8a:f0:b9:ba:0f:
                    9e:f3:09:f7:aa:93:82:ac:62:b1:42:ca:72:f2:dc:
                    ca:90:cf:5f:4f:11:10:96:ae:f4:ef:ae:66:4b:c7:
                    26:bb:d7:c0:7b:83:8c:95:bb:4a:53:25:a9:84:1f:
                    7a:76:b4:bd:0a:72:bd:92:e7:4e:70:5c:82:91:34:
                    89:12:f6:12:63:19:4e:61:f3:26:34:64:36:bc:1b:
                    36:58:20:1f:b5:85:c7:3b:47:b0:ba:b3:57:00:b3:
                    ca:bc:f9:bb:d2:26:39:38:bd:ac:84:2c:b9:bd:78:
                    e9:2c:e7:38:a5:d7:0d:97:c1:f2:e5:d1:3f:fc:4c:
                    2e:34:9d:6f:94:57:39:50:81:13:2d:e4:5d:87:14:
                    8d:65:c6:7a:62:2d:6f:cc:cf:6e:6e:81:9f:26:21:
                    e5:94:74:b7:25:80:76:c7:e6:f8:56:df:e9:89:d8:
                    10:a8:56:a7:29:11:53:b1:53:7e:29:fb:58:65:7a:
                    02:ab:a0:81:1d:91:2d:5b:13:60:fd:d9:7a:bc:a9:
                    79:57:09:2a:7b:5c:f0:d8:b4:df:0d:98:76:e9:29:
                    16:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B1:27:09:CF:38:6A:14:D0:80:51:A7:BE:88:27:D9:B1:DF:81:89
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:8a:77:c4:9f:b2:22:f6:36:76:41:15:db:7f:25:4a:60:88:
         3a:2a:de:16:c3:e3:87:31:44:ac:30:90:4b:ad:c0:5f:5f:7c:
         c1:f8:cb:96:f8:dc:ac:aa:9c:8b:c7:3a:32:52:29:76:43:0d:
         70:3f:63:3b:42:cb:93:78:dc:15:18:55:9c:75:f4:c6:57:5c:
         50:8d:a7:3a:af:be:82:5d:77:49:61:8c:d7:3b:ba:3b:e2:9d:
         88:f0:75:e9:1a:eb:47:52:37:d5:3d:47:31:07:66:6c:b6:94:
         74:96:04:6c:bb:be:2a:49:b2:b3:ba:9c:8b:07:ff:a6:ac:11:
         33:3f:99:04:22:57:03:13:0c:6b:37:d0:ca:6a:89:ab:f6:5d:
         92:4a:a3:25:52:94:cf:36:53:f9:cc:00:3c:21:d2:a7:26:cd:
         a3:fe:06:de:40:d3:b0:fb:73:e0:c7:af:d1:57:49:4c:ec:24:
         44:a3:4e:3d:be:1e:94:6e:dc:70:eb:c1:47:65:c4:b4:46:71:
         25:79:19:5f:13:d0:f3:d9:a4:6a:01:12:82:cd:76:75:40:fe:
         fd:1e:65:0e:8e:41:8c:ec:59:98:e3:c5:c0:c0:33:75:2f:da:
         32:dc:47:32:1d:28:65:a8:04:81:ed:08:e2:67:02:cd:5b:88:
         88:2e:fd:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:06:19 2026 by rpki-client