Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          mhS96HK2boItxuTSO+kOgsSe1mUcMmVQ5AFKyveOmDo=
Subject key identifier:   CD:3C:55:39:0C:26:F5:9D:5E:01:9E:01:18:D0:70:8A:1F:C8:A7:0A
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       019FA3A9C12ECCE544E2C67FD83367238317
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1961
Signing time:             Mon 27 Jul 2026 13:00:38 +0000
Manifest this update:     Mon 27 Jul 2026 13:00:38 +0000
Manifest next update:     Tue 28 Jul 2026 13:00:38 +0000
Files and hashes:         1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: Z84i8vm8cOiGXfPd0iDoL+ck1UjhjQU2AmPaLLsRvoo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a3:a9:c1:2e:cc:e5:44:e2:c6:7f:d8:33:67:23:83:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Jul 27 13:00:38 2026 GMT
            Not After : Jul 28 13:00:38 2026 GMT
        Subject: CN=cd3c55390c26f59d5e019e0118d0708a1fc8a70a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a1:c5:e0:56:18:06:99:3f:4d:e7:1d:c3:a9:
                    4e:3b:4d:44:d9:e1:4c:dd:da:e3:3b:10:dd:20:ee:
                    85:20:58:85:a5:62:c1:5a:51:0d:91:9e:87:a6:2e:
                    6f:5b:23:64:24:06:bc:a0:13:42:8b:b5:c1:d4:5d:
                    c0:91:21:c5:11:da:6e:3c:87:cc:2d:25:e5:e4:62:
                    1c:cf:41:d0:6b:55:8f:a3:67:d4:27:30:ff:17:19:
                    3f:6d:0b:45:9a:b1:40:95:58:64:86:8b:aa:f2:32:
                    76:e7:0e:07:5c:6f:d7:58:1f:7c:64:8c:32:27:d4:
                    85:fc:70:25:27:62:c3:90:bc:a4:7c:c1:fb:ec:2a:
                    a5:c1:6b:a6:29:97:57:bb:d3:c7:2b:6f:f5:c2:79:
                    8e:96:1a:23:34:c3:90:6e:71:27:5a:2a:fb:0f:bb:
                    1b:20:97:56:07:fc:bd:4e:28:b6:d5:65:62:82:b8:
                    1c:b6:58:bd:0c:d5:92:77:a4:4c:d8:80:88:20:27:
                    8a:17:6a:26:cd:d3:c3:dd:25:84:36:13:ec:c5:67:
                    da:58:f7:2d:bf:a5:09:9e:ed:91:61:7d:1b:f7:97:
                    b6:19:7c:b7:62:4c:0e:e6:eb:a6:dd:b3:77:fe:de:
                    44:1d:91:89:51:24:75:37:d2:c7:51:e5:75:b3:32:
                    c4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:3C:55:39:0C:26:F5:9D:5E:01:9E:01:18:D0:70:8A:1F:C8:A7:0A
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:91:33:11:eb:db:49:0c:81:01:7a:58:60:a8:52:69:21:23:
         b7:0f:df:e0:00:17:b8:fd:53:2d:5c:78:b5:0d:3b:c1:30:ab:
         92:0e:4d:72:13:37:14:07:06:17:eb:96:59:aa:6c:ff:e1:b2:
         3f:05:74:a4:39:8a:ce:83:1f:e8:8a:8f:b7:ac:a0:56:bf:a4:
         f9:09:25:39:de:4c:3c:db:12:c2:d7:56:05:4a:02:5b:91:eb:
         3b:66:82:6c:0d:87:98:1b:6b:1f:86:34:0d:62:16:62:6a:1d:
         9c:59:bd:b3:6f:a2:2f:b0:08:f8:b3:60:b6:f6:06:43:09:b6:
         5e:f2:54:03:db:40:63:44:01:36:f0:3c:1f:3f:df:69:70:8c:
         26:01:0e:88:a5:13:c3:2a:9c:9f:24:71:ed:1a:fe:0c:6e:73:
         31:d2:79:04:ac:a4:fc:f6:13:a0:ed:32:cc:b1:09:d7:8a:42:
         96:3e:0c:0a:79:d4:14:98:26:c6:43:5a:9a:ef:31:93:f5:62:
         4c:a0:ef:ef:8c:0d:41:04:7c:71:04:02:ca:78:ea:e0:ef:be:
         90:8a:9c:47:d2:bb:73:26:60:86:fe:c7:92:0a:13:e0:2e:77:
         84:c1:26:07:c7:bd:05:cb:f8:86:c9:94:00:6f:25:9f:64:cc:
         a5:4e:7c:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 14:21:50 2026 by rpki-client