Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File:                     vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier:          BRlbb28WptJKG2w8tOShis4BY6ywhkyLkj2a1RC+qPM=
Subject key identifier:   56:76:7E:A0:74:4D:0D:60:40:BF:8C:30:A8:A9:5C:FC:76:F6:04:44
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       019FC2C8056BCFF67A76F796A6E2924EB37D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number:          05DB
Signing time:             Sun 02 Aug 2026 14:01:56 +0000
Manifest this update:     Sun 02 Aug 2026 14:01:56 +0000
Manifest next update:     Mon 03 Aug 2026 14:01:56 +0000
Files and hashes:         1: j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (hash: U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=)
                          2: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: v4eSrcbEZy9i2UOxNy79uIJEQgPJGHK2HCf6lTrZmPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 03 Aug 2026 14:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:c2:c8:05:6b:cf:f6:7a:76:f7:96:a6:e2:92:4e:b3:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Aug  2 14:01:56 2026 GMT
            Not After : Aug  3 14:01:56 2026 GMT
        Subject: CN=56767ea0744d0d6040bf8c30a8a95cfc76f60444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:0f:43:04:39:d9:2d:e7:29:5c:1a:c2:45:00:
                    b2:0e:32:71:13:1e:4c:60:ee:52:44:2e:12:6b:84:
                    ef:46:5b:aa:07:fe:10:eb:08:0c:8a:32:23:6e:7e:
                    27:91:9e:4b:ac:6f:1c:4e:36:89:ca:f1:60:dc:a3:
                    06:43:4c:b2:c4:91:2d:b4:94:8c:ff:a0:12:4c:b8:
                    d8:5c:db:e6:3f:8c:d2:39:14:9a:a4:4c:37:bd:b8:
                    cb:e7:e4:4f:5e:67:ad:88:40:cb:57:f3:cf:96:75:
                    80:87:d2:a2:4a:d9:e7:cf:2a:dd:4c:8d:b9:56:db:
                    94:e2:54:d3:9e:c1:bc:ad:fa:88:21:c2:88:be:de:
                    2f:ab:23:d9:6a:a3:65:9f:eb:11:c7:f7:7a:3b:ff:
                    da:31:2e:0a:45:e8:3b:d6:bf:9f:61:f5:78:46:ff:
                    ba:ab:70:30:be:fd:19:2e:03:20:4d:fa:e6:45:d4:
                    f1:ab:04:5b:02:27:1d:a0:39:49:65:d9:d4:cb:1a:
                    3d:2f:0f:26:9d:06:a4:6a:cd:98:80:c0:9c:2f:4e:
                    4e:3e:82:bd:69:39:43:96:2a:80:5f:63:7c:5b:b0:
                    ed:5b:38:4b:78:03:33:63:e8:20:ac:b8:99:3a:0a:
                    95:b4:07:e3:af:ef:4d:26:de:18:98:6f:e8:6c:6d:
                    31:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:76:7E:A0:74:4D:0D:60:40:BF:8C:30:A8:A9:5C:FC:76:F6:04:44
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:f6:3a:a8:10:cc:c3:9f:53:2a:9f:15:b4:66:6b:99:bd:7a:
         24:ba:f3:dd:e2:d3:60:cf:e9:47:b0:84:1b:f5:ae:8c:ec:56:
         54:73:d1:89:58:bb:7c:91:42:86:57:75:73:f2:48:d3:25:c5:
         6a:4e:a0:e6:1b:a7:6a:22:b0:15:e4:58:ba:03:d7:a3:2c:35:
         16:70:0d:a1:c5:f4:1b:37:2a:7d:8f:71:a5:bc:90:b1:42:0f:
         97:be:80:ee:4b:c4:ec:a5:7c:2e:1f:8e:99:99:48:96:09:f2:
         f4:71:c6:52:55:2c:83:b3:59:7a:74:dd:6f:e6:8a:92:a5:53:
         9b:48:5f:4b:83:bc:b9:54:95:bd:ac:3d:68:c4:48:93:27:12:
         32:aa:97:16:b6:b2:df:95:d2:3b:99:24:64:e1:ad:58:61:5b:
         0b:bf:fc:e8:76:ea:1c:e4:82:eb:0c:c3:8e:82:78:82:4f:d0:
         36:f1:35:97:84:03:8c:a1:9c:51:e9:c0:34:67:e3:22:0f:b6:
         79:46:10:2b:60:cf:0c:b5:01:e1:ff:34:0c:4f:f7:f6:1d:91:
         ce:ad:64:e5:09:86:9b:31:0f:09:21:52:54:98:6c:d9:80:f5:
         76:95:4a:14:74:cb:13:d8:2d:1c:29:b9:12:82:7c:16:56:35:
         e0:d6:a0:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 2 18:21:27 2026 by rpki-client