Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          uNTkODfKpo1m7nAdd1qcevBipwq9hYHIgXpGTZZ5oho=
Subject key identifier:   73:31:2C:3A:E7:4D:1E:92:CD:53:08:7A:52:68:62:8F:26:A9:BF:70
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       019F13E68BA88480C34B87AEE29FBA5E84CA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          1987
Signing time:             Mon 29 Jun 2026 15:01:43 +0000
Manifest this update:     Mon 29 Jun 2026 15:01:43 +0000
Manifest next update:     Tue 30 Jun 2026 15:01:43 +0000
Files and hashes:         1: 9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa (hash: 0t8+O9jLtAo/1H+w73CAi6kuuXrnIZhfR+LlCnD8Ix8=)
                          2: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: lDxyV+B8dc3SZ3b0az/E9xEgb+K/zvjRITWeuzLdlYY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 14:12:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:13:e6:8b:a8:84:80:c3:4b:87:ae:e2:9f:ba:5e:84:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Jun 29 15:01:43 2026 GMT
            Not After : Jun 30 15:01:43 2026 GMT
        Subject: CN=73312c3ae74d1e92cd53087a5268628f26a9bf70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ee:41:c0:0e:e2:ed:e2:2e:d2:fd:c5:63:9d:
                    e9:47:0b:32:31:30:98:87:06:03:eb:3c:c5:50:cf:
                    51:8e:3d:60:04:27:ab:d3:08:a0:47:d1:18:cf:3d:
                    ff:df:e3:57:85:f9:58:c7:fd:3f:b9:ba:a8:52:0d:
                    68:9a:2f:48:15:66:ae:d9:3d:42:8f:55:9b:73:07:
                    22:b0:42:6a:0b:48:c0:9e:0e:5f:09:64:8e:f2:3d:
                    83:e6:3b:50:40:51:ce:54:f4:a6:7b:78:33:e0:c1:
                    31:c7:e9:cd:23:b4:b8:2e:2e:85:12:e4:c6:84:5d:
                    bf:81:8e:cb:8c:48:45:ad:33:7f:97:c9:f8:4a:45:
                    50:aa:a8:bc:e6:a7:2f:86:f9:a5:4b:c7:a7:ee:ba:
                    c4:34:54:d5:f5:0c:22:92:40:fc:dc:b8:f8:dd:4e:
                    dc:81:44:5e:ec:a8:b7:44:10:f1:c8:8e:e3:e4:a0:
                    0c:bd:39:db:be:a4:d0:8d:82:81:a0:ea:d4:45:0f:
                    47:f6:1c:f5:ed:e0:4e:a8:28:99:6e:9e:13:c3:cc:
                    b7:9f:89:fc:e3:29:40:ef:94:d4:89:53:c5:5a:91:
                    79:bc:0d:ee:f0:c2:47:04:39:c4:9a:9f:11:59:3c:
                    8d:cb:6c:b9:6b:c5:01:19:4f:58:a0:20:cd:62:db:
                    c5:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:31:2C:3A:E7:4D:1E:92:CD:53:08:7A:52:68:62:8F:26:A9:BF:70
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:1e:d3:14:18:b8:8d:cd:2f:9e:f8:c6:f3:12:24:83:2b:c0:
         51:d9:4e:ee:5c:72:eb:03:4e:bd:ab:97:ef:9b:8f:ac:3b:bf:
         e8:0b:e6:bc:96:2d:11:68:09:f7:24:85:7e:8e:77:c0:65:6d:
         9e:db:22:76:ea:e5:03:29:0f:96:b3:c7:4b:86:25:b9:8f:b2:
         6f:dd:80:f9:a5:90:ad:e7:7d:3f:a9:e0:9e:af:fd:75:5e:8f:
         35:5c:a0:ce:b0:40:2e:8c:1f:35:a4:98:e5:24:f6:48:00:cf:
         83:74:d9:98:8a:cc:b9:12:9b:fc:8f:fc:b4:3a:74:88:4d:b9:
         1b:fb:b7:de:74:9c:6c:c8:34:83:83:2c:19:03:cc:b1:94:a8:
         13:9b:f9:20:d2:55:c8:5d:79:1d:6b:c7:bc:7e:f8:b4:c1:e9:
         ad:de:a7:77:07:96:0a:4b:1b:1f:1d:a9:75:af:31:ee:3b:a0:
         e4:1b:67:dd:d4:ea:1b:95:c0:e8:e9:38:fd:22:89:05:53:dc:
         2e:a9:5c:6e:2a:4e:70:88:a7:a7:a1:79:8d:47:91:07:77:a5:
         b0:a8:0d:e2:ff:ca:e3:5e:83:bc:87:1b:5f:dd:b5:52:6c:81:
         43:3c:c2:41:09:d7:8c:bb:d9:07:dd:78:6b:8f:8e:56:f2:cb:
         e2:74:18:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 19:32:59 2026 by rpki-client