Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
File:                     VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft (raw, json)
Hash identifier:          cLlFVTZDXQ+XgO2ON+O9C2We9Ln4uCNg9LOnziZFNOM=
Subject key identifier:   5C:F0:72:DD:8F:7D:68:97:35:43:D0:14:3F:90:8C:FB:AF:BE:78:6C
Authority key identifier: 54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
Certificate issuer:       /CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Certificate serial:       019F5890D8E88DFB8296D433917AA4B997D9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
Manifest number:          017F
Signing time:             Sun 12 Jul 2026 23:01:55 +0000
Manifest this update:     Sun 12 Jul 2026 23:01:55 +0000
Manifest next update:     Mon 13 Jul 2026 23:01:55 +0000
Files and hashes:         1: 6x7BJ0F-meGk9fhXJNWGJnuegOw.roa (hash: ejX+MPtDK3gTtFG1432bC6M7t7QPNbrVRz6iGDt2Hfo=)
                          2: VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl (hash: DLuOf+33OMvZRm7zWeEkF54bX4cLVF+6sSyeb30ocx4=)
                          3: oTR56cyeKnrqB4eLr9IFRqGiB88.roa (hash: snlvASDIyvudTtl4HEkxIFNnIhgqIkS7EP587pwAfiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 13 Jul 2026 23:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:58:90:d8:e8:8d:fb:82:96:d4:33:91:7a:a4:b9:97:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
        Validity
            Not Before: Jul 12 23:01:55 2026 GMT
            Not After : Jul 13 23:01:55 2026 GMT
        Subject: CN=5cf072dd8f7d68973543d0143f908cfbafbe786c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:33:43:6d:70:58:ce:f6:15:b2:50:e9:90:68:
                    71:e5:4b:5c:f1:18:3b:a9:52:68:ad:f5:e1:91:34:
                    bf:22:96:38:09:80:71:17:6d:39:cb:ae:16:7d:fa:
                    ee:1a:ff:4d:65:a2:2f:3e:59:9a:61:ee:e1:c3:05:
                    05:ce:09:cc:ee:1b:d5:69:16:a3:e8:2d:18:cf:db:
                    da:9e:a2:31:22:be:c8:25:9d:97:85:a2:b8:3e:07:
                    45:72:53:50:a6:93:8a:c2:b8:55:75:3f:14:a2:6a:
                    f9:0b:1b:b2:76:3a:a6:2a:d4:fa:40:e0:ed:4b:b1:
                    2e:7e:9a:db:aa:17:71:06:46:f1:c9:d5:4f:ee:73:
                    f3:23:c5:4c:cb:a9:fd:77:96:f2:52:46:3b:ab:5a:
                    28:ec:1b:9a:c3:ac:dd:5e:de:b1:e4:ac:0e:8b:4d:
                    20:52:34:b0:b0:60:fa:16:09:f7:da:7f:cb:a7:68:
                    e3:2d:50:bd:d4:63:e2:cf:4b:a7:95:97:4d:ff:d0:
                    5d:c4:a1:d6:24:42:72:9c:7e:5d:d8:ba:51:4c:94:
                    e0:e3:9d:6c:45:d4:f3:be:69:8d:27:72:ba:8c:fa:
                    73:d8:ab:75:f8:b3:fa:58:58:aa:1b:c8:eb:8b:14:
                    af:ab:48:fe:0e:2d:df:95:a8:80:e8:d8:37:69:34:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F0:72:DD:8F:7D:68:97:35:43:D0:14:3F:90:8C:FB:AF:BE:78:6C
            X509v3 Authority Key Identifier:
                keyid:54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:41:2e:9b:45:30:00:bf:6f:5c:ff:17:2c:d9:71:a1:e5:22:
         52:16:29:17:de:27:36:7d:4c:0e:a5:15:a8:77:c7:98:50:27:
         37:c8:06:85:bc:9f:f2:13:8f:79:ee:b4:e8:8d:83:01:33:12:
         f6:3c:52:57:dc:9f:5d:aa:0a:7a:f1:87:f1:b9:c6:85:e4:00:
         e5:18:dc:81:01:9c:96:17:64:95:98:2a:d4:9e:5f:a8:80:99:
         c2:f5:b7:2f:26:92:db:6c:51:d4:82:ae:6b:a3:41:04:8e:08:
         7d:12:b9:2c:a0:e4:75:4c:e6:4d:5d:df:50:c6:a0:ef:fc:91:
         5b:f1:b6:12:76:26:77:8d:7d:2c:48:68:f7:b8:89:5e:bb:36:
         b3:52:d2:20:3a:d9:c2:b6:86:f8:62:29:e5:d7:b5:5b:79:8b:
         ab:bd:ed:95:97:93:70:82:46:a2:22:c7:09:e0:af:f1:fb:d0:
         4d:a4:6e:e4:f0:cf:db:86:b2:8b:bb:3c:c9:f6:69:56:15:d8:
         9c:af:9f:d2:10:e6:cd:80:0f:52:df:92:2e:a1:31:92:53:83:
         08:35:46:2b:70:46:72:ec:c3:41:13:88:05:10:05:56:f9:20:
         c1:a7:a0:15:06:63:dc:ca:be:c1:f9:f5:53:ec:45:8c:dc:de:
         01:69:47:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 07:24:47 2026 by rpki-client