Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          BdYJ9+WCIIVjy/PU2HZP8GdSn2Z1cDsy2ivlSZNV1pI=
Subject key identifier:   D0:03:49:7E:4E:71:EE:2C:B4:44:7B:22:33:E7:67:03:57:93:ED:E9
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       01A001DD6C8120A4796FD5BB16948BE72FD5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          128E
Signing time:             Fri 14 Aug 2026 20:01:23 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:23 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:23 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: c/fKpxS8V043uTck2VtJmQh+FJTASncpe7VIgtY18qM=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:6c:81:20:a4:79:6f:d5:bb:16:94:8b:e7:2f:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Aug 14 20:01:23 2026 GMT
            Not After : Aug 15 20:01:23 2026 GMT
        Subject: CN=d003497e4e71ee2cb4447b2233e767035793ede9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:3d:28:04:9e:a5:2f:e9:53:b6:d1:c8:c8:a7:
                    63:a9:62:07:f7:80:79:83:27:a9:54:39:d4:1d:a4:
                    74:43:cf:08:9e:eb:95:56:91:c4:92:71:46:43:84:
                    ef:90:fc:30:36:a3:7d:12:06:a0:ef:e0:6a:f2:0f:
                    b6:d4:14:6f:4f:ca:ae:a5:34:cb:fe:9a:29:92:92:
                    63:25:19:a1:22:c0:1a:e7:11:d1:97:bf:1a:e2:24:
                    0d:27:17:e2:f9:61:be:f7:e7:77:ad:6d:b1:b2:ca:
                    30:49:82:37:54:7a:f8:5e:f7:cd:2a:4c:4e:2e:35:
                    68:d7:1e:63:70:33:07:83:86:7d:e4:4c:47:65:8a:
                    a7:6c:1e:ed:e8:27:cd:df:04:3f:7c:59:37:3b:73:
                    0e:ed:97:54:2e:80:e9:14:bc:c5:d1:38:9c:65:f4:
                    ef:76:01:42:0f:1b:5e:ab:89:2c:80:84:bd:16:13:
                    2d:0a:6e:62:c5:25:91:27:8f:af:cf:50:99:84:18:
                    fe:6d:5a:52:37:2b:72:54:b3:6b:36:56:6a:71:c7:
                    f5:ae:a4:ec:0c:62:37:1d:53:b7:ae:28:84:90:18:
                    b5:48:44:3d:a2:a2:b0:ef:d0:e7:15:b5:35:ae:51:
                    d7:28:10:9b:64:ad:3d:5e:63:9f:42:1b:14:19:dd:
                    99:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:03:49:7E:4E:71:EE:2C:B4:44:7B:22:33:E7:67:03:57:93:ED:E9
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:e2:b5:67:34:d8:76:7a:84:34:58:37:c0:df:f7:6f:a0:f8:
         ea:7d:72:67:48:cd:f1:a8:d7:b8:3a:30:37:f7:33:b0:16:16:
         da:15:6c:d0:91:c9:60:f0:5f:4c:1e:5e:73:4a:60:0e:1e:88:
         04:bc:9d:06:c4:da:72:01:4f:cc:9e:e6:22:cb:e6:23:3c:d2:
         d3:c8:34:2d:08:f5:5b:61:d0:ed:bc:e4:77:50:0b:89:62:80:
         41:cd:be:f5:c6:b7:27:05:eb:59:bd:d2:8d:ff:71:81:55:e9:
         50:88:0d:0a:d4:aa:ce:4c:45:a3:54:fc:37:5c:95:4f:48:28:
         4e:15:73:7d:40:c2:a9:e2:b5:d9:dd:8a:a3:b3:23:3a:87:3f:
         4b:8e:50:2d:08:2f:fd:73:a9:46:1d:62:d9:80:00:bb:63:db:
         19:32:2a:6e:2d:3b:47:a9:13:a6:ec:15:49:ed:6a:81:74:ed:
         b7:b9:9a:a1:06:c9:a3:4b:a0:f7:cd:27:1f:93:59:94:c9:80:
         de:99:87:4d:c6:b8:1e:c0:06:12:b0:52:e7:61:9c:17:3d:23:
         1b:c1:d5:94:09:f5:2e:6a:23:02:ce:88:59:f6:f3:51:cd:b4:
         21:53:eb:0f:94:ef:cc:fb:e5:c0:a8:1d:84:66:14:a6:26:e7:
         b9:e7:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:30 2026 by rpki-client