Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
File:                     VbIFm3SNbd1cWgwdNel173uohEI.mft (raw, json)
Hash identifier:          ZjZ9XRgeHUm/6zNnfa/9+CGaxxIeyM3vih2kZybNbv8=
Subject key identifier:   EE:57:74:9F:2F:32:A4:D7:61:49:18:50:40:BC:1B:85:44:D1:A2:70
Authority key identifier: 55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42
Certificate issuer:       /CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
Certificate serial:       019FFEA511F7F15534787ABAB31FFF6FD15E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
Manifest number:          09BD
Signing time:             Fri 14 Aug 2026 05:00:58 +0000
Manifest this update:     Fri 14 Aug 2026 05:00:58 +0000
Manifest next update:     Sat 15 Aug 2026 05:00:58 +0000
Files and hashes:         1: TiOuXl2Q6wOQFGF7jg66qaSdky8.roa (hash: wT30EzG4ZVMuETn0p/EI2klu+YujqvMu+EM2q0pIlpI=)
                          2: VbIFm3SNbd1cWgwdNel173uohEI.crl (hash: lHp7EFgynYiTUdXdMkJr1/e7w5QbR0AaKT3P7EJPFGs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 00:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:fe:a5:11:f7:f1:55:34:78:7a:ba:b3:1f:ff:6f:d1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b2059b748d6ddd5c5a0c1d35e975ef7ba88442
        Validity
            Not Before: Aug 14 05:00:58 2026 GMT
            Not After : Aug 15 05:00:58 2026 GMT
        Subject: CN=ee57749f2f32a4d76149185040bc1b8544d1a270
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:1a:7a:93:45:55:de:a9:97:cf:cf:8d:86:46:
                    75:4d:e1:f9:d2:9f:c1:c4:c9:25:ad:9f:1e:dd:e9:
                    f8:4f:ad:c5:73:4d:25:a5:97:83:a1:65:fa:b1:27:
                    2f:7d:25:55:5d:bc:a6:60:fb:93:37:52:1a:72:60:
                    da:2e:31:73:7f:53:29:b8:df:da:b7:3b:3d:15:10:
                    9c:3d:ea:74:f6:f1:87:cc:f8:ac:d2:07:23:eb:d3:
                    46:47:3f:da:fb:f7:41:86:38:5e:de:ac:7f:a9:69:
                    8b:9d:3c:c5:5b:45:e4:d5:71:c0:09:b9:ab:91:fc:
                    d8:e8:d4:2b:93:27:1b:09:48:6d:bb:42:ea:ac:df:
                    9b:0e:d9:e2:42:4c:08:74:d9:f9:87:23:86:ac:32:
                    bb:90:bf:7b:e0:70:e2:64:cd:9c:6a:36:0e:28:32:
                    c0:fb:f0:31:d7:e0:c2:ec:ba:d9:b7:d7:2e:9f:7a:
                    81:c6:b3:8f:c7:61:c9:29:a2:b0:c1:46:d8:80:0f:
                    e6:50:87:c0:15:fb:d9:85:19:30:78:49:4f:38:2f:
                    64:d3:e6:bc:aa:28:34:63:06:73:77:8a:9b:70:18:
                    4c:0a:f9:eb:34:8d:c1:1c:d6:50:9b:51:73:af:4c:
                    e1:20:3c:7a:bb:f0:1f:e2:c6:e3:f1:ef:5a:e4:58:
                    23:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:57:74:9F:2F:32:A4:D7:61:49:18:50:40:BC:1B:85:44:D1:A2:70
            X509v3 Authority Key Identifier:
                keyid:55:B2:05:9B:74:8D:6D:DD:5C:5A:0C:1D:35:E9:75:EF:7B:A8:84:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbIFm3SNbd1cWgwdNel173uohEI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/f8e67f-8dd1-4f2c-8de9-23064e21d14d/1/VbIFm3SNbd1cWgwdNel173uohEI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0e:25:4f:7a:25:c6:42:b2:ac:c1:59:ea:8c:a3:cf:6c:07:
         5a:f3:dd:b4:7b:ac:c9:5e:ee:62:73:38:d6:76:73:0c:2f:37:
         51:5d:fd:57:9d:64:bf:b3:c5:5a:47:f7:5f:03:1c:1e:6a:d9:
         e8:d3:fc:64:3e:c3:5a:3a:48:9e:c3:08:6f:f6:34:4b:65:93:
         64:d0:c4:4b:ac:2c:79:a8:f2:bd:bb:0c:d0:a7:1a:f7:98:d5:
         21:18:40:9d:2a:01:cd:12:1d:69:7f:ec:13:60:41:4a:6a:0e:
         6b:6f:5d:ec:4c:30:f6:e6:65:0e:e5:87:c9:fa:fe:59:f4:86:
         16:6e:91:0f:71:cf:c6:13:d1:ef:1c:24:3d:47:f1:4d:1b:7d:
         d1:91:56:07:5b:fc:b9:76:d1:73:ec:aa:57:86:ce:05:00:d7:
         93:80:e2:f3:64:22:b1:37:fb:69:4b:06:4a:08:51:91:87:ce:
         ad:c9:14:8f:61:67:38:26:e3:99:fc:0a:e0:12:c7:db:f0:50:
         7e:f6:93:5e:0b:17:2c:fc:7b:e5:aa:d1:c5:19:b3:e4:41:08:
         dd:cd:de:78:a9:92:d4:ec:8b:9b:b6:e1:8a:1e:0f:36:7c:7b:
         d0:b5:43:9e:2d:a6:9d:82:2a:bc:3c:2c:61:9f:09:cb:b8:18:
         e5:4b:79:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 10:10:21 2026 by rpki-client