Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File:                     vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier:          Qg/TZ6BgiSel2FlZQk5iOFXndoThtlI0n9w2vn+TEto=
Subject key identifier:   18:47:28:81:50:3B:AC:68:43:69:7F:44:E5:D3:15:11:20:57:93:E5
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer:       /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial:       019F9FCCC7ED6D319EEF45E3E680281184A0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number:          1961
Signing time:             Sun 26 Jul 2026 19:00:25 +0000
Manifest this update:     Sun 26 Jul 2026 19:00:25 +0000
Manifest next update:     Mon 27 Jul 2026 19:00:25 +0000
Files and hashes:         1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=)
                          2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: /9YOJG96jbqB6cBUUXWfH1OIkLvZXu9q98LWu/AS2c8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 19:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9f:cc:c7:ed:6d:31:9e:ef:45:e3:e6:80:28:11:84:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
        Validity
            Not Before: Jul 26 19:00:25 2026 GMT
            Not After : Jul 27 19:00:25 2026 GMT
        Subject: CN=18472881503bac6843697f44e5d31511205793e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:7a:44:5d:58:62:8c:46:fd:ea:01:5e:e2:c1:
                    7e:4b:29:fd:23:8d:cd:52:58:e6:9f:93:ad:86:b9:
                    a0:2f:0d:6f:36:5d:1f:8a:25:2c:12:a7:17:05:db:
                    a9:71:e8:6a:59:86:30:4a:f1:f5:b0:cc:ff:75:c7:
                    09:77:b8:fb:cd:67:b7:83:18:cd:db:2f:b3:2b:81:
                    18:45:3f:48:0a:b5:20:89:28:25:8c:18:4b:b9:e1:
                    1f:86:72:e1:32:24:0e:8f:a8:0a:af:f1:85:bf:26:
                    dc:e3:15:8e:ba:0b:ae:2e:fb:b5:8c:e1:a1:55:bf:
                    79:34:12:13:e1:7c:ea:9a:47:b4:ad:f7:20:e4:00:
                    76:2f:ef:4a:84:19:c6:29:99:b6:7f:03:eb:34:e6:
                    2e:6a:05:a5:d6:c2:5b:2c:c0:f2:e6:52:c6:58:a1:
                    ff:b9:ed:9c:30:5f:d8:02:a1:01:aa:5b:12:ab:54:
                    3a:b7:9f:92:54:04:9c:2f:1e:24:48:13:c8:7c:9c:
                    a0:40:ad:95:0e:c7:6b:f9:1b:f9:92:3e:01:46:9d:
                    b8:0b:43:a9:fc:c7:8b:1b:3f:d8:a4:20:d5:a1:00:
                    55:3e:64:8c:9f:f0:3c:18:54:eb:7e:40:56:2b:95:
                    e6:d0:5e:ab:30:40:34:c7:0c:23:01:7f:8f:4d:c7:
                    50:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:47:28:81:50:3B:AC:68:43:69:7F:44:E5:D3:15:11:20:57:93:E5
            X509v3 Authority Key Identifier:
                keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:da:e9:02:9c:9e:17:99:e3:ef:66:b0:72:4b:a6:0a:52:a1:
         b6:07:e0:7c:fb:e7:ce:c9:ab:26:fe:95:4d:de:a5:63:7c:d6:
         40:cd:6e:36:4e:a8:b3:89:d5:54:e5:9b:df:05:dd:a7:dc:3c:
         94:f8:5d:6b:89:9e:f0:39:df:4a:9b:9e:42:01:e2:d5:e0:9a:
         2c:28:86:20:e8:80:31:54:f6:03:46:da:25:28:fd:95:8f:57:
         b6:e1:38:1d:7c:24:9e:07:02:d9:4c:ca:44:a0:a1:1c:f4:48:
         12:db:51:d4:47:56:e5:7f:09:8a:6a:2e:19:c6:59:93:0d:ed:
         8f:91:b9:14:56:cc:c9:fc:25:0c:22:88:59:e6:70:f8:51:cb:
         80:4b:d1:3d:09:2a:93:fc:0a:9d:be:e7:a5:f5:12:9b:14:f3:
         f0:cc:93:da:51:b2:87:98:a7:88:d6:b1:af:fb:d7:a0:3a:a0:
         bf:9e:6f:11:96:a3:e5:97:a6:00:99:35:a3:a1:7d:f0:b5:dd:
         67:94:08:e0:db:3b:4c:ca:3f:22:bc:67:38:ce:1e:d7:52:1c:
         c9:89:c6:15:b9:65:8d:4c:dc:61:ed:53:fd:1a:d3:ab:39:82:
         2a:f0:80:a5:dd:27:cc:a5:12:92:6b:cf:33:a1:fd:d1:70:07:
         0b:b8:f0:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:48:35 2026 by rpki-client