Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          nhd/cLWCHuH8sTq3EjoAEVANy+XEDx0hZv7oMsLNdE8=
Subject key identifier:   D2:9D:74:48:19:74:2D:37:F6:71:9C:47:20:16:93:46:C1:81:19:48
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       019F197A46639F2A87B81BD9E4243500F121
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          1523
Signing time:             Tue 30 Jun 2026 17:01:11 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:11 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:11 +0000
Files and hashes:         1: kq-hWSmz-MFl73s5gbREYrag4Mo.roa (hash: F1nBzA9PPwvdvb6M3PbhCg7MtCLOKfzqRqmw7zMeMt0=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: xPleiL/GyhKgS1V8q8tXx+AObjSzR3l2oIhdnaZPv1I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:46:63:9f:2a:87:b8:1b:d9:e4:24:35:00:f1:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Jun 30 17:01:11 2026 GMT
            Not After : Jul  1 17:01:11 2026 GMT
        Subject: CN=d29d744819742d37f6719c4720169346c1811948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:07:7c:14:48:db:16:3a:2f:53:5b:ae:22:a9:
                    40:15:45:b1:af:09:89:18:2d:f8:fe:12:07:34:b4:
                    f2:df:41:3a:ae:ab:a6:8f:ac:5d:a5:46:5f:63:4c:
                    aa:53:78:f4:20:3b:bf:a1:27:dc:f6:5e:4e:cf:96:
                    2b:60:de:7f:86:40:15:11:10:16:32:ad:a8:e0:98:
                    8f:79:5e:15:d4:92:94:9e:04:91:1c:f1:17:23:4b:
                    bb:b7:d7:4a:e6:78:84:1f:39:a5:07:69:00:d8:68:
                    c0:79:c6:97:fa:06:bf:bf:b7:a4:91:25:bf:d6:45:
                    9a:9b:56:8e:a2:f4:82:86:91:20:92:e5:29:d8:2c:
                    99:2d:f2:aa:ff:64:78:e7:a6:2b:9b:7a:4f:60:8b:
                    a3:68:61:e0:f3:bd:94:4b:18:3f:48:d7:4c:b8:72:
                    37:d3:46:12:20:09:af:f1:09:66:1f:7f:a3:31:81:
                    bf:1a:bc:4e:cf:36:06:2c:90:5c:6e:23:3b:65:34:
                    fa:d1:89:a7:77:f7:14:d0:8f:8d:51:cb:98:f4:00:
                    1e:34:ef:cc:f3:4b:8e:34:a8:ee:3e:98:55:46:d4:
                    f2:dc:45:54:78:a0:01:ff:af:ee:95:cd:7d:f4:ff:
                    4c:b2:9f:52:d5:bc:73:58:b3:19:1a:d2:0c:c8:da:
                    0e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9D:74:48:19:74:2D:37:F6:71:9C:47:20:16:93:46:C1:81:19:48
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:72:4d:30:99:83:f6:70:71:e8:6b:f0:31:91:07:8e:43:92:
         83:ab:c2:10:e3:88:b2:0d:7b:d2:aa:db:b0:08:8d:15:90:fe:
         04:7e:c0:c1:1d:ea:b9:21:ef:f2:c1:1a:5e:a3:2a:8f:c9:43:
         93:63:49:0f:0a:42:fe:51:e4:ea:f4:af:28:55:70:c0:d5:62:
         91:d8:f1:08:aa:28:e1:50:9d:db:dc:56:8e:ac:3e:7f:4e:4a:
         82:ec:a9:ac:df:ec:9a:28:89:2e:09:ec:16:38:95:3f:3d:ce:
         ff:bc:da:ec:f3:e8:56:fc:68:07:4c:3a:05:70:61:55:7c:76:
         36:be:04:3c:c4:41:58:82:a1:30:0e:46:b1:4f:1c:43:b1:c4:
         00:0a:c1:fd:f6:b1:9b:f1:65:2c:4b:0c:42:c0:5f:51:5a:a3:
         9d:55:76:bd:e5:87:9c:f7:14:a6:4b:48:bd:e6:4f:95:9d:8d:
         e9:08:44:52:11:3a:02:b2:1e:6e:dc:25:57:35:87:ce:1e:3b:
         05:a0:e7:e5:6c:79:f5:69:00:e2:ac:9d:17:38:f9:08:b4:18:
         61:2a:67:fc:8d:10:da:2d:17:3a:10:9c:0e:b8:9c:b8:00:6e:
         88:03:55:0c:35:a2:1a:d7:42:f7:9e:80:d4:bc:9e:a2:7c:c6:
         2b:dd:b3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 23:34:02 2026 by rpki-client