Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
File:                     VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft (raw, json)
Hash identifier:          GVOVYIjzS8w0JoGYbPLh0FHw04ReQ1/ObH1aGMmN5HY=
Subject key identifier:   F6:DF:EB:9C:0C:EC:DC:20:AA:FD:2C:0B:62:A4:A0:6D:A4:A9:B6:AC
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Certificate issuer:       /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial:       019FA0E0F35E277634551FCCF7DD4857EA06
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
Manifest number:          48
Signing time:             Mon 27 Jul 2026 00:02:04 +0000
Manifest this update:     Mon 27 Jul 2026 00:02:04 +0000
Manifest next update:     Tue 28 Jul 2026 00:02:04 +0000
Files and hashes:         1: 0nv-S98ulLoBxUbeunIyyHswlb4.roa (hash: wXc4tA/MdxZd0ahPnwNsbJs8ojwvndGATxFJmx4jZGI=)
                          2: 4F4qBS1aUOeI4r2IYjZ440HEYYc.roa (hash: 8Hh9bMFx7Obxr6Uz1wbDd5w4WNADW1KEkIRWrr5hPME=)
                          3: 6S9TC5KFrvNh_FP--N7LB0uDWDk.roa (hash: /ZidtI9Los7lnP2xwos5GWLgFkE8A5plIAVg9Rs5yOE=)
                          4: AesIsA5zD6TDjr3LqtdVTNdYf3I.roa (hash: vyS4qfd1NHAIdM7TEHjC217Lv2lF89k5Wv6PxPzeJUs=)
                          5: OdBmG6fU-UEhnEKntxCaonyyB4w.roa (hash: zZOVEl4vhmKrOMSZUOhczKKn2MWTdVMJKBavMTbZMl0=)
                          6: VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl (hash: TbtDjNZYXkKxH8i/LEWrfBTN4bs0epCWIJoS77P5yRY=)
                          7: mFDb7QhlFMpJcx21UYZqsSeYD7w.roa (hash: tW4kQqWznqKEJSkh3cW125W6koEqfnSDc+Z1EK7o2js=)
                          8: sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa (hash: 2uUaKaqnXjYRfBDPcREAVlMI7n+cIkRs0thYn8PfX5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:f3:5e:27:76:34:55:1f:cc:f7:dd:48:57:ea:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
        Validity
            Not Before: Jul 27 00:02:04 2026 GMT
            Not After : Jul 28 00:02:04 2026 GMT
        Subject: CN=f6dfeb9c0cecdc20aafd2c0b62a4a06da4a9b6ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8e:fe:fe:a7:50:eb:2b:87:89:b9:e8:49:3d:
                    ec:63:c5:ca:91:c5:8b:5b:d3:38:8d:f0:57:d6:4e:
                    ba:16:81:ea:6e:96:f6:ff:6c:44:bd:6b:5e:01:ba:
                    e4:a4:02:fb:af:71:92:f0:7e:bd:90:15:d5:d0:e1:
                    20:f9:15:2f:9b:9a:a8:89:10:b0:4c:11:22:bf:42:
                    8a:64:2f:07:4e:32:d7:e9:9a:5f:7d:84:1a:00:ca:
                    59:e3:04:26:17:de:12:ea:57:d5:47:4d:e2:e6:3c:
                    d7:7d:47:79:d5:9b:ac:c0:fd:ac:cc:67:f7:b7:9e:
                    fd:63:dd:74:30:40:6a:ce:85:08:56:28:ba:ea:9e:
                    62:1e:56:7b:63:2f:48:67:14:87:61:e3:55:0f:cd:
                    1e:44:0c:21:9f:6a:3a:a5:ba:ec:e1:84:89:41:88:
                    b7:5e:6d:de:0b:43:1e:f5:6a:c0:3d:7e:48:c1:62:
                    77:a2:8b:73:ca:1e:d7:dd:ad:70:ac:ca:f8:a5:98:
                    a6:7d:50:22:3a:8e:dc:0b:9c:b0:3e:1f:98:b8:cc:
                    cc:e2:6c:1a:77:de:1e:47:a4:de:92:c7:b6:3c:17:
                    05:aa:68:15:5f:26:0b:c6:1a:4b:4c:8a:d1:d9:19:
                    90:e5:99:cb:cb:43:ba:64:ba:0b:41:c9:11:6c:35:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:DF:EB:9C:0C:EC:DC:20:AA:FD:2C:0B:62:A4:A0:6D:A4:A9:B6:AC
            X509v3 Authority Key Identifier:
                keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:d5:2f:c5:5c:b2:5b:eb:89:d5:fc:b8:04:45:1c:c4:32:0e:
         86:fe:8c:ff:bf:17:a8:6a:49:cf:ce:a7:f2:b4:31:32:98:b5:
         a7:9c:8b:9d:32:6c:59:25:38:11:01:3c:f3:e6:9b:98:bb:88:
         08:53:ce:49:84:58:6a:ba:a9:70:db:26:8e:49:82:d1:ed:0c:
         57:e3:2b:3b:5e:b1:e9:c4:c0:92:d2:b9:db:cd:30:32:50:87:
         e3:55:17:12:e9:4d:c6:e1:3e:3b:4a:55:19:0e:75:bb:3f:bf:
         69:fa:04:b4:8d:c6:f4:4c:55:b2:5e:b8:61:9e:b2:9d:63:a6:
         35:0f:0c:76:08:ff:e2:4e:30:44:0d:ed:43:a1:a4:63:6c:1a:
         9c:95:ab:25:82:75:55:db:e3:7d:00:15:ae:25:76:70:b3:28:
         84:4c:75:24:cc:01:49:ec:c1:2b:ad:c6:2e:94:ee:34:83:5d:
         47:41:37:d4:ce:8c:f1:69:c0:7e:75:96:87:60:5f:28:86:07:
         73:58:bd:0d:0c:ae:8a:ef:ea:7d:6b:2c:ba:22:c4:b3:8a:5b:
         b4:ec:4f:33:cf:16:69:58:1e:70:82:c4:ce:2b:53:9d:35:3f:
         36:c3:3a:dd:ef:b7:e2:1a:8c:e4:66:c4:f8:da:51:1f:3a:5d:
         e6:52:15:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+g4PNeJ3Y0VR/M991IV+oGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzBmZjA4OTA3YTk4NGI4ZTc3NjNlN2FhOGE5ZmM4YWY1
MWVkYTYwHhcNMjYwNzI3MDAwMjA0WhcNMjYwNzI4MDAwMjA0WjAzMTEwLwYDVQQD
EyhmNmRmZWI5YzBjZWNkYzIwYWFmZDJjMGI2MmE0YTA2ZGE0YTliNmFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro7+/qdQ6yuHibnoST3sY8XKkcWL
W9M4jfBX1k66FoHqbpb2/2xEvWteAbrkpAL7r3GS8H69kBXV0OEg+RUvm5qoiRCw
TBEiv0KKZC8HTjLX6ZpffYQaAMpZ4wQmF94S6lfVR03i5jzXfUd51ZuswP2szGf3
t579Y910MEBqzoUIVii66p5iHlZ7Yy9IZxSHYeNVD80eRAwhn2o6pbrs4YSJQYi3
Xm3eC0Me9WrAPX5IwWJ3ootzyh7X3a1wrMr4pZimfVAiOo7cC5ywPh+YuMzM4mwa
d94eR6Tekse2PBcFqmgVXyYLxhpLTIrR2RmQ5ZnLy0O6ZLoLQckRbDV/mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbf65wM7Nwgqv0sC2KkoG2kqbasMB8GA1UdIwQY
MBaAFFbA/wiQephLjndj56qKn8ivUe2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMt
YzVlNmQyM2Y4YjA5LzEvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC9iOGVhNWItM2RkNC00Mzc0LWE3OTMtYzVlNmQyM2Y4YjA5
LzEvVnNEX0NKQjZtRXVPZDJQbnFvcWZ5SzlSN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNUvxVyy
W+uJ1fy4BEUcxDIOhv6M/78XqGpJz86n8rQxMpi1p5yLnTJsWSU4EQE88+abmLuI
CFPOSYRYarqpcNsmjkmC0e0MV+MrO16x6cTAktK5280wMlCH41UXEulNxuE+O0pV
GQ51uz+/afoEtI3G9ExVsl64YZ6ynWOmNQ8Mdgj/4k4wRA3tQ6GkY2wanJWrJYJ1
VdvjfQAVriV2cLMohEx1JMwBSezBK63GLpTuNINdR0E31M6M8WnAfnWWh2BfKIYH
c1i9DQyuiu/qfWssuiLEs4pbtOxPM88WaVgecILEzitTnTU/NsM63e+34hqM5GbE
+NpRHzpd5lIVMg==
-----END CERTIFICATE-----
Generated at Mon Jul 27 04:06:37 2026 by rpki-client