Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File:                     vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier:          h8lYM4+J1j68emZYpLJDuBrNaMnk7cmXxOHVsj9asp8=
Subject key identifier:   11:2B:E0:B4:6E:3B:18:B7:0F:DA:D8:82:49:CE:CB:B1:98:E8:F1:BD
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer:       /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial:       019F122EC103BF75D58EC0E7871AB66B4045
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number:          1989
Signing time:             Mon 29 Jun 2026 07:01:21 +0000
Manifest this update:     Mon 29 Jun 2026 07:01:21 +0000
Manifest next update:     Tue 30 Jun 2026 07:01:21 +0000
Files and hashes:         1: ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa (hash: pMbfMn8GoeeG6ylSUjS62TeRwsoRtXBNLz07ylZ0fpc=)
                          2: o3neLyji5IioxyX3Ca35svHR-7M.roa (hash: hvV86OxH4a8ZTKhcyjTKk6ffNETXTnUcBs1BRqExbys=)
                          3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: yuySxlRDnb69S3DqqwhAgVSItiDQNPYxwFJ+t5kggQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 07:01:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:2e:c1:03:bf:75:d5:8e:c0:e7:87:1a:b6:6b:40:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
        Validity
            Not Before: Jun 29 07:01:21 2026 GMT
            Not After : Jun 30 07:01:21 2026 GMT
        Subject: CN=112be0b46e3b18b70fdad88249cecbb198e8f1bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c7:97:49:52:0f:85:42:e3:55:59:63:7f:f2:
                    f5:8c:cc:0b:91:c8:bf:92:44:d8:68:77:58:f1:3a:
                    c4:e3:17:da:0a:73:55:34:a6:43:3e:69:c3:c1:43:
                    cf:11:4c:97:85:5b:31:4c:e9:11:48:9b:b2:91:21:
                    7a:2b:e2:8b:2c:a2:57:37:02:e7:91:6d:9f:f5:f1:
                    87:4b:e5:11:d3:18:11:75:93:8c:60:71:8e:d8:d4:
                    b4:9b:41:85:fa:0a:9a:0a:cd:7c:6d:25:05:24:83:
                    4c:10:ff:81:cc:ca:9c:0b:f4:57:c3:14:98:c0:fc:
                    74:98:7e:3c:98:7d:27:52:10:f8:70:c7:5d:ab:fe:
                    bc:a9:ff:3f:8b:5c:5a:cf:a6:db:15:25:33:18:1a:
                    16:ba:21:9f:bc:ef:0e:f9:ae:e3:ac:e8:87:77:fd:
                    04:ff:7f:47:0c:5a:f9:f0:bc:1a:67:6c:5a:85:81:
                    c7:9a:60:7b:c5:ed:ce:20:49:96:8e:0d:69:85:fa:
                    84:2a:bf:1f:b3:01:43:93:d9:cc:b6:06:72:bc:1d:
                    4b:6c:50:4d:79:49:65:fa:70:96:4a:ee:4d:6c:3f:
                    f4:87:c7:d5:5e:88:7a:4f:b9:28:4c:b0:cf:3d:41:
                    d2:0f:73:1a:f6:d2:f5:9c:56:5a:76:01:23:d3:6d:
                    f1:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:2B:E0:B4:6E:3B:18:B7:0F:DA:D8:82:49:CE:CB:B1:98:E8:F1:BD
            X509v3 Authority Key Identifier:
                keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f9:0d:48:98:2f:05:ec:20:7b:85:0e:a6:0d:62:4a:97:86:
         af:b8:dc:2e:4c:e4:30:ba:0b:90:75:29:7f:98:94:f9:f0:62:
         87:8d:db:35:35:9a:ba:1c:91:88:fb:73:c8:88:d6:c8:35:a6:
         91:3b:59:6f:97:ad:ce:c0:b3:66:8e:9f:3e:55:36:0f:f5:0c:
         5c:97:b4:ad:ef:bc:13:d8:25:f0:80:38:91:8b:ae:eb:57:47:
         64:ac:ab:39:8c:a4:cb:1b:d7:61:fb:33:ff:ff:aa:2b:45:0d:
         59:7b:be:ba:d3:a2:34:82:54:91:97:50:74:b9:8a:5e:3a:5b:
         ff:cd:72:69:5f:05:1d:9d:48:c9:b5:10:16:b7:05:9a:03:a3:
         d2:98:66:cf:68:45:b7:88:02:cd:4f:ec:12:1c:c0:8f:e8:79:
         22:c5:85:32:76:b6:e2:b3:f4:c4:b2:47:3b:f0:42:32:1e:fc:
         d3:88:f0:49:e2:fe:c6:77:a5:3a:f0:b9:f9:90:e5:b4:a1:e7:
         cf:49:1c:69:1c:ea:ce:b1:e8:4a:6f:03:c4:25:3b:e7:35:ae:
         dc:b5:72:6a:e1:5e:7d:57:cb:01:07:21:9d:90:c7:c4:13:a2:
         cb:35:fc:a0:69:40:f8:fb:a8:d9:ca:c8:2f:3a:32:50:d9:95:
         9d:e9:99:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:11 2026 by rpki-client