Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          AUs/cT7nyfWQ0pGH8yU+QJ6feM5ZY/leS2a1TsrocE8=
Subject key identifier:   57:49:EC:FD:05:0D:62:68:2C:12:06:D2:43:43:CD:AC:27:C3:91:77
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       019EB8EA24370A4F0E3B10F15F83FC46A1C5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          080F
Signing time:             Thu 11 Jun 2026 23:00:12 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:12 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:12 +0000
Files and hashes:         1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: jQxC8vZ8Wb5rd2NlksUXkD6yUQjkVEuzzmxs7Tz5A90=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:24:37:0a:4f:0e:3b:10:f1:5f:83:fc:46:a1:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Jun 11 23:00:12 2026 GMT
            Not After : Jun 12 23:00:12 2026 GMT
        Subject: CN=5749ecfd050d62682c1206d24343cdac27c39177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3e:16:05:05:53:30:9f:bb:7f:8e:54:0a:ee:
                    37:20:a1:b8:a5:b9:a3:01:c8:63:ec:27:39:dd:72:
                    78:1c:ba:bf:5c:6c:23:54:70:e8:35:61:94:57:ac:
                    5b:a4:88:f2:04:ed:14:df:98:ee:e2:21:7c:3b:2e:
                    d0:d8:a7:b3:e3:98:c7:15:00:b0:2d:6d:53:de:ef:
                    57:c4:2d:df:5e:38:e6:4f:57:5b:dc:27:c0:d1:1a:
                    df:52:69:68:9c:ad:09:98:dd:11:1b:5b:a7:fa:c5:
                    de:19:0f:b4:8f:16:8d:84:be:30:a5:80:1c:93:39:
                    c5:ca:44:6b:19:6d:07:0a:ac:02:2c:3b:e1:73:f2:
                    48:54:21:3d:b3:a8:4b:8f:a9:f2:90:39:e0:93:e0:
                    79:b3:61:d8:6d:9a:53:99:47:60:6b:8e:2a:74:c0:
                    ba:97:ed:7e:fd:ab:d0:a4:65:af:e6:55:74:d0:c9:
                    72:c2:3e:5d:5d:94:68:84:e6:d1:f9:04:7e:50:83:
                    3f:8e:ec:cf:b9:09:ae:d1:ff:2d:70:e2:a4:16:a7:
                    a2:0a:39:f6:3d:af:00:f9:3a:11:16:59:5e:75:a8:
                    f4:74:4c:9f:03:1c:e3:48:4a:da:bc:bb:4e:95:07:
                    4b:48:e1:3a:54:27:0e:ef:a7:ae:e0:b1:37:b2:23:
                    2d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:49:EC:FD:05:0D:62:68:2C:12:06:D2:43:43:CD:AC:27:C3:91:77
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:20:ea:41:9e:7a:eb:0c:1d:a2:28:cf:20:12:4d:4f:4d:07:
         9a:8b:62:ba:ae:ae:57:39:a9:c6:8d:32:d6:36:09:72:0e:8c:
         74:2e:63:6c:b4:4d:96:95:6d:b2:0b:0b:23:fd:ec:dd:0f:27:
         c6:c1:d9:91:b6:eb:90:fa:6b:81:22:4b:d9:77:cc:d3:1b:c9:
         23:e8:b4:08:ae:12:8e:ff:44:46:04:fd:3f:bd:c5:d2:6b:4b:
         73:8e:b0:ac:2c:4c:6a:3b:01:08:11:1f:c0:43:0a:b6:cd:aa:
         13:4f:50:56:6f:91:0c:cc:f2:00:ab:ba:a6:a6:22:67:af:03:
         d0:c4:93:a5:3f:4c:75:a0:2a:59:a8:ae:c8:20:e1:cc:ae:c0:
         6b:35:c1:c5:74:c6:e3:37:48:6d:8b:4e:f4:18:3a:91:7c:d5:
         e3:a0:0f:f3:38:a1:14:65:c6:99:91:0f:7e:c5:18:52:3e:96:
         3c:cd:5f:57:8f:ea:49:64:df:e1:19:31:42:04:d9:80:e5:be:
         df:8c:54:62:ad:6e:f8:90:07:bc:23:e0:fb:b3:18:22:be:68:
         46:d3:d2:ba:12:48:69:2d:51:db:12:e4:df:97:28:17:df:c9:
         18:ae:fb:ed:38:90:33:12:bd:12:0c:3a:ee:bb:45:74:1f:1a:
         f1:c3:37:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:29 2026 by rpki-client