Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
File:                     vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft (raw, json)
Hash identifier:          4wYG0V1skVYGFjzVAcwiPlskEZYiC9xf4ecvWfH73Jg=
Subject key identifier:   6B:E5:8B:EC:1A:F9:D3:A5:6F:25:CB:BE:71:EA:3E:98:E0:56:EB:CD
Authority key identifier: BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D
Certificate issuer:       /CN=bd175e878d33b47d806f2cf3e04628220935123d
Certificate serial:       019E90934602B336872818C72629DC094D37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
Manifest number:          1944
Signing time:             Thu 04 Jun 2026 03:00:31 +0000
Manifest this update:     Thu 04 Jun 2026 03:00:31 +0000
Manifest next update:     Fri 05 Jun 2026 03:00:31 +0000
Files and hashes:         1: BHxA7XyJ-xcqJnqJX5xZ8srAeoI.roa (hash: KAXKfS5lUAxV6gp81Rf5DkafcSKy01k+oipmTvIZyyw=)
                          2: KiCQzmzMp-dYZTZsdnHQ8YtB-c8.roa (hash: qCTJ0Z0ss61tBjs7gfwTEQIH5p2Cgv1rvo+LUOzgJYU=)
                          3: nl0QqxYkhrgEnGSiBIyps1pAWH0.roa (hash: UJJM3FmfgAAIVk6G6ixYjeSBmXhQkoUQYqScG+rKsI4=)
                          4: vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl (hash: IGy+qlIw0iuLNFUdbD+E+mK2lf8dpC4LQo3WGMY5okg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 05 Jun 2026 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:90:93:46:02:b3:36:87:28:18:c7:26:29:dc:09:4d:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd175e878d33b47d806f2cf3e04628220935123d
        Validity
            Not Before: Jun  4 03:00:31 2026 GMT
            Not After : Jun  5 03:00:31 2026 GMT
        Subject: CN=6be58bec1af9d3a56f25cbbe71ea3e98e056ebcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:83:f4:e6:f5:f3:c0:08:ef:7a:bc:07:40:6b:
                    e7:6e:ec:0c:0a:e7:be:ed:4f:ea:d6:a8:f3:f0:bf:
                    ab:87:5d:e9:e2:a2:e6:86:58:57:f5:32:ff:03:97:
                    7d:6e:46:54:3d:9c:2a:47:95:99:29:ef:23:60:bd:
                    f9:c6:f2:0d:ff:9d:ad:c7:7e:48:ee:d6:ec:6c:32:
                    df:ee:15:df:94:ac:5a:79:a5:e6:c5:19:ee:e2:cc:
                    43:b3:a1:53:b6:2f:d4:72:ba:68:bf:3b:f0:4b:47:
                    e3:54:ed:da:f0:9a:1c:8e:04:c6:1f:07:e4:1e:db:
                    65:cd:d5:d0:bf:b9:9a:1e:30:32:56:df:63:43:98:
                    3f:da:00:40:9f:0b:23:82:28:87:02:d2:eb:ee:e9:
                    1d:29:c5:85:bb:f4:d1:81:25:a0:5e:e2:57:7a:e6:
                    c5:ab:c4:1f:0c:f0:f7:74:73:88:f2:23:0a:5e:f1:
                    c4:a1:95:d8:21:70:c9:70:aa:a4:47:f5:13:43:14:
                    e1:e1:58:63:ad:51:0e:31:c8:c2:79:40:96:4e:06:
                    d2:2b:b5:b9:dc:43:ae:30:5e:9d:31:08:59:4e:53:
                    01:cc:e8:8a:49:9c:ba:1f:d4:4f:09:e1:a5:13:bc:
                    0f:ff:65:3a:c3:27:21:ac:1e:f6:b5:e1:5b:6c:83:
                    a6:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:E5:8B:EC:1A:F9:D3:A5:6F:25:CB:BE:71:EA:3E:98:E0:56:EB:CD
            X509v3 Authority Key Identifier:
                keyid:BD:17:5E:87:8D:33:B4:7D:80:6F:2C:F3:E0:46:28:22:09:35:12:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRdeh40ztH2Abyzz4EYoIgk1Ej0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/57/dda98e-8646-4d07-80ac-a35eaf005af5/1/vRdeh40ztH2Abyzz4EYoIgk1Ej0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:c4:f0:30:03:b0:25:c4:72:6b:94:6e:da:16:4a:9b:a6:b1:
         37:3a:44:2a:7e:1f:db:30:2c:12:73:19:01:39:e4:4d:f6:02:
         51:26:a3:c6:54:c8:c6:b7:b9:a4:cc:95:23:34:ab:74:f9:d0:
         2a:3e:1f:0b:e9:ea:13:b8:e8:cf:6b:7a:ff:c2:ae:d2:d7:2d:
         1b:5b:aa:a0:62:68:dc:37:9b:9a:6c:70:bc:2a:08:5e:d9:ef:
         46:d1:5d:de:28:18:d8:06:4d:3f:c7:78:74:c3:33:06:26:c1:
         ec:40:44:32:76:a3:6b:3f:7a:2f:55:15:15:df:c1:81:b3:b0:
         8b:2e:0b:cb:5b:56:b8:cf:6f:25:20:04:bd:a3:7d:1c:9e:21:
         15:bb:8d:49:36:a2:7f:db:c8:ae:54:8c:8b:f8:fe:16:75:31:
         99:17:75:db:f1:c8:a2:3f:93:89:e9:74:92:68:3d:ec:da:13:
         30:3d:c4:55:3e:86:48:4e:23:8f:f0:14:53:36:17:d9:80:b3:
         a2:14:8d:30:47:5b:91:62:a8:6a:ad:c7:07:29:06:14:9b:d8:
         54:9b:3f:83:44:35:7c:13:a3:78:ab:38:d9:b5:81:64:71:dc:
         f8:bd:aa:d9:b6:48:85:56:1f:62:0c:a5:da:81:60:e4:67:f0:
         21:cb:62:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6Qk0YCszaHKBjHJincCU03MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTc1ZTg3OGQzM2I0N2Q4MDZmMmNmM2UwNDYyODIyMDkz
NTEyM2QwHhcNMjYwNjA0MDMwMDMxWhcNMjYwNjA1MDMwMDMxWjAzMTEwLwYDVQQD
Eyg2YmU1OGJlYzFhZjlkM2E1NmYyNWNiYmU3MWVhM2U5OGUwNTZlYmNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIP05vXzwAjverwHQGvnbuwMCue+
7U/q1qjz8L+rh13p4qLmhlhX9TL/A5d9bkZUPZwqR5WZKe8jYL35xvIN/52tx35I
7tbsbDLf7hXflKxaeaXmxRnu4sxDs6FTti/UcrpovzvwS0fjVO3a8JocjgTGHwfk
HttlzdXQv7maHjAyVt9jQ5g/2gBAnwsjgiiHAtLr7ukdKcWFu/TRgSWgXuJXeubF
q8QfDPD3dHOI8iMKXvHEoZXYIXDJcKqkR/UTQxTh4VhjrVEOMcjCeUCWTgbSK7W5
3EOuMF6dMQhZTlMBzOiKSZy6H9RPCeGlE7wP/2U6wychrB72teFbbIOmpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGvli+wa+dOlbyXLvnHqPpjgVuvNMB8GA1UdIwQY
MBaAFL0XXoeNM7R9gG8s8+BGKCIJNRI9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJkZWg0MHp0SDJBYnl6ejRFWW9JZ2sxRWowLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny9kZGE5OGUtODY0Ni00ZDA3LTgwYWMt
YTM1ZWFmMDA1YWY1LzEvdlJkZWg0MHp0SDJBYnl6ejRFWW9JZ2sxRWowLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ny9kZGE5OGUtODY0Ni00ZDA3LTgwYWMtYTM1ZWFmMDA1YWY1
LzEvdlJkZWg0MHp0SDJBYnl6ejRFWW9JZ2sxRWowLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAscTwMAOw
JcRya5Ru2hZKm6axNzpEKn4f2zAsEnMZATnkTfYCUSajxlTIxre5pMyVIzSrdPnQ
Kj4fC+nqE7joz2t6/8Ku0tctG1uqoGJo3DebmmxwvCoIXtnvRtFd3igY2AZNP8d4
dMMzBibB7EBEMnajaz96L1UVFd/BgbOwiy4Ly1tWuM9vJSAEvaN9HJ4hFbuNSTai
f9vIrlSMi/j+FnUxmRd12/HIoj+Tiel0kmg97NoTMD3EVT6GSE4jj/AUUzYX2YCz
ohSNMEdbkWKoaq3HBykGFJvYVJs/g0Q1fBOjeKs42bWBZHHc+L2q2bZIhVYfYgyl
2oFg5GfwIctiHQ==
-----END CERTIFICATE-----
Generated at Thu Jun 4 13:08:13 2026 by rpki-client