Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File:                     vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier:          n4nybXUTEIYeGetJ5Wl6ywZKVXUcZn4h3cuTpI+FOOw=
Subject key identifier:   B9:D4:45:5B:5B:9F:91:8B:82:39:5E:FB:96:DC:F1:46:1C:E9:5E:C3
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer:       /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial:       01A002816E3067FDCC2AE6A883FCAE1AF192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number:          02C5
Signing time:             Fri 14 Aug 2026 23:00:31 +0000
Manifest this update:     Fri 14 Aug 2026 23:00:31 +0000
Manifest next update:     Sat 15 Aug 2026 23:00:31 +0000
Files and hashes:         1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=)
                          2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: UizWXbHLKow3sXF/nleiTDAbNScUoEz6/1lMkm9T8i4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 23:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:6e:30:67:fd:cc:2a:e6:a8:83:fc:ae:1a:f1:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
        Validity
            Not Before: Aug 14 23:00:31 2026 GMT
            Not After : Aug 15 23:00:31 2026 GMT
        Subject: CN=b9d4455b5b9f918b82395efb96dcf1461ce95ec3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9e:b6:e0:cc:7b:10:a9:dc:41:62:3c:30:f4:
                    0b:15:c8:25:bc:1e:c6:9d:aa:64:40:7c:e8:e8:ce:
                    8c:e2:ac:c8:b1:0f:fa:c4:67:a8:9f:8d:98:93:5d:
                    31:ec:94:78:b2:23:2e:f4:77:7c:5e:34:8b:ce:92:
                    a2:97:82:9b:d9:03:ce:44:3f:77:c8:fd:ae:16:6f:
                    4f:ce:3d:70:19:ad:ba:5c:a1:18:c7:54:79:08:db:
                    e8:95:44:a4:7d:f8:0c:f3:68:e8:e4:f1:7b:b2:1d:
                    65:2b:39:cc:6c:e9:a6:d9:1f:2c:47:63:bd:42:e9:
                    0e:d0:17:f7:f3:a6:4d:fa:b7:3b:e2:43:d5:d6:63:
                    2e:17:1c:81:ae:b2:8b:2e:c5:65:a7:0e:fa:72:ba:
                    87:c1:75:33:21:87:67:fd:f1:52:13:ee:dc:27:5c:
                    d8:3b:d3:76:e2:e2:a9:41:aa:b9:30:4d:36:81:25:
                    e7:b1:53:a4:51:79:29:34:ce:b4:09:8c:6f:ed:aa:
                    18:82:d4:c5:27:02:12:39:51:ce:5c:26:5a:3f:fd:
                    90:59:bf:da:db:01:52:a5:9c:b7:03:2c:ff:fe:77:
                    63:85:11:0f:d8:bd:f9:22:9e:27:0d:65:0f:db:c0:
                    a9:76:71:e7:c0:e7:f8:52:fc:ec:8e:65:14:91:49:
                    c3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:D4:45:5B:5B:9F:91:8B:82:39:5E:FB:96:DC:F1:46:1C:E9:5E:C3
            X509v3 Authority Key Identifier:
                keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f8:5f:28:46:81:59:50:f2:04:f4:56:92:17:ff:0c:07:93:
         20:89:58:38:61:e7:a2:9b:87:5e:a7:27:e6:ab:35:81:e1:c0:
         82:ab:1e:74:af:c0:36:4f:c8:31:79:39:b7:9e:3f:34:11:33:
         e8:7f:81:d3:f4:c7:94:26:bf:a0:aa:ec:20:83:cf:40:06:85:
         b8:a5:0d:cd:61:2c:3c:f1:01:d9:1b:84:d3:c3:f3:32:15:9c:
         a5:a0:39:03:62:83:e3:29:a3:df:34:9c:5c:21:ac:ee:02:0b:
         b6:89:a3:79:a2:50:f7:39:eb:e5:ed:7e:47:32:59:2a:27:fa:
         1c:a5:06:99:82:2d:d5:d6:ac:08:6c:b5:bb:7d:87:70:07:a3:
         77:a4:a4:87:c5:63:ed:cb:e3:f2:19:d6:9d:2c:8a:fb:17:32:
         b5:bb:b2:5f:08:7b:6a:26:bb:fa:7b:cc:86:dc:42:58:e3:81:
         29:7d:eb:18:d4:df:76:4f:8a:23:03:67:e6:36:14:15:db:a8:
         2f:d7:e4:b3:63:d2:ed:41:4e:61:a2:b9:9f:19:c1:ee:7e:d7:
         6f:ef:68:fe:cf:d0:00:fb:3f:22:90:cf:1f:60:ce:d4:71:a4:
         19:bb:19:9f:e0:e9:88:75:dd:10:bc:ba:83:fd:21:52:96:b6:
         df:c4:44:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:39:44 2026 by rpki-client