Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File:                     VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier:          60CwspQ6cjxn5njftNFUvF+4PYDjJxTHDZmUcUd0J0U=
Subject key identifier:   A7:95:CA:7F:58:90:61:31:7D:41:50:E4:4D:E8:7B:20:7F:06:49:31
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       019EB6FBDCF1EBA0927F149458CC53E135DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number:          0C38
Signing time:             Thu 11 Jun 2026 14:00:19 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:19 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:19 +0000
Files and hashes:         1: CzItBfhQLOr19TXshG8xIrAepZo.roa (hash: ZsL/eMEoqm5jb00MeORDPPBuXgnALTUh1B2vg5ljlWY=)
                          2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: VDMdzqyX34k5dbjrs8t3jd9LTcABKQR6jvOaSP0n/bQ=)
                          3: WXvsTnxMt47LTjXSgDyfYfbpykk.roa (hash: u83fQhVuD38r45zKJ9wB4bVcPJz4aOcg9/qnwLnAsDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fb:dc:f1:eb:a0:92:7f:14:94:58:cc:53:e1:35:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: Jun 11 14:00:19 2026 GMT
            Not After : Jun 12 14:00:19 2026 GMT
        Subject: CN=a795ca7f589061317d4150e44de87b207f064931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:13:09:f2:b5:02:15:96:a3:19:5b:56:8d:a3:
                    a9:34:26:ed:7e:6a:6d:09:33:c0:61:11:7e:d7:4e:
                    5b:7b:0b:89:d1:10:9f:16:19:88:b9:85:4d:70:77:
                    83:71:c2:79:2d:e0:36:0a:28:fe:fc:88:d4:f0:f5:
                    81:48:f4:6e:b4:0e:5f:a2:cc:72:3e:05:55:ff:f7:
                    a5:48:61:f5:f8:e0:c8:9b:7b:26:6a:a0:7a:49:e2:
                    57:6a:0e:0b:70:a0:72:a2:12:1e:d3:f7:09:36:bc:
                    f3:d9:da:00:a8:fe:fe:ec:e0:c4:8b:f3:0d:db:70:
                    77:56:a6:9b:33:44:3e:48:ce:df:d2:d4:d7:96:3a:
                    3b:9a:42:18:f9:2c:ff:2b:e3:d2:31:72:50:e2:db:
                    c4:f2:66:d5:cc:25:da:41:32:17:62:ec:34:a6:af:
                    68:68:c5:5d:ec:21:21:20:b5:8d:13:ef:47:2f:48:
                    5c:fb:55:ee:43:b2:c4:ab:8b:c5:7f:e2:f7:2d:e2:
                    37:26:97:c6:65:69:78:c7:fd:17:d1:2b:e1:03:7c:
                    51:0c:57:07:e7:f4:48:d5:39:8a:4d:31:1d:7c:99:
                    28:09:26:de:b6:c0:d7:3a:0b:4a:a5:75:64:08:90:
                    ce:69:3f:5e:14:5c:ff:9c:86:4a:24:c6:7e:ce:92:
                    24:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:95:CA:7F:58:90:61:31:7D:41:50:E4:4D:E8:7B:20:7F:06:49:31
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:f4:b8:7e:07:c0:ef:25:51:e9:ae:3a:06:75:5b:87:c7:fe:
         b3:ca:2f:62:6b:2b:59:7e:66:5a:20:80:ef:77:99:d7:43:d3:
         aa:2b:9a:0f:35:47:a4:a7:2a:44:0a:92:a9:5d:a7:4e:b2:14:
         15:ee:22:52:f8:d0:d2:d1:e3:1a:91:5c:b5:bf:ef:12:e6:c9:
         93:c2:62:e1:a8:71:43:56:c9:4d:79:c1:ec:d4:3a:3b:ef:a0:
         cc:ae:34:9e:ed:e5:4a:d9:b7:9a:78:dd:e5:9b:81:d5:cd:ef:
         b2:a7:b2:78:b0:70:8c:42:7e:1a:70:a0:cd:7a:e3:1b:99:71:
         9c:15:30:ea:0d:47:fa:17:95:d6:77:3a:91:45:24:76:b5:d8:
         24:98:9d:07:c4:10:53:fe:e5:ff:23:b0:d4:dc:dc:e7:4c:dc:
         f3:7b:2f:e3:30:ee:a7:8e:77:8b:2f:24:c6:e2:4f:9a:c5:06:
         8b:04:b6:e1:12:0e:44:09:bb:cb:d2:95:60:a7:87:49:b6:6c:
         44:2b:7c:b4:7b:86:ef:64:0a:69:5a:4d:39:74:a9:f4:dd:bb:
         68:2f:c0:2a:f4:6c:f7:31:5c:95:32:51:d4:3c:79:17:9e:d3:
         b4:04:48:a6:8b:3d:48:45:45:70:44:62:04:f6:b8:0e:df:66:
         36:c0:15:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:14:55 2026 by rpki-client