Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          YhECyTvv0Tz73J8GKcQUVpxXpTuwk+sGrD2gjelKxWA=
Subject key identifier:   3E:68:38:97:20:78:0B:4E:4A:52:62:9F:68:65:8C:7C:3F:55:92:4C
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019D38D315F791137507CD749B68B6E58371
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          1428
Signing time:             Sun 29 Mar 2026 09:00:50 +0000
Manifest this update:     Sun 29 Mar 2026 09:00:50 +0000
Manifest next update:     Mon 30 Mar 2026 09:00:50 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: VGvsByqID00qTVpe9QbDDiqvucIEe4Z2I+kjMXMRBLs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 30 Mar 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:38:d3:15:f7:91:13:75:07:cd:74:9b:68:b6:e5:83:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Mar 29 09:00:50 2026 GMT
            Not After : Mar 30 09:00:50 2026 GMT
        Subject: CN=3e68389720780b4e4a52629f68658c7c3f55924c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:99:55:71:73:82:7f:6b:f1:eb:d8:fe:bc:11:
                    77:87:f5:0d:e8:82:18:90:4b:2e:59:ec:b5:69:1b:
                    ec:8d:5f:33:6e:3c:32:2b:82:1a:57:2e:ca:b9:6a:
                    0d:e1:ec:d2:58:36:46:e7:c0:38:71:03:be:89:5d:
                    e6:9b:5d:cf:42:37:45:e0:05:fe:3f:aa:49:43:dc:
                    aa:68:65:f0:53:6b:b7:22:2e:c6:c1:3e:9b:64:4c:
                    0b:fa:a5:d6:b8:83:8c:90:f9:fe:8b:b4:b4:9a:fe:
                    97:f9:69:6f:d3:63:40:f8:17:41:90:58:8a:e6:dc:
                    48:65:d0:5e:36:e6:8e:f7:81:4b:f8:77:2d:15:88:
                    bd:ed:d9:05:10:f2:e1:1c:8b:45:0c:9c:f0:30:6b:
                    17:b1:d8:61:35:2e:97:74:19:27:06:18:d5:e9:03:
                    45:c6:b5:fd:51:d7:5f:e8:4c:cf:10:dd:fe:04:12:
                    03:fa:0c:26:c8:c7:0d:31:1e:8e:39:c4:e3:1d:a2:
                    99:54:70:4e:a3:5f:93:62:49:c8:56:80:4b:3f:e0:
                    dc:c7:a4:76:ee:88:d4:d6:ca:48:c1:c9:9b:49:45:
                    b4:d3:0b:25:81:2b:5e:3b:55:f1:b6:ae:e2:69:e6:
                    07:ed:26:d8:39:b4:0a:fc:35:89:6c:67:ba:14:6b:
                    fd:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:68:38:97:20:78:0B:4E:4A:52:62:9F:68:65:8C:7C:3F:55:92:4C
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:6d:8d:58:c8:b6:d0:b6:93:d1:84:74:c4:32:06:16:a8:bb:
         ac:ba:33:51:5d:b9:05:53:05:3a:2a:d6:9c:c8:01:00:21:02:
         10:0c:27:64:80:9b:27:e6:f1:fa:50:8a:ae:68:3b:79:4e:27:
         be:ee:8e:a5:e7:74:3a:50:79:b0:51:35:3e:21:dd:09:fd:16:
         8a:e0:4b:d5:0f:8d:53:1b:23:b8:92:54:0e:c9:e0:ad:ca:29:
         62:47:4e:b8:1e:43:bc:ff:16:17:89:6c:a5:0d:93:21:1f:ec:
         2f:89:de:2d:98:ed:ce:af:9c:f4:71:43:52:e4:e4:b8:3c:f4:
         6d:d9:28:e2:7e:e9:66:ee:47:d5:8a:fd:7d:69:ea:47:ab:f7:
         47:c5:a3:46:37:83:fd:4b:ab:6c:c5:d1:71:e0:16:d3:e3:61:
         84:dd:6b:95:5c:18:82:c6:4f:21:01:3f:dd:3f:8e:30:95:3d:
         89:4f:16:29:af:17:0a:d7:5c:95:53:a9:9a:6b:3a:57:9d:cd:
         97:b4:ca:7b:da:ce:cf:00:60:78:27:99:05:27:4a:71:29:9e:
         94:4f:be:2e:63:02:82:c1:4c:b6:00:0e:63:f2:08:5b:f4:96:
         cf:fd:5f:a0:0d:b8:87:b0:45:3b:b9:eb:4d:6a:cf:18:14:2b:
         31:87:20:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:01:43 2026 by rpki-client