Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
File:                     VvciqIWr65qv-zLadk7wkbWyA0A.mft (raw, json)
Hash identifier:          BCR/o5B/2lCsUk939GHjkI2ZMuwdKUWugZ5T0Ww8NPw=
Subject key identifier:   6D:A4:40:D1:79:BA:CB:1A:45:9A:EE:3F:F2:21:BB:44:9C:FC:9A:FF
Authority key identifier: 56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40
Certificate issuer:       /CN=56f722a885abeb9aaffb32da764ef091b5b20340
Certificate serial:       019E8E6E328609223C47DBC131D7DEEB855B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
Manifest number:          0C62
Signing time:             Wed 03 Jun 2026 17:00:47 +0000
Manifest this update:     Wed 03 Jun 2026 17:00:47 +0000
Manifest next update:     Thu 04 Jun 2026 17:00:47 +0000
Files and hashes:         1: GIndhU8ELmsNHmG9wjRWuLwz2bs.roa (hash: PQMP13AMPNG5zd/gezY6JmA04bcuMNJCFye1nndg+RI=)
                          2: VvciqIWr65qv-zLadk7wkbWyA0A.crl (hash: bXTdLK60eoQ3UIoOkekRu8E22q13yc27os7kDgW3hME=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 04 Jun 2026 15:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:8e:6e:32:86:09:22:3c:47:db:c1:31:d7:de:eb:85:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f722a885abeb9aaffb32da764ef091b5b20340
        Validity
            Not Before: Jun  3 17:00:47 2026 GMT
            Not After : Jun  4 17:00:47 2026 GMT
        Subject: CN=6da440d179bacb1a459aee3ff221bb449cfc9aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:94:69:db:64:32:85:de:8b:b5:b6:98:e8:2c:
                    d1:7d:df:b5:fd:3e:a9:e2:b4:c7:17:4b:4a:52:ee:
                    4a:67:7d:c8:2e:79:cb:de:68:cb:37:fc:e1:bc:33:
                    1e:f3:c0:5a:10:28:4f:59:6f:fd:cc:5c:96:ac:97:
                    d9:05:ac:19:7c:ae:c7:71:fc:3b:2b:2e:63:bb:0f:
                    02:43:5b:33:03:1a:8b:8d:0c:2a:cc:4c:82:d5:56:
                    08:91:48:c0:1d:8d:36:52:c7:76:63:78:c3:53:de:
                    c6:4e:eb:d6:81:49:3a:e5:2c:ac:07:5f:75:db:99:
                    6a:e7:0f:05:78:67:c6:78:8d:cd:3d:47:9e:2d:49:
                    32:6f:b9:78:6a:9f:6d:9e:db:db:32:03:5b:e9:32:
                    42:f9:0a:6a:aa:0f:fb:5e:d6:ea:e5:a5:fd:36:a0:
                    8f:bc:b7:ba:8a:e1:33:39:d2:cb:8d:51:78:92:ed:
                    56:09:06:84:0e:4c:6e:69:34:bd:44:fd:e2:61:96:
                    9a:6a:7d:0b:d5:d0:0d:cc:23:a0:d7:5b:0b:07:5e:
                    e5:1d:0f:2d:d4:68:8e:8d:0c:f5:3d:46:e3:7d:f6:
                    e7:91:af:3b:88:c3:85:fa:fe:3a:cc:4f:5a:95:cc:
                    34:0c:86:23:76:ac:09:f4:09:eb:81:df:6f:d5:9b:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A4:40:D1:79:BA:CB:1A:45:9A:EE:3F:F2:21:BB:44:9C:FC:9A:FF
            X509v3 Authority Key Identifier:
                keyid:56:F7:22:A8:85:AB:EB:9A:AF:FB:32:DA:76:4E:F0:91:B5:B2:03:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvciqIWr65qv-zLadk7wkbWyA0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8992b1-1600-4b92-99a5-8140c116f0c8/1/VvciqIWr65qv-zLadk7wkbWyA0A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:d4:a2:9c:70:d1:89:8c:df:9a:81:84:0e:4a:73:14:ed:e9:
         16:e1:86:49:9a:c0:5f:91:e6:e7:11:08:74:24:04:35:8f:c0:
         cb:99:07:58:f9:b7:83:54:1d:3d:17:25:1e:1e:8d:06:cd:10:
         95:55:0b:7f:d2:38:90:8e:4a:81:f6:f9:67:0f:6d:17:2f:68:
         0e:41:5d:b9:3f:94:2c:c2:2d:45:8e:6d:ab:a7:30:d0:ae:10:
         b5:d4:0a:57:d1:23:f0:6a:df:03:cb:9c:92:40:2a:36:52:7a:
         98:c1:b4:08:fd:5a:28:09:90:7a:21:c4:6c:f0:60:67:c7:c2:
         da:c2:a0:5a:11:31:e3:5d:06:59:a8:90:e7:08:dd:f6:bb:ef:
         12:f3:ed:5d:c9:a5:7f:c1:4f:5d:38:32:f0:68:a9:a8:4d:b6:
         88:6b:b4:2e:15:b3:ef:e8:f0:08:e0:d5:9f:d7:cc:a0:49:e4:
         57:fc:f3:9f:2d:e6:a8:7d:34:c8:d9:a7:04:d7:e4:38:c3:d4:
         35:b9:6f:6c:3c:a9:3d:49:33:d5:dc:a5:65:97:5e:b1:83:53:
         8d:03:86:e7:fe:29:38:df:67:ff:07:f9:05:44:f9:29:b1:13:
         bb:1b:e9:90:95:ec:40:8a:f8:fb:87:83:35:18:f2:7f:10:3b:
         ee:2b:d9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 00:01:17 2026 by rpki-client