Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
File:                     VcQvLHehgijJ-pqzeYQmYNB5KQg.mft (raw, json)
Hash identifier:          anoz0GPU4kC0eeiJdImyJrw70V5sHaY3LpYqyqH1cqY=
Subject key identifier:   8E:09:48:5A:46:8E:DD:F5:3F:1E:21:8C:92:F1:DC:9D:62:31:9A:9C
Authority key identifier: 55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08
Certificate issuer:       /CN=55c42f2c77a18228c9fa9ab379842660d0792908
Certificate serial:       019EB9FDCD258B89B22264583D27D65F58F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
Manifest number:          091D
Signing time:             Fri 12 Jun 2026 04:01:18 +0000
Manifest this update:     Fri 12 Jun 2026 04:01:18 +0000
Manifest next update:     Sat 13 Jun 2026 04:01:18 +0000
Files and hashes:         1: VcQvLHehgijJ-pqzeYQmYNB5KQg.crl (hash: pEXVRCULfv4ijkvpuE++RB2INfQ+pcwFtY6HtFg8N64=)
                          2: idK5B-35fGEZjMNSUixFte8StUg.roa (hash: o+imY86byxVHx6nQNSFLkdJSif7vfSM95dWpYG48qWM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 22:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:cd:25:8b:89:b2:22:64:58:3d:27:d6:5f:58:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c42f2c77a18228c9fa9ab379842660d0792908
        Validity
            Not Before: Jun 12 04:01:18 2026 GMT
            Not After : Jun 13 04:01:18 2026 GMT
        Subject: CN=8e09485a468eddf53f1e218c92f1dc9d62319a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:59:1c:fd:be:e7:f4:7c:d4:83:b5:8c:c8:
                    b1:3a:0e:01:6a:7c:bd:3f:44:17:0d:f8:49:db:33:
                    ac:25:b8:4f:98:dd:eb:24:5b:43:73:b0:ef:0d:d1:
                    b7:7d:b0:c4:81:22:6e:e1:4e:b3:f2:29:93:f4:82:
                    2e:23:72:98:47:28:da:0f:10:f8:9b:c3:07:19:72:
                    f9:d0:47:78:6c:fa:c0:d5:b5:f0:92:14:cc:e7:28:
                    94:83:0f:0c:d9:2a:14:e4:70:82:2a:8a:80:e1:a8:
                    a9:02:84:7e:ef:51:65:9e:8a:78:70:8a:6f:5c:3a:
                    e3:a9:58:27:0d:06:5b:93:88:8f:31:7a:1b:91:e8:
                    4a:21:2a:1e:04:8c:6b:de:f9:33:72:e2:80:0d:ba:
                    e3:8b:96:9a:7c:1b:ca:fd:99:9a:38:28:53:57:d3:
                    bf:39:8e:04:db:f0:ec:e0:f9:83:9e:51:8c:6c:2b:
                    52:32:6c:30:16:e4:ab:ed:1c:bf:83:36:6a:d1:ae:
                    85:ee:02:9e:94:99:84:64:a4:7f:c4:70:86:41:e5:
                    14:53:d5:8f:07:01:5a:f1:82:cd:72:5f:a6:21:8c:
                    3f:37:98:f3:bd:ac:98:65:09:c8:44:f1:00:95:00:
                    27:01:ab:ce:01:3e:5c:45:a3:a7:f0:16:8f:66:b2:
                    f5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:09:48:5A:46:8E:DD:F5:3F:1E:21:8C:92:F1:DC:9D:62:31:9A:9C
            X509v3 Authority Key Identifier:
                keyid:55:C4:2F:2C:77:A1:82:28:C9:FA:9A:B3:79:84:26:60:D0:79:29:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcQvLHehgijJ-pqzeYQmYNB5KQg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/73151d-b11c-41c5-9ebe-007cf66c6f39/1/VcQvLHehgijJ-pqzeYQmYNB5KQg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:18:e0:4f:a9:2a:b2:ce:0c:eb:ed:56:e9:11:06:24:64:46:
         63:ab:d3:7f:35:aa:ad:4d:90:79:85:e9:f5:bb:83:c3:da:9c:
         46:f2:6b:b5:e2:99:d1:d7:55:0a:21:15:8b:c8:ab:aa:fd:ad:
         48:6f:e8:8b:04:f5:8b:3b:c5:f1:3f:ae:7f:f5:96:78:d6:43:
         2c:4d:cf:f1:6e:75:fb:d1:99:3b:37:a8:ab:ea:91:c0:ba:f6:
         d7:5b:e2:59:63:64:9c:78:57:71:a7:22:d4:7d:e6:af:9c:fd:
         f7:cc:3a:d1:14:e4:e9:18:fe:cb:ec:84:54:c5:05:80:27:13:
         c1:af:a6:fb:9c:ed:f8:80:2c:6c:0f:fe:87:30:b3:bf:4c:2d:
         4d:3c:54:a7:9e:45:76:c0:79:d7:30:d4:b8:17:dd:75:68:68:
         f7:12:b8:19:b7:8e:f4:9e:69:ff:d3:7f:cf:31:0a:46:74:0a:
         af:ae:de:10:54:32:ac:5a:c9:ac:17:cc:67:62:ca:b4:6b:e1:
         56:97:a4:82:ce:c1:01:d2:0d:4c:cf:b5:62:b0:5c:c0:f7:62:
         36:aa:db:98:2e:9d:74:da:fd:1f:6d:61:a5:6e:cf:89:db:45:
         2c:17:6c:5f:29:9c:fa:98:9f:d0:83:9d:77:07:ac:13:b3:08:
         ac:65:a1:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:54:07 2026 by rpki-client