Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
File:                     VwzdFzLlZDoV7tnud-E5S4AkJUg.mft (raw, json)
Hash identifier:          2bV+Ufp6nfdtGFvPwwXR8e7/7mnBohpjqehCO3Ij46A=
Subject key identifier:   30:0B:A9:D9:20:4F:5B:AA:8C:1D:6D:6D:74:21:40:11:06:29:77:24
Authority key identifier: 57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48
Certificate issuer:       /CN=570cdd1732e5643a15eed9ee77e1394b80242548
Certificate serial:       019EB8EA8F3A0672D1F01D0589A75652DA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
Manifest number:          0E4D
Signing time:             Thu 11 Jun 2026 23:00:40 +0000
Manifest this update:     Thu 11 Jun 2026 23:00:40 +0000
Manifest next update:     Fri 12 Jun 2026 23:00:40 +0000
Files and hashes:         1: EgvxwX18F988dQqkK9XKl7B803U.roa (hash: LbApliZ16bFCZoVrhnEezKbFE+rVBexY2nPAOQAYD/U=)
                          2: VwzdFzLlZDoV7tnud-E5S4AkJUg.crl (hash: LnihgBywnOV/aG9XSOLGISjKxitJE9qJ7+fpRbetwck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:ea:8f:3a:06:72:d1:f0:1d:05:89:a7:56:52:da:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570cdd1732e5643a15eed9ee77e1394b80242548
        Validity
            Not Before: Jun 11 23:00:40 2026 GMT
            Not After : Jun 12 23:00:40 2026 GMT
        Subject: CN=300ba9d9204f5baa8c1d6d6d7421401106297724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:7b:b4:3c:5f:b0:7a:96:ad:8f:5c:55:6b:33:
                    5f:15:f2:fa:ae:0a:c6:97:85:c5:6a:20:98:6a:3e:
                    72:00:18:05:ac:41:7f:d2:a2:57:2a:11:2d:1c:ff:
                    39:cf:fa:64:8d:d9:81:e0:68:4a:c2:02:fc:3c:99:
                    50:95:b0:09:90:8a:db:53:1d:97:af:4a:aa:df:7f:
                    67:a4:6d:30:01:be:fd:32:2a:fd:b7:68:d9:f8:83:
                    87:55:f7:4e:42:37:22:d0:d7:1c:96:26:5a:89:7c:
                    54:8c:68:a9:d6:37:81:52:cc:6c:20:0c:f6:77:c3:
                    02:a8:18:78:05:64:84:c3:52:29:c7:2e:6f:d7:66:
                    cd:30:82:bc:23:0e:bd:b9:ba:e7:ce:66:35:b8:96:
                    ca:a7:c8:75:bb:6c:8c:e6:6b:41:32:34:f5:37:a3:
                    1a:a1:17:aa:cc:7d:ea:84:44:57:7c:3a:80:c4:22:
                    8c:c1:f8:64:98:c6:f5:ce:0d:af:51:9f:ab:6b:9f:
                    f5:41:7e:1b:d5:70:e4:95:8b:70:15:f2:13:bc:4a:
                    bc:d9:da:bb:57:8b:78:d1:76:f0:85:42:ca:a1:56:
                    0d:cc:10:39:61:51:36:66:49:47:09:fa:65:b3:3a:
                    b2:55:b7:ad:67:20:56:a8:b3:40:bc:63:4d:40:8f:
                    65:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:0B:A9:D9:20:4F:5B:AA:8C:1D:6D:6D:74:21:40:11:06:29:77:24
            X509v3 Authority Key Identifier:
                keyid:57:0C:DD:17:32:E5:64:3A:15:EE:D9:EE:77:E1:39:4B:80:24:25:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwzdFzLlZDoV7tnud-E5S4AkJUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/64d313-644c-4b9f-811a-38a5c9105cc5/1/VwzdFzLlZDoV7tnud-E5S4AkJUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:7d:cf:e4:90:b6:3b:7c:b9:32:59:5d:33:e4:22:d8:bb:7e:
         9d:f0:86:79:f6:29:ce:4f:67:18:19:c0:63:ac:e3:66:0b:b4:
         9f:3a:bf:08:79:db:8e:94:ab:25:80:1d:37:41:39:c1:ae:85:
         e5:55:2f:a6:15:46:46:11:a9:5a:7d:f0:d7:39:64:26:39:ab:
         bf:ad:b3:89:bb:d4:99:69:c3:d9:5d:2a:81:5b:21:63:75:81:
         39:37:7f:96:1a:c6:75:b0:0d:b4:23:3f:9a:1b:5c:ec:ee:fd:
         65:c7:ef:a5:5d:c9:82:2c:97:24:1b:44:75:75:fa:aa:6a:e6:
         94:fb:8b:e2:2e:60:1b:51:88:1c:00:15:dd:a1:69:52:9a:de:
         89:12:75:35:c6:75:f7:e8:16:8b:a5:93:f6:4b:d8:fe:48:36:
         ab:a8:d4:19:3e:7b:78:fe:05:6a:8a:f6:4f:f6:16:3b:87:ea:
         ca:4a:85:5b:62:a2:28:4b:dd:ee:fb:45:9e:2f:78:78:d6:69:
         03:7e:2f:6e:df:f7:a5:b4:3a:2f:5f:ac:70:86:8c:a4:90:49:
         32:db:6c:89:82:3d:e7:95:1a:db:2c:cc:37:33:02:6f:fe:48:
         df:a9:da:a0:fc:81:4b:0d:34:b8:00:ec:5b:91:0e:29:48:e3:
         79:46:1b:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ646o86BnLR8B0FiadWUtpVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGNkZDE3MzJlNTY0M2ExNWVlZDllZTc3ZTEzOTRiODAy
NDI1NDgwHhcNMjYwNjExMjMwMDQwWhcNMjYwNjEyMjMwMDQwWjAzMTEwLwYDVQQD
EygzMDBiYTlkOTIwNGY1YmFhOGMxZDZkNmQ3NDIxNDAxMTA2Mjk3NzI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsHu0PF+wepatj1xVazNfFfL6rgrG
l4XFaiCYaj5yABgFrEF/0qJXKhEtHP85z/pkjdmB4GhKwgL8PJlQlbAJkIrbUx2X
r0qq339npG0wAb79Mir9t2jZ+IOHVfdOQjci0NccliZaiXxUjGip1jeBUsxsIAz2
d8MCqBh4BWSEw1Ipxy5v12bNMIK8Iw69ubrnzmY1uJbKp8h1u2yM5mtBMjT1N6Ma
oReqzH3qhERXfDqAxCKMwfhkmMb1zg2vUZ+ra5/1QX4b1XDklYtwFfITvEq82dq7
V4t40XbwhULKoVYNzBA5YVE2ZklHCfplszqyVbetZyBWqLNAvGNNQI9lQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDALqdkgT1uqjB1tbXQhQBEGKXckMB8GA1UdIwQY
MBaAFFcM3Rcy5WQ6Fe7Z7nfhOUuAJCVIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEt
MzhhNWM5MTA1Y2M1LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My82NGQzMTMtNjQ0Yy00YjlmLTgxMWEtMzhhNWM5MTA1Y2M1
LzEvVnd6ZEZ6TGxaRG9WN3RudWQtRTVTNEFrSlVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiX3P5JC2
O3y5MlldM+Qi2Lt+nfCGefYpzk9nGBnAY6zjZgu0nzq/CHnbjpSrJYAdN0E5wa6F
5VUvphVGRhGpWn3w1zlkJjmrv62zibvUmWnD2V0qgVshY3WBOTd/lhrGdbANtCM/
mhtc7O79ZcfvpV3JgiyXJBtEdXX6qmrmlPuL4i5gG1GIHAAV3aFpUpreiRJ1NcZ1
9+gWi6WT9kvY/kg2q6jUGT57eP4Faor2T/YWO4fqykqFW2KiKEvd7vtFni94eNZp
A34vbt/3pbQ6L1+scIaMpJBJMttsiYI955Ua2yzMNzMCb/5I36naoPyBSw00uADs
W5EOKUjjeUYbEg==
-----END CERTIFICATE-----
Generated at Fri Jun 12 04:39:42 2026 by rpki-client