Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File:                     Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier:          NBO8YD/OyDrK35a2m1p5YFFQ1vSvi1ubXwGy3cUf0BY=
Subject key identifier:   77:03:F4:54:DD:F8:B0:9A:17:57:92:8D:69:D1:41:B3:57:C0:78:06
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer:       /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial:       019F1D8DC869F69B8280B739E4CF6057A71D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number:          06F8
Signing time:             Wed 01 Jul 2026 12:00:58 +0000
Manifest this update:     Wed 01 Jul 2026 12:00:58 +0000
Manifest next update:     Thu 02 Jul 2026 12:00:58 +0000
Files and hashes:         1: DP6W5mZd2SOB-Uj8tbt4V4TsScc.roa (hash: 525uqcMQrlLx8hMHVZRXLc6TEI5O4/DeN/yL3pcseB8=)
                          2: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: /ze/bzFDSlOErhOFBGuVihFHnRsyDh59pDQko00lZmU=)
                          3: vQqnvARNn1FXtEGfZ3CHw5z70o0.roa (hash: +SKN+m/Zy5SnpDyhDQfSEvZM8oK3F3dFeyWqxYSrWok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 02 Jul 2026 12:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:1d:8d:c8:69:f6:9b:82:80:b7:39:e4:cf:60:57:a7:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
        Validity
            Not Before: Jul  1 12:00:58 2026 GMT
            Not After : Jul  2 12:00:58 2026 GMT
        Subject: CN=7703f454ddf8b09a1757928d69d141b357c07806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b3:de:67:e6:fd:8f:f4:92:54:79:82:6e:0d:
                    19:4f:da:d9:95:13:9c:49:8e:cf:af:41:c5:fb:55:
                    e2:9d:30:67:00:52:cf:e2:f3:02:33:7f:c7:0a:8e:
                    d4:19:25:8b:3f:cf:31:c7:44:4e:c5:02:a6:2c:ff:
                    e4:08:49:f1:79:58:ab:85:d4:c1:da:ed:1a:80:07:
                    39:e2:64:4c:27:d1:b6:c7:16:6c:e3:36:73:f0:db:
                    0e:09:96:75:83:44:dd:f7:14:3e:d5:3c:fe:d5:82:
                    2d:dc:5c:1e:95:3b:e8:07:56:48:3b:73:f8:89:74:
                    ed:23:ae:14:c4:3f:f1:38:2a:22:c4:c0:99:30:25:
                    d2:bb:18:38:fb:3c:3c:27:fd:30:fc:f0:73:54:6e:
                    64:07:35:99:95:96:a2:bb:ec:29:b0:21:94:62:0b:
                    ba:5b:8e:27:55:ad:8b:ee:be:ea:d0:3c:c5:11:1c:
                    13:56:63:13:43:bf:89:be:0d:dc:41:84:dd:69:c9:
                    ed:c3:70:9b:6c:03:03:12:a9:aa:65:94:d9:72:e3:
                    15:d9:c4:32:aa:1d:30:b6:8c:95:b4:0a:0a:3e:50:
                    1d:94:ae:96:b6:d0:df:11:fb:4d:f9:d5:e3:8d:17:
                    28:1e:32:75:57:90:38:7e:a2:b4:ac:47:67:7a:25:
                    03:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:03:F4:54:DD:F8:B0:9A:17:57:92:8D:69:D1:41:B3:57:C0:78:06
            X509v3 Authority Key Identifier:
                keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:24:48:a4:40:db:3c:ca:f6:b8:e6:ee:96:17:59:50:b9:e7:
         ef:97:da:32:0c:4f:a4:02:b2:b9:6f:9d:3b:21:67:57:f6:58:
         5d:59:7e:ca:48:d1:d8:f1:53:8c:31:ba:de:07:67:e9:c9:ec:
         38:f4:31:54:73:8a:e2:7f:4b:79:e2:51:5f:bc:79:d6:73:f8:
         74:eb:98:59:34:1a:f1:cc:87:50:c1:e4:ed:b0:ff:7b:5d:31:
         b4:d0:f0:a8:71:2f:e4:7c:a3:7a:c5:43:5a:6a:bb:75:ca:ed:
         79:36:80:9a:e8:f9:bd:92:63:25:93:bb:2a:00:b6:74:6a:8b:
         3b:1c:96:ba:0c:62:c8:10:1e:4d:5f:e1:2b:11:ec:e2:f2:1b:
         9e:09:c4:17:41:57:8f:05:9d:ea:7a:37:eb:5b:2d:71:cf:ee:
         c0:9b:3d:3e:c1:b0:1c:c1:b3:d2:36:b7:79:6b:f0:ad:2b:1d:
         55:af:d0:34:14:86:3e:9c:79:d6:fc:08:83:b0:89:9a:64:b0:
         35:b6:32:e2:07:3c:ba:36:ef:35:99:07:7a:ed:62:67:1f:89:
         5f:4e:89:37:39:4e:2f:b2:b2:b1:9a:d0:c9:bd:52:5b:5f:e0:
         d0:f4:f6:4a:b3:14:36:e8:4c:ad:42:58:55:81:44:6a:98:f5:
         9f:b2:e7:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 20:00:42 2026 by rpki-client