Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
File:                     vgeJVzbtkoYPMTUAioWBP5i718E.mft (raw, json)
Hash identifier:          bj6soujQjccBdsB5Rl/j+n65cyzxiltuM+Hbb87Zczo=
Subject key identifier:   20:85:BB:7F:3D:91:B8:58:AC:75:70:28:FB:9D:94:AF:67:A0:0A:9D
Authority key identifier: BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1
Certificate issuer:       /CN=be07895736ed92860f3135008a85813f98bbd7c1
Certificate serial:       019EB8B406AE3A6150BF1339DC0C553F7B4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
Manifest number:          1956
Signing time:             Thu 11 Jun 2026 22:01:06 +0000
Manifest this update:     Thu 11 Jun 2026 22:01:06 +0000
Manifest next update:     Fri 12 Jun 2026 22:01:06 +0000
Files and hashes:         1: K0MX4NeezBz4lr2S-3VOAsUYhIQ.roa (hash: TugPqaQtZD9qSBdI5JE+l1/X09jHGI4DmWPMzdxCeJw=)
                          2: vgeJVzbtkoYPMTUAioWBP5i718E.crl (hash: vhI9Luf1+ATg3KP8v693AlDLCbcHMGnP/J5DefRzOlM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b8:b4:06:ae:3a:61:50:bf:13:39:dc:0c:55:3f:7b:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be07895736ed92860f3135008a85813f98bbd7c1
        Validity
            Not Before: Jun 11 22:01:06 2026 GMT
            Not After : Jun 12 22:01:06 2026 GMT
        Subject: CN=2085bb7f3d91b858ac757028fb9d94af67a00a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:38:87:73:9d:34:af:ca:99:dd:66:2a:c1:39:
                    12:3a:d0:12:59:d9:b2:63:fb:1a:bf:42:4a:42:80:
                    47:8d:e3:32:5d:2c:22:f3:fe:6e:e7:c0:72:a7:03:
                    5a:bc:85:ac:41:de:87:0c:7a:34:02:a9:06:d9:96:
                    fa:78:83:01:16:c2:31:85:a3:f7:db:f1:5f:c4:29:
                    2d:bc:6f:68:8b:71:1b:ad:7b:37:09:15:33:90:5e:
                    f9:18:43:de:60:c3:b8:4a:53:14:90:e2:1f:73:69:
                    b5:b4:62:11:fa:4a:d4:e5:3f:46:ec:fd:d9:3a:b3:
                    d6:27:a2:90:6b:92:fb:28:eb:73:d8:d9:c4:9a:a6:
                    6c:94:dc:d3:9d:8e:c2:2d:fc:6d:d1:23:41:85:ab:
                    3e:cc:9d:6f:1c:7c:7f:e9:1b:f0:bd:fc:2b:04:14:
                    93:6c:04:eb:67:eb:51:94:9f:59:7c:67:28:4b:dd:
                    96:05:ed:9d:d1:cc:39:30:e0:15:4c:af:86:65:a0:
                    92:a9:df:5f:f4:9a:28:3b:7f:25:bb:15:14:01:5b:
                    2f:8b:e2:46:74:49:4a:a4:80:bc:1a:bd:db:0c:6c:
                    e0:92:ca:af:00:2b:c1:67:f3:29:58:f4:ec:1c:c8:
                    31:0e:b9:89:9d:55:9c:17:a4:91:81:40:1b:43:b5:
                    cc:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:BB:7F:3D:91:B8:58:AC:75:70:28:FB:9D:94:AF:67:A0:0A:9D
            X509v3 Authority Key Identifier:
                keyid:BE:07:89:57:36:ED:92:86:0F:31:35:00:8A:85:81:3F:98:BB:D7:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgeJVzbtkoYPMTUAioWBP5i718E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/659f2c-c289-4699-87d7-21d6100383e0/1/vgeJVzbtkoYPMTUAioWBP5i718E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:fb:90:0a:6e:2b:c5:3f:7d:15:e1:de:a5:85:4f:33:69:2c:
         df:ca:6a:cc:56:85:62:d3:38:bf:bd:aa:1d:06:23:1a:89:3e:
         ac:7f:45:e2:b7:89:96:89:c8:f9:3c:30:64:84:20:42:a3:be:
         ad:90:02:86:05:c4:c1:89:a9:b0:6d:82:da:bd:20:79:b1:8b:
         21:7f:a9:e2:c2:76:b3:d6:5f:10:bc:51:98:aa:b4:a6:35:c7:
         ef:6f:bc:4a:36:ca:86:06:37:b8:3b:e2:af:b1:35:31:e7:a5:
         e9:5c:87:46:aa:ab:93:63:40:25:f1:4d:14:f6:71:0a:aa:99:
         70:34:5a:b7:22:de:56:16:4d:58:1f:8f:86:f0:e8:0e:97:52:
         5b:f2:47:e0:69:09:41:71:af:6a:3e:dc:00:7e:8f:7e:37:82:
         4c:29:b6:e7:51:df:23:3c:68:b7:0e:44:f2:64:75:d9:5c:c9:
         92:ec:2d:8f:4f:b1:c1:87:3a:2c:3c:cc:6c:c0:f1:a2:69:11:
         ce:76:ae:03:bd:e2:f4:6d:e9:b0:f2:bc:dc:f1:5e:fb:78:7a:
         01:a4:55:05:2d:35:e1:ba:48:19:0e:75:e6:14:ad:87:95:b1:
         ca:73:eb:b6:80:11:e8:52:35:cd:aa:8f:a8:5f:7c:3f:09:44:
         2a:ea:bb:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 06:01:36 2026 by rpki-client