Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
File:                     vVXPhK_d4xgniNwAdjqCMINM7FI.mft (raw, json)
Hash identifier:          2SIJ55fdYAdV+snYh6UHm5qLO3CDy8XAc09nDjVjCYI=
Subject key identifier:   0C:25:5A:C2:83:CC:E6:29:5D:9E:F3:76:B0:22:A2:BC:A3:7B:D6:00
Authority key identifier: BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
Certificate issuer:       /CN=bd55cf84afdde3182788dc00763a8230834cec52
Certificate serial:       019F84C3733AA751780D21757625AEE26512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
Manifest number:          0163
Signing time:             Tue 21 Jul 2026 13:00:29 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:29 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:29 +0000
Files and hashes:         1: m2i02yDWoa9OicV27GMj8Y2x37c.roa (hash: PcpljpVFgub8o7xEhsLEYIzvRxfNpdllqdeZVEQzjwg=)
                          2: vVXPhK_d4xgniNwAdjqCMINM7FI.crl (hash: iS1PKU8i3/pMTvjv1DYVZueS2PXBege7MdDWDN0Z0BE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:73:3a:a7:51:78:0d:21:75:76:25:ae:e2:65:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd55cf84afdde3182788dc00763a8230834cec52
        Validity
            Not Before: Jul 21 13:00:29 2026 GMT
            Not After : Jul 22 13:00:29 2026 GMT
        Subject: CN=0c255ac283cce6295d9ef376b022a2bca37bd600
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2f:d3:cd:14:20:17:6b:c4:ff:b6:15:5d:3b:
                    9d:41:c4:d1:92:65:90:f0:05:10:c6:5a:76:81:6a:
                    0f:12:55:44:ea:bc:2b:9f:54:03:aa:2d:35:a4:72:
                    15:f5:f9:f7:9e:12:1b:a0:8d:77:d6:43:ac:d5:5a:
                    96:30:c6:af:d2:2a:e5:4d:45:9d:29:e3:b9:f6:65:
                    0d:a0:95:28:3b:f1:62:0e:d0:d1:e3:5c:2d:90:58:
                    c4:eb:2a:30:f4:fa:7b:10:02:6f:21:ad:af:13:a8:
                    f1:51:0f:d8:73:c4:6e:98:fc:65:c3:bd:b9:8f:d0:
                    79:a7:71:f7:cc:0d:15:af:71:b2:64:8a:0b:6f:23:
                    d0:3d:05:a3:a7:41:a2:28:50:3b:8b:ff:7b:88:b2:
                    55:01:5c:4f:46:df:1e:f5:6b:ed:43:a6:77:38:83:
                    66:ef:38:19:5b:3f:b3:f6:37:0f:b6:01:97:62:0d:
                    2e:4e:81:30:d9:2c:99:b2:7e:c2:15:68:56:e8:e2:
                    7b:ec:ab:06:f4:80:11:53:79:53:a7:14:9d:76:5d:
                    64:51:67:e6:59:de:a2:84:12:f8:5f:aa:f6:e4:c3:
                    0f:3e:19:84:4e:db:e1:7e:c5:4c:dc:c2:5d:95:09:
                    82:cb:52:b3:92:b6:6a:cc:01:f6:ae:23:e9:1c:2e:
                    0b:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:25:5A:C2:83:CC:E6:29:5D:9E:F3:76:B0:22:A2:BC:A3:7B:D6:00
            X509v3 Authority Key Identifier:
                keyid:BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ac:6e:2d:29:6a:b2:c9:e5:d9:6b:2c:92:ea:a2:a7:28:5f:cf:
         57:ac:61:29:21:e4:ad:bb:80:0e:a5:e4:c7:54:d8:2d:36:56:
         b8:7c:f6:a6:c3:09:0e:49:75:2d:7f:a0:a2:0b:a2:cc:29:46:
         b8:a5:ba:50:58:e9:6d:5a:87:6c:de:e3:6b:2f:05:72:ed:fc:
         1a:75:40:80:f6:1e:1c:83:3e:1c:09:63:9f:6a:a6:ab:28:b0:
         b5:2a:c5:aa:e8:b2:fc:27:0c:62:3b:00:54:a6:27:c6:57:9c:
         e2:2e:83:5e:c8:f0:4a:bf:1f:1d:99:92:b5:24:2d:91:62:ab:
         4e:6c:af:65:dd:ed:6e:8e:c3:08:97:23:df:b8:f0:76:85:95:
         03:21:b9:8c:f8:7a:7c:f5:68:df:ce:56:75:77:e8:fe:fd:78:
         15:47:f8:93:0c:4b:0a:f3:ca:eb:ec:e3:2a:fa:4a:c7:8b:57:
         b3:50:df:fe:5c:10:32:8e:61:c8:35:a1:94:54:84:74:e5:b4:
         b1:44:da:a1:70:dd:17:3a:8b:ef:03:42:64:9b:d4:5b:ae:0b:
         99:df:26:4c:1c:7d:52:cc:31:c2:69:f3:36:85:0f:86:1a:72:
         64:bf:5a:26:8d:d1:26:3c:78:24:62:85:51:c0:ed:15:39:86:
         bb:59:5c:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:43:45 2026 by rpki-client