Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File:                     VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier:          9auz/75NdG8dICaieM+ZPKY3Gil4zaI2CJdr02rT69c=
Subject key identifier:   E4:8D:92:10:F8:42:32:8D:D8:30:A6:C8:0F:51:E3:8C:B1:55:B7:F1
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer:       /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial:       019EB9FDBE25A266F7B04FAA57B73D2219E0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 04:01:14 +0000
Manifest this update:     Fri 12 Jun 2026 04:01:14 +0000
Manifest next update:     Sat 13 Jun 2026 04:01:14 +0000
Files and hashes:         1: OK14eevAKdeAPJmbmDqPtR4gKY4.roa (hash: pxijgyk5n8Xjg/9qnmaxeKyE+sgbGdhnse8g+yBaAZs=)
                          2: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: qSQHrdozCpUjftlyJGXUgeEMXMsd8RQjCUX8/MxPIRw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:fd:be:25:a2:66:f7:b0:4f:aa:57:b7:3d:22:19:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
        Validity
            Not Before: Jun 12 04:01:14 2026 GMT
            Not After : Jun 13 04:01:14 2026 GMT
        Subject: CN=e48d9210f842328dd830a6c80f51e38cb155b7f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:4f:ca:17:0a:1b:13:97:ab:ba:7c:9c:e2:
                    59:36:a9:79:de:c0:4a:ab:7a:4d:41:e4:1d:bc:4d:
                    2c:8f:48:09:bd:5d:9d:fe:06:54:1d:f9:67:c7:04:
                    39:5b:e6:07:fc:36:4e:45:c4:22:75:d9:b1:19:44:
                    75:55:d4:2e:60:ea:f2:28:1e:59:e0:ed:78:f4:78:
                    2d:b1:08:ce:3d:6c:22:43:c3:92:a9:7a:4c:8c:94:
                    2d:1d:2f:fe:5d:8f:b2:59:ec:37:8b:26:64:77:a9:
                    46:18:5e:9f:dd:30:cf:24:30:24:44:68:f6:40:28:
                    43:db:96:1e:b8:c3:40:ba:d1:6d:61:4f:08:cd:d3:
                    cd:cc:43:1f:d8:a1:18:bc:8a:fb:fc:3f:a4:f5:5d:
                    6a:8b:ac:8d:a6:4c:b4:c4:18:2b:ea:5c:4d:47:7f:
                    82:19:97:a6:08:11:aa:34:7c:28:42:60:c4:d4:db:
                    45:3d:3c:3c:26:96:39:9f:b1:4d:b8:e3:0f:14:6a:
                    7a:24:c9:9e:b1:c8:9b:70:c6:57:00:ea:d1:b3:ff:
                    06:c6:75:f3:b7:3d:9a:82:4f:86:f9:be:0e:c8:6a:
                    77:21:42:03:67:bf:55:50:94:b1:6b:ce:ea:b0:43:
                    c3:d2:dd:f3:6b:8d:a1:0b:0e:c0:fe:cb:3b:eb:d0:
                    a6:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:92:10:F8:42:32:8D:D8:30:A6:C8:0F:51:E3:8C:B1:55:B7:F1
            X509v3 Authority Key Identifier:
                keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:6c:74:ea:82:1a:90:7a:03:2f:98:04:35:47:f9:9a:bb:
         73:49:ea:58:f2:8f:de:f5:e9:6b:90:f5:a6:d2:4b:0f:9a:be:
         82:9b:99:49:73:f1:d7:77:d5:14:e6:72:c9:35:71:d0:f9:a7:
         55:ba:5d:3d:e0:4f:ca:8c:09:42:50:13:b2:fd:5f:0d:47:7d:
         32:b8:42:a2:df:22:bf:38:40:66:74:da:3a:b7:05:c0:e2:16:
         93:ad:a8:8d:16:25:a8:1c:a3:e4:3f:ec:40:c2:54:0e:36:e1:
         a7:c1:bd:a6:ef:6d:01:88:cd:d1:13:14:1b:a6:82:2c:cc:c9:
         26:70:b9:48:b2:b7:12:a3:24:eb:a8:16:43:f0:6d:ae:04:b6:
         e7:e4:32:4e:63:a5:f7:d8:0a:1e:ca:b7:87:64:99:16:7e:ce:
         55:ce:3e:47:6e:7e:c9:2c:fd:9a:05:1b:0e:32:c3:69:5f:b3:
         be:8a:2f:5e:b6:0d:c5:46:79:a9:8e:99:ae:1d:45:ff:02:ee:
         d1:99:17:d6:62:ca:df:94:93:8e:5c:7f:5a:be:ec:a4:0d:67:
         cf:d9:e2:26:03:a3:cc:de:ae:c9:d3:34:4c:69:73:76:1d:36:
         53:41:85:58:88:15:95:ee:e5:2d:a1:8c:14:b1:46:36:f5:86:
         38:9f:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:54:30 2026 by rpki-client