Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
File:                     M_vbsgwtlwc8Dei3yqdewe6xkbg.mft (raw, json)
Hash identifier:          i52PhlWAPFB2/zrMYl98mF7Pc6ZxYEHCbnsbIQ6Hjxo=
Subject key identifier:   1B:14:62:4A:AE:72:36:21:3C:4C:EA:F6:5E:48:49:19:57:52:0F:40
Authority key identifier: 33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8
Certificate issuer:       /CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
Certificate serial:       019EF94B3B53E45A7FB262E2B0F3E5239543
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
Manifest number:          1979
Signing time:             Wed 24 Jun 2026 11:01:57 +0000
Manifest this update:     Wed 24 Jun 2026 11:01:57 +0000
Manifest next update:     Thu 25 Jun 2026 11:01:57 +0000
Files and hashes:         1: 0e4GauzDmn8kMomw7oCsTJu7m8Q.roa (hash: vhyIGyttSh6EEj+o9giIX+19O/xI+MdDj+HOEVvUjJ4=)
                          2: EjDCWHUKfrhUltEAV8v-8i4JB8k.roa (hash: a/WblqLT7o9KNQHx3jn/JOaerbJckzUgXEVjku2zPOM=)
                          3: M_vbsgwtlwc8Dei3yqdewe6xkbg.crl (hash: tVRtJZzWEjhbssMAaCyazVR6bQa0NUtO3YbU9SqBNO8=)
                          4: oPq-9EL4LSrMa5GUN6LfdW-Ub6w.roa (hash: CR2p7P7nO1sdjW2WzjuqaopSJj2SPQzuG2+UV273Kok=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 11:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:f9:4b:3b:53:e4:5a:7f:b2:62:e2:b0:f3:e5:23:95:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33fbdbb20c2d97073c0de8b7caa75ec1eeb191b8
        Validity
            Not Before: Jun 24 11:01:57 2026 GMT
            Not After : Jun 25 11:01:57 2026 GMT
        Subject: CN=1b14624aae7236213c4ceaf65e48491957520f40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:84:5f:8c:1f:54:f5:04:dc:46:79:c1:6a:d3:
                    b4:c9:da:53:1f:ce:cb:83:27:a9:df:d9:34:2a:66:
                    27:18:a7:d9:e1:e6:70:6f:e2:42:02:6b:b6:68:01:
                    79:49:ad:ab:f8:f4:e1:8b:f0:d6:9b:31:f1:d5:16:
                    6f:67:ec:95:ba:f7:80:72:6b:29:b1:e8:75:7e:a6:
                    2a:74:29:02:0e:02:7a:12:68:cc:95:52:b0:af:4b:
                    7e:14:56:97:47:d8:99:5b:eb:ec:2f:2c:f4:78:f0:
                    81:8c:87:32:20:b2:a2:91:cb:b3:c1:39:c0:30:d9:
                    92:51:43:30:4e:e9:e1:d6:7d:74:ff:f3:6d:9f:04:
                    88:f7:0f:19:eb:50:f4:a2:c5:64:ff:02:06:89:d4:
                    e6:85:14:f5:b6:51:3a:4b:33:90:e6:6b:0c:31:3b:
                    9a:dc:2d:54:07:2d:7b:01:ea:dc:ad:8f:c0:a4:6a:
                    be:27:c1:6f:1f:a5:57:ea:bd:a7:fc:65:a1:ca:97:
                    fc:d3:27:e9:04:78:f4:46:f6:40:06:54:d4:36:c4:
                    dd:8a:c4:12:77:0c:ea:15:cd:1f:09:f2:26:16:a1:
                    41:20:7a:14:bd:93:c5:92:8b:69:72:f2:2e:94:2e:
                    23:fb:a5:7b:4b:19:1b:26:90:e9:87:bb:c0:ec:91:
                    59:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:14:62:4A:AE:72:36:21:3C:4C:EA:F6:5E:48:49:19:57:52:0F:40
            X509v3 Authority Key Identifier:
                keyid:33:FB:DB:B2:0C:2D:97:07:3C:0D:E8:B7:CA:A7:5E:C1:EE:B1:91:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M_vbsgwtlwc8Dei3yqdewe6xkbg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/3a362d-4198-4b08-bb0a-dbe41fc8399e/1/M_vbsgwtlwc8Dei3yqdewe6xkbg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:66:83:a8:f9:48:b4:65:c2:64:85:be:75:30:0e:39:e8:77:
         8e:46:c0:3e:a0:f6:7e:fb:8c:94:da:77:bf:8f:94:05:26:7c:
         23:82:89:c0:9f:9d:1f:33:de:96:fe:22:c6:ec:6b:c2:d3:64:
         b2:29:e5:82:56:74:0f:65:ec:51:36:83:86:b6:91:d1:76:e5:
         98:4d:38:b7:7e:d4:9d:24:95:78:a0:a4:d9:72:ab:9e:e5:85:
         86:66:cb:00:5d:9c:49:8a:5d:5b:fd:d4:cf:b3:b6:70:dd:47:
         6c:9c:da:04:98:02:11:f3:16:e0:d5:00:d3:46:4f:88:43:4a:
         e1:5b:62:b3:67:5d:f7:28:03:43:b3:0d:c7:28:9a:e7:62:25:
         3b:55:58:04:9b:1a:8a:1b:9f:33:62:a7:b6:65:3f:da:f4:cf:
         fd:0e:3c:7f:0b:02:e6:a5:82:f4:b9:cb:1b:1d:5c:7f:92:2c:
         4f:cb:ab:b9:ec:aa:8b:25:60:03:1f:45:91:45:61:5a:28:e8:
         86:ab:73:8b:17:05:21:19:66:d5:41:7f:6b:0b:32:66:23:c6:
         c7:8d:66:40:d1:f4:62:e2:d8:d0:f3:a8:b8:09:f6:88:f5:9f:
         f0:a9:b7:91:db:d3:79:e3:8c:0d:53:e7:00:c6:8f:6a:1a:e7:
         66:be:ca:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:18:23 2026 by rpki-client