Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          sXUntZj1eeuEkv0doeeEcw2/v9+8Tbtzb1yMIleSqcE=
Subject key identifier:   1E:6D:2D:2F:DC:5B:E1:4D:38:51:8B:E0:49:3F:B0:61:9E:79:84:79
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       019DDC556F66F676542623AD16A02D485FA8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          D5
Signing time:             Thu 30 Apr 2026 03:01:19 +0000
Manifest this update:     Thu 30 Apr 2026 03:01:19 +0000
Manifest next update:     Fri 01 May 2026 03:01:19 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: 3V/zE3MXeroo7yerbgpT+om7VIQVUw5j03COeY7gKb4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 01 May 2026 03:01:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:dc:55:6f:66:f6:76:54:26:23:ad:16:a0:2d:48:5f:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Apr 30 03:01:19 2026 GMT
            Not After : May  1 03:01:19 2026 GMT
        Subject: CN=1e6d2d2fdc5be14d38518be0493fb0619e798479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:4b:cd:f4:d4:05:87:23:5e:e3:31:da:5e:83:
                    0a:07:16:43:7b:e6:87:7d:e7:a4:cb:c5:5f:28:dd:
                    bc:0f:7c:d9:bc:9b:12:19:b8:e1:72:1c:6a:fd:4d:
                    4f:2c:10:b8:7d:cb:24:06:eb:f2:cf:88:38:03:d0:
                    b3:8a:c1:95:aa:f3:06:59:f4:cb:52:64:38:b7:42:
                    0a:4e:84:57:de:2d:0f:3c:3b:17:12:a7:1c:12:ac:
                    a0:e4:f5:bf:53:ff:04:5c:5a:87:95:d6:b4:74:73:
                    7c:f2:fc:30:3e:1d:17:1a:e8:59:1f:b7:50:ba:51:
                    14:75:b8:bc:ab:76:20:4b:17:0d:75:9c:40:62:ba:
                    45:bf:c2:68:f9:4c:e6:81:3a:94:8f:f2:0a:06:8e:
                    30:da:c1:d9:5e:88:d1:c3:be:57:fb:40:d8:8c:cb:
                    5e:5b:82:4c:eb:ca:24:1f:5e:dd:70:4a:be:b5:99:
                    89:64:30:9d:9f:91:94:fe:cd:fe:89:63:5e:6c:c7:
                    11:90:af:f2:7b:96:f4:b8:f1:d4:8f:60:40:fb:9a:
                    21:73:b1:a5:cd:66:13:d0:31:23:36:ff:09:d1:f5:
                    b2:37:d1:13:3a:2c:30:f7:c3:30:d0:59:7b:cb:a4:
                    4c:0c:e3:f5:45:3e:49:17:6e:6f:4b:89:74:e9:64:
                    2e:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:6D:2D:2F:DC:5B:E1:4D:38:51:8B:E0:49:3F:B0:61:9E:79:84:79
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:2e:ad:72:eb:39:9a:e9:a0:0f:13:eb:9b:ec:42:98:fc:46:
         a0:94:01:27:95:2e:0c:0a:4e:00:d9:7f:1a:e9:c3:a4:b0:14:
         ee:31:e6:f0:3d:3c:14:16:6e:33:17:1e:20:11:f3:35:58:ae:
         21:e1:12:d4:96:01:02:bf:7f:15:57:3d:38:86:b0:d3:79:da:
         19:fb:05:4b:69:9b:a4:89:1f:9f:d4:ae:0d:2d:2c:fe:e0:d7:
         46:6d:f6:fe:b7:ac:02:75:8b:0f:65:ea:ee:79:68:30:30:48:
         90:8a:44:2d:40:7c:0c:26:b9:dd:28:4e:4d:78:15:62:4e:dc:
         f3:b2:2e:0b:e3:64:62:f4:da:d2:08:35:63:30:c6:ca:e3:6a:
         e4:01:48:0a:d6:9b:14:8d:a2:a5:2c:be:b4:ae:4d:58:76:ae:
         d5:e9:fe:59:d5:f9:c9:02:b8:94:76:06:29:cb:5d:d2:9e:3b:
         5c:ec:6c:ba:49:58:df:56:e8:c9:a4:9e:7b:22:87:5c:e0:f7:
         7c:96:af:26:50:69:ab:d9:52:1a:2e:8c:9f:65:b2:10:7c:b7:
         3e:e0:25:53:af:55:c7:9a:7a:2e:e8:7b:2b:02:a5:c5:0a:5a:
         74:87:5c:24:27:d5:ab:68:e1:0a:d1:27:50:c3:15:10:19:19:
         af:a9:9b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:55:44 2026 by rpki-client