Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          JC/DtOiPsU2F2Q/9mpwhBJ/OGjNWC5Kxa88bDZVrgfU=
Subject key identifier:   04:E9:40:57:B6:17:C1:66:34:26:51:04:95:2E:E5:3E:A8:9D:FE:48
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       019EE8C57F09FA94010C19903F48AECDFDE5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          0160
Signing time:             Sun 21 Jun 2026 06:01:57 +0000
Manifest this update:     Sun 21 Jun 2026 06:01:57 +0000
Manifest next update:     Mon 22 Jun 2026 06:01:57 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: UaBHf5k/72AN0rNvQapo9grPHd18FxaObrQJ1dA/IAI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 06:01:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:c5:7f:09:fa:94:01:0c:19:90:3f:48:ae:cd:fd:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Jun 21 06:01:57 2026 GMT
            Not After : Jun 22 06:01:57 2026 GMT
        Subject: CN=04e94057b617c16634265104952ee53ea89dfe48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:51:34:c9:06:ed:86:1c:7c:97:64:ae:66:
                    d4:0c:e7:9a:f7:7b:14:c4:2b:b6:17:ab:c1:e8:0f:
                    07:ee:e8:1e:eb:a4:5e:87:89:08:db:7c:26:b7:02:
                    9a:02:11:11:54:5d:50:a0:f6:f5:0b:88:58:24:06:
                    a5:f9:e1:8d:17:6a:3b:c2:7c:a3:1f:e5:86:6e:92:
                    36:9a:d2:b6:1f:b9:4d:d1:d9:40:0a:49:fb:c4:75:
                    7e:20:5f:51:56:32:c6:15:3f:62:ac:7e:28:8d:43:
                    97:de:7f:e6:d1:ca:f1:b9:f8:9a:c2:e6:26:c1:bb:
                    09:1c:88:c0:f7:b5:31:97:b2:db:94:9a:2a:ee:5e:
                    dd:ea:69:1a:a1:2e:33:af:db:5d:e4:c5:43:e1:fc:
                    86:00:64:be:d8:24:7b:dc:bb:6e:cf:ed:1d:44:fa:
                    1e:35:b4:d5:e1:0e:55:87:7e:cb:1a:2a:9b:16:60:
                    a4:37:00:29:b1:c7:dc:4e:89:91:b0:cf:85:b3:b4:
                    5a:01:b4:3c:7e:0e:ef:3f:14:ec:e7:1d:cd:40:82:
                    38:01:20:ca:42:91:9e:ea:35:5a:35:65:da:54:8b:
                    75:a9:33:7c:bf:a0:9d:4b:96:50:fd:a0:a6:e8:45:
                    21:fe:d2:61:84:c2:0c:84:9d:5c:5b:a8:a7:2b:df:
                    61:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:E9:40:57:B6:17:C1:66:34:26:51:04:95:2E:E5:3E:A8:9D:FE:48
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:47:ec:77:86:fb:ab:48:64:bb:be:ca:b9:f7:31:3c:c2:e8:
         99:94:50:c4:39:8e:80:0f:65:27:6f:2f:2a:d3:af:50:89:14:
         f9:76:17:b5:05:c6:c6:b9:50:60:24:e7:81:1f:03:e6:f7:22:
         8c:fd:82:54:84:bd:5a:13:31:dd:2b:12:ff:d7:af:7a:cc:03:
         ad:73:33:c7:cc:5d:34:4d:98:26:77:e5:5b:f4:42:36:71:a9:
         6c:f3:2e:db:da:bc:19:36:2d:95:94:98:ce:4c:84:90:3e:0b:
         a0:91:48:fd:9f:c8:57:a9:db:b1:b5:b4:80:c8:e8:2c:28:01:
         0f:d6:39:3a:6f:80:81:7e:06:5c:32:14:e3:2f:63:1f:3e:5e:
         d7:19:84:06:4e:8e:65:4b:89:ac:7c:14:6a:13:56:24:db:ab:
         c6:6d:37:35:78:f1:3b:30:b1:d0:7d:90:7e:95:70:6d:12:c1:
         0b:f1:fe:68:ad:6f:6d:52:fe:7b:0b:1e:0c:9e:66:0c:e2:65:
         03:b2:96:79:d7:b8:6d:dd:5b:1b:3e:ba:f1:64:3d:51:66:02:
         34:06:29:35:cf:a0:48:1a:d8:1b:58:ed:c6:2c:5e:07:4c:fb:
         e9:0d:03:bd:4d:ce:8b:57:69:25:f9:db:83:fe:fa:d8:77:cc:
         a9:56:9f:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7oxX8J+pQBDBmQP0iuzf3lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWUxYzA3NDU3MTExYjljMmI5NzJlYmI4MThkZGY5NWJj
ODA0ZjIwHhcNMjYwNjIxMDYwMTU3WhcNMjYwNjIyMDYwMTU3WjAzMTEwLwYDVQQD
EygwNGU5NDA1N2I2MTdjMTY2MzQyNjUxMDQ5NTJlZTUzZWE4OWRmZTQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy75RNMkG7YYcfJdkrmbUDOea93sU
xCu2F6vB6A8H7uge66Reh4kI23wmtwKaAhERVF1QoPb1C4hYJAal+eGNF2o7wnyj
H+WGbpI2mtK2H7lN0dlACkn7xHV+IF9RVjLGFT9irH4ojUOX3n/m0crxufiawuYm
wbsJHIjA97Uxl7LblJoq7l7d6mkaoS4zr9td5MVD4fyGAGS+2CR73Ltuz+0dRPoe
NbTV4Q5Vh37LGiqbFmCkNwApscfcTomRsM+Fs7RaAbQ8fg7vPxTs5x3NQII4ASDK
QpGe6jVaNWXaVIt1qTN8v6CdS5ZQ/aCm6EUh/tJhhMIMhJ1cW6inK99hEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATpQFe2F8FmNCZRBJUu5T6onf5IMB8GA1UdIwQY
MBaAFLzuHAdFcRG5wrly67gY3flbyATyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk80Y0IwVnhFYm5DdVhMcnVCamQtVnZJQlBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82MTExNmYtM2NiNi00ZGQ0LTkzMjct
YzFkNmJhMGQ3NzQ2LzEvdk80Y0IwVnhFYm5DdVhMcnVCamQtVnZJQlBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi82MTExNmYtM2NiNi00ZGQ0LTkzMjctYzFkNmJhMGQ3NzQ2
LzEvdk80Y0IwVnhFYm5DdVhMcnVCamQtVnZJQlBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKEfsd4b7
q0hku77KufcxPMLomZRQxDmOgA9lJ28vKtOvUIkU+XYXtQXGxrlQYCTngR8D5vci
jP2CVIS9WhMx3SsS/9eveswDrXMzx8xdNE2YJnflW/RCNnGpbPMu29q8GTYtlZSY
zkyEkD4LoJFI/Z/IV6nbsbW0gMjoLCgBD9Y5Om+AgX4GXDIU4y9jHz5e1xmEBk6O
ZUuJrHwUahNWJNurxm03NXjxOzCx0H2QfpVwbRLBC/H+aK1vbVL+ewseDJ5mDOJl
A7KWede4bd1bGz668WQ9UWYCNAYpNc+gSBrYG1jtxixeB0z76Q0DvU3Oi1dpJfnb
g/762HfMqVafEA==
-----END CERTIFICATE-----
Generated at Sun Jun 21 13:53:34 2026 by rpki-client