Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          WFYXZFJfVom3Os9MGDJ8mJSewSuKtZDBbaPH/AeLeJU=
Subject key identifier:   64:F4:4E:79:3E:D3:64:14:45:1D:2A:1F:72:72:28:A7:E0:76:7B:7D
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       019EB9211F122D24FD6C5036A00837DEDA10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          1959
Signing time:             Fri 12 Jun 2026 00:00:15 +0000
Manifest this update:     Fri 12 Jun 2026 00:00:15 +0000
Manifest next update:     Sat 13 Jun 2026 00:00:15 +0000
Files and hashes:         1: 2ikB92Z1YZga53T_5TgPbCYNO2U.roa (hash: 6LYS7/XU1c9VFgwkPm/Cq36EgEjl8++/LJln5tJD5X8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: D2UavqvtE4NTtcq2RaTcNmIvBDLHZQKW5g73sV7pdsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 20:26:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b9:21:1f:12:2d:24:fd:6c:50:36:a0:08:37:de:da:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Jun 12 00:00:15 2026 GMT
            Not After : Jun 13 00:00:15 2026 GMT
        Subject: CN=64f44e793ed36414451d2a1f727228a7e0767b7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5c:98:d2:27:b5:38:fd:18:de:67:db:72:42:
                    8f:1f:6b:dd:bb:37:48:59:07:79:e3:27:eb:36:de:
                    42:a0:c9:f7:2d:36:f3:4a:99:80:c5:e8:4a:73:3e:
                    84:df:85:ea:5f:aa:f0:c1:7b:5d:68:a1:35:ec:ae:
                    6a:86:bb:15:90:9a:9a:b3:4e:3f:92:4a:69:ad:48:
                    68:6d:db:0e:5e:c1:c5:7b:9f:e9:02:91:e0:7f:ad:
                    f8:e5:63:f0:f3:01:df:b7:1d:90:4f:11:c1:d9:de:
                    c0:4b:7d:88:79:1f:6b:33:67:62:61:ea:a3:78:fe:
                    4c:a0:38:1f:a3:5c:23:07:bd:3c:04:cb:25:20:da:
                    1d:95:c4:91:cd:6f:d0:63:e0:77:09:99:56:b9:b0:
                    3c:d6:28:61:ca:6c:98:a1:34:70:8a:4f:a9:b6:4e:
                    14:a0:b9:5f:fe:1c:98:ff:1b:75:55:4b:3b:00:cf:
                    a9:0d:e0:30:44:41:19:89:92:de:4e:33:47:3e:68:
                    4a:a3:39:04:ea:ec:4c:e7:49:44:c2:e9:b5:7e:ae:
                    07:54:d3:d1:1c:8e:df:96:d5:8a:f4:09:b6:62:bf:
                    2f:78:15:bb:89:de:83:b8:8f:be:66:ea:f5:e8:79:
                    b0:18:bf:24:2d:84:e8:0d:c7:16:27:48:b9:c3:58:
                    a3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:F4:4E:79:3E:D3:64:14:45:1D:2A:1F:72:72:28:A7:E0:76:7B:7D
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:11:d5:91:fe:63:55:05:2a:33:d3:1c:65:58:fe:92:51:51:
         7b:c2:f3:8e:9e:42:05:82:7c:b6:d5:8c:3c:84:d3:86:8d:b5:
         e5:fc:13:57:7d:4d:62:d7:6c:34:1b:63:a8:34:71:4c:7b:43:
         84:f6:90:43:c6:fe:a3:f2:82:28:cc:90:35:4e:cf:6f:bb:7a:
         f8:a8:5e:9d:08:ec:da:ca:c7:b9:1e:fa:88:1e:4b:6b:0f:d0:
         ec:f0:f3:5f:b8:f8:6b:f5:17:5d:52:4a:42:dc:20:0f:19:cb:
         e4:0e:b8:67:9f:36:73:87:56:a4:03:8b:25:b8:ba:ae:2f:4c:
         42:7c:bf:2c:7d:47:0c:ff:76:41:85:ae:6d:cd:3e:11:b8:a8:
         80:28:b7:04:12:bd:c0:90:4e:50:60:61:45:d6:fa:68:a3:0e:
         4c:41:af:4c:70:97:2a:8b:56:ec:a3:ea:39:34:02:ae:5d:70:
         f2:2e:80:da:a7:95:49:5b:03:6d:6d:8d:2c:f5:d6:8f:3e:58:
         f4:24:a6:ca:98:f8:e4:02:01:52:10:58:ae:3a:89:ff:aa:68:
         3b:47:ee:09:d4:38:ef:1b:6c:5b:48:ad:a9:cb:3d:e1:ed:c3:
         93:f0:1c:72:21:10:1a:1e:e7:e6:17:bb:2e:96:cc:74:d6:3e:
         5c:f7:f1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:03:30 2026 by rpki-client