Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File:                     vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier:          f9OA0SJaJRoVzumsfyyWDH+WiqUgb614HTHX7b5G57M=
Subject key identifier:   0E:26:F7:8E:62:72:3C:A4:78:C9:14:99:72:06:8B:FB:B3:DF:D5:CF
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer:       /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial:       019EAD8AD78B49709F20B89FB4CFF95A67A6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number:          18D0
Signing time:             Tue 09 Jun 2026 18:00:17 +0000
Manifest this update:     Tue 09 Jun 2026 18:00:17 +0000
Manifest next update:     Wed 10 Jun 2026 18:00:17 +0000
Files and hashes:         1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
                          2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: aRlWrEK2IfwwWxqiLp4dO44IXE4wSt4n0mK5gj16xNk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 10 Jun 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:ad:8a:d7:8b:49:70:9f:20:b8:9f:b4:cf:f9:5a:67:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
        Validity
            Not Before: Jun  9 18:00:17 2026 GMT
            Not After : Jun 10 18:00:17 2026 GMT
        Subject: CN=0e26f78e62723ca478c9149972068bfbb3dfd5cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:42:7e:da:fb:04:3f:cd:9a:e7:d7:e3:8d:d7:
                    47:db:ac:49:36:0e:e0:25:2b:1d:c6:2e:29:6f:98:
                    6d:e2:c8:37:fd:fe:4e:a6:e9:f8:f9:d2:e1:5f:c4:
                    e4:91:69:60:5e:f0:56:98:b1:eb:c9:11:88:3c:dc:
                    58:34:33:98:1c:71:9d:73:2e:0d:75:ed:a8:0a:01:
                    28:02:1e:9c:30:36:3a:59:3e:73:0d:cc:1b:ad:48:
                    f4:1a:f3:d1:71:ce:ba:c0:aa:30:40:5d:f0:79:fc:
                    5b:f0:e0:73:24:23:4c:dc:95:10:80:95:15:6c:48:
                    c1:83:80:51:5d:12:2e:23:63:2c:1b:e0:a9:c0:dc:
                    df:bf:25:94:f5:6f:7c:3c:c1:b4:7b:38:13:56:df:
                    d6:ed:f8:07:0e:2d:2d:56:e4:18:14:3b:9b:a6:e3:
                    a9:99:88:08:f3:ed:a1:c5:77:f0:26:a7:01:22:6e:
                    fe:2d:c4:b1:d8:ae:cf:86:fb:eb:cc:02:cc:8e:17:
                    9b:73:91:af:27:24:e0:28:94:60:ef:b9:ee:49:cb:
                    47:0d:c8:f4:e7:f1:fa:0c:ac:b1:af:c1:63:e6:cc:
                    89:ca:c6:b2:c2:fd:e3:e0:71:3f:6c:8d:ad:76:8e:
                    59:e4:4f:7a:4c:5c:fc:41:ba:f2:9e:5a:73:54:33:
                    27:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:26:F7:8E:62:72:3C:A4:78:C9:14:99:72:06:8B:FB:B3:DF:D5:CF
            X509v3 Authority Key Identifier:
                keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:24:5f:34:7c:4c:76:e0:9b:3e:55:37:a7:7e:76:02:22:80:
         70:8c:24:b5:4a:7a:94:c4:c6:0b:6d:40:3f:83:f9:08:b4:de:
         f9:77:1a:53:4d:d1:7c:7f:36:3f:04:df:ce:e5:bd:91:6b:e6:
         c9:0c:00:09:59:3d:cd:55:cc:47:f1:58:2c:ff:46:fa:11:ab:
         32:18:05:6a:0c:5a:45:01:e4:c3:bb:90:71:63:f3:3c:5c:f1:
         f4:f5:14:e2:0b:31:8a:12:b4:5d:90:12:1c:e2:c9:24:31:3a:
         b7:b9:47:57:e1:b1:a3:e0:78:17:d6:7b:a3:1b:ab:84:25:19:
         5d:80:52:f3:0b:60:a0:df:3d:f3:71:ff:3a:26:4b:2d:8e:ea:
         8b:9d:eb:70:38:75:0b:a6:28:a7:1c:dc:38:97:5a:31:80:a5:
         75:af:b1:e6:6d:9b:36:e2:80:b4:1c:2d:a9:cc:c8:9c:61:a0:
         5c:7c:4a:87:42:95:0d:4a:f3:b9:55:5f:f1:37:3b:f9:c2:16:
         bc:e1:fe:62:ab:91:dd:e8:e7:97:27:97:55:fd:33:aa:1d:e5:
         e3:52:c7:b8:71:3d:d2:4f:61:93:7b:8d:aa:b8:a6:4f:20:dc:
         23:21:7a:dd:c7:c1:ab:11:1c:e3:30:8f:36:4a:ff:48:58:d9:
         79:62:2a:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 9 22:18:21 2026 by rpki-client