Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File:                     V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier:          tefZRSMQkkvWXO45TvoyhAmjTVH7YlygoRr1bA2DJho=
Subject key identifier:   D4:FE:6C:91:23:87:1E:FF:9C:38:BE:38:A8:5A:ED:28:60:77:69:40
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer:       /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial:       01A001DD7F6ABE8C72482CAFD98A4CE7533B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number:          19BC
Signing time:             Fri 14 Aug 2026 20:01:28 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:28 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:28 +0000
Files and hashes:         1: 1K2LFFiurWkSS6BehPIABgELzig.roa (hash: eUzuwicyTeWiMVFNehYoQf9+T/XhqLc10wnGWFbChM0=)
                          2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: tT7JZewsUM8JDVF8kB+ihllaxbHUqKhrTzs0MLtXnVY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 20:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:7f:6a:be:8c:72:48:2c:af:d9:8a:4c:e7:53:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
        Validity
            Not Before: Aug 14 20:01:28 2026 GMT
            Not After : Aug 15 20:01:28 2026 GMT
        Subject: CN=d4fe6c9123871eff9c38be38a85aed2860776940
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:62:52:7d:11:15:77:ba:77:41:09:e7:b7:85:
                    70:28:62:9e:00:a7:34:b6:9e:88:2d:19:8f:bd:85:
                    dd:f0:23:75:b9:03:c0:46:f4:a5:99:9c:7e:70:ea:
                    e9:5b:a5:43:b4:ef:73:cf:e6:75:82:1c:c6:b9:4b:
                    3d:6d:b4:f0:81:c7:1f:a2:71:60:41:44:32:98:e9:
                    d1:f3:bf:02:9c:d3:91:d5:24:00:82:f7:11:c5:aa:
                    b5:db:07:ed:d3:8b:4b:e2:5b:58:dd:43:34:06:91:
                    be:5b:db:3b:98:4e:ee:53:79:56:eb:4e:cb:04:b6:
                    a2:6e:a6:8b:a3:8f:51:b4:db:ee:d1:21:23:bc:42:
                    4e:b0:43:cf:b6:5b:4d:dc:41:2f:d0:42:44:68:25:
                    31:07:6d:ff:f1:34:95:45:58:5b:47:3a:71:24:80:
                    39:14:a4:1a:a8:3c:2c:ec:d8:d7:c0:3e:c1:ac:5f:
                    e1:6f:56:c6:01:10:8e:08:bc:e5:bb:27:f2:48:7e:
                    f9:1a:f4:73:36:10:7f:ff:f0:a1:95:6b:d6:f7:fd:
                    0b:26:2f:30:30:d7:ce:3c:bc:f8:97:d3:69:c5:e4:
                    a7:07:62:f3:d3:26:1d:81:02:42:56:80:7e:15:f5:
                    d4:b0:a7:d9:67:48:f7:96:f9:b5:99:d9:03:04:0f:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FE:6C:91:23:87:1E:FF:9C:38:BE:38:A8:5A:ED:28:60:77:69:40
            X509v3 Authority Key Identifier:
                keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:9c:d6:dd:27:66:f1:09:0d:23:dd:0a:53:b7:70:e2:00:48:
         d3:1f:a5:86:73:0d:3d:63:e8:aa:2b:ae:40:6b:81:28:81:05:
         3f:36:1b:bf:6e:82:25:b7:6f:0f:66:d0:83:2b:67:e5:c1:20:
         62:fa:c8:0b:28:45:54:31:a6:90:77:46:f8:92:bd:d1:f5:f5:
         55:1e:81:87:91:5a:8e:14:4d:eb:5f:9b:59:f9:b0:9c:d9:aa:
         6e:8c:29:4f:24:94:29:39:27:80:91:c9:11:1f:10:95:19:40:
         c5:d9:47:dd:47:92:4b:24:5a:8b:ab:50:39:a7:37:84:23:ad:
         ab:18:53:e2:14:07:ed:43:ac:84:ca:77:95:3c:94:d2:a7:e7:
         b0:31:e7:c1:2f:0a:0d:47:12:f7:98:08:95:58:5e:e2:0a:50:
         fe:d4:3e:10:5e:19:35:cf:e3:88:15:60:b0:a2:98:3c:c8:1a:
         be:d5:74:a2:2a:ec:f0:7b:15:03:72:8a:9f:52:70:98:8f:18:
         74:49:95:4a:62:f7:cd:30:af:db:d2:dc:3c:eb:f1:dd:96:84:
         a8:fc:c9:09:be:88:01:fa:72:4c:af:94:56:46:7c:79:32:51:
         8d:c2:ee:99:73:8c:87:7d:15:91:7c:74:f7:e4:64:1b:26:bc:
         32:34:50:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:46 2026 by rpki-client