Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          2JwbrFodX/t6aBIL2W1VKwcFdogVPgMqFopvQmmrkHw=
Subject key identifier:   62:D3:31:56:AE:C2:7A:68:D0:82:0C:39:6E:94:9D:6C:31:46:FB:FF
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       019E03631006F50E99166A5CA5D7209D32F6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          18F9
Signing time:             Thu 07 May 2026 17:01:24 +0000
Manifest this update:     Thu 07 May 2026 17:01:24 +0000
Manifest next update:     Fri 08 May 2026 17:01:24 +0000
Files and hashes:         1: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
                          2: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
                          3: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
                          4: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
                          5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: gpZWeBHdwODSrkdfWgDwp34U/mcTbrKOxSgJ0I9kI1I=)
                          6: v7DRMSksGTlDfhs744praVhJlnw.roa (hash: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 08 May 2026 14:33:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:03:63:10:06:f5:0e:99:16:6a:5c:a5:d7:20:9d:32:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: May  7 17:01:24 2026 GMT
            Not After : May  8 17:01:24 2026 GMT
        Subject: CN=62d33156aec27a68d0820c396e949d6c3146fbff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:39:02:af:ff:32:e8:00:69:20:c3:bb:53:b0:
                    cd:b6:a2:d6:e0:4d:21:2f:67:17:31:e9:8f:3c:95:
                    7e:92:ff:26:c2:66:b3:73:64:c4:ec:c5:a8:7c:0d:
                    c2:d4:15:40:a7:52:a6:bb:98:d8:f0:ea:67:24:b5:
                    8b:dd:cb:7b:32:8f:96:8e:16:24:b8:34:fb:31:72:
                    1c:92:4d:93:d6:f8:25:be:51:aa:25:87:fe:a7:a3:
                    6b:ec:56:7d:37:04:15:96:ce:1b:69:16:39:80:90:
                    c0:a1:32:92:54:8e:ea:17:48:73:0c:73:30:58:2a:
                    26:09:7e:29:33:43:0d:52:31:9b:2d:a7:ad:bc:30:
                    c4:bf:82:ef:fc:42:4b:f0:03:8d:e4:62:05:ea:83:
                    5b:49:63:d4:66:25:2f:41:03:2c:63:91:e1:9a:01:
                    3f:aa:62:e5:ea:c0:51:a0:09:d5:53:ed:31:0a:01:
                    fd:b2:8b:b3:d5:b7:15:9d:58:e6:db:24:24:7c:5b:
                    75:6c:3e:bc:5b:b9:96:15:49:40:bf:7c:cb:ac:40:
                    e4:0b:91:03:f1:f0:de:a4:c1:21:25:64:cf:e7:65:
                    23:0e:d5:a0:5e:99:4b:c4:0d:34:48:5c:ba:fb:a7:
                    c6:84:36:3c:6e:23:ea:ec:8f:ac:c7:0f:b4:9a:d5:
                    9d:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:D3:31:56:AE:C2:7A:68:D0:82:0C:39:6E:94:9D:6C:31:46:FB:FF
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d6:45:c5:88:56:0e:f5:a3:58:8e:2a:8d:b6:99:47:ee:b9:f2:
         dd:df:d0:23:7f:99:0a:b3:c6:db:e6:e1:1c:84:93:bd:6c:7f:
         97:e1:54:35:9c:82:e0:4f:63:17:fe:e1:cc:a2:9b:65:32:3e:
         c4:8c:ac:f4:ae:59:a7:7d:b1:92:c4:c4:3b:81:f9:11:79:79:
         b1:17:70:cb:c4:e6:8d:4e:5b:ed:18:cd:b4:3e:7b:90:cf:2a:
         20:1f:62:73:42:1f:3b:2a:15:b1:e9:1a:7c:a6:6d:90:f1:a6:
         5b:36:6b:66:08:d5:dd:c1:fc:09:6b:af:6b:00:ae:b6:fd:de:
         88:ac:40:eb:0e:a1:4f:53:17:ad:47:ae:7e:b6:78:74:e6:76:
         6c:0d:85:32:14:b6:7d:e1:1a:53:2d:bc:65:0c:ed:97:ec:88:
         6d:88:f0:65:88:51:72:37:8e:e7:1a:78:19:84:a3:83:19:75:
         fe:3d:49:b2:dc:63:6e:e3:73:84:a7:a0:5b:37:2f:c5:06:96:
         08:cc:ab:66:38:87:7c:36:7a:0a:ec:78:48:f5:7a:2c:f8:8c:
         02:ee:2c:b8:84:8c:c0:9c:44:37:6d:e6:f0:4c:0b:61:8f:2e:
         b8:74:31:61:26:03:f7:8d:b6:fa:b5:7e:3d:18:4b:13:27:1a:
         4c:64:08:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4DYxAG9Q6ZFmpcpdcgnTL2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NTgwMDMwMGZhNDAxN2Y5NzBjOTVkNzY3ZDgxMmZkMTBk
MGRjYmMwHhcNMjYwNTA3MTcwMTI0WhcNMjYwNTA4MTcwMTI0WjAzMTEwLwYDVQQD
Eyg2MmQzMzE1NmFlYzI3YTY4ZDA4MjBjMzk2ZTk0OWQ2YzMxNDZmYmZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTkCr/8y6ABpIMO7U7DNtqLW4E0h
L2cXMemPPJV+kv8mwmazc2TE7MWofA3C1BVAp1Kmu5jY8OpnJLWL3ct7Mo+WjhYk
uDT7MXIckk2T1vglvlGqJYf+p6Nr7FZ9NwQVls4baRY5gJDAoTKSVI7qF0hzDHMw
WComCX4pM0MNUjGbLaetvDDEv4Lv/EJL8AON5GIF6oNbSWPUZiUvQQMsY5HhmgE/
qmLl6sBRoAnVU+0xCgH9souz1bcVnVjm2yQkfFt1bD68W7mWFUlAv3zLrEDkC5ED
8fDepMEhJWTP52UjDtWgXplLxA00SFy6+6fGhDY8biPq7I+sxw+0mtWdAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLTMVauwnpo0IIMOW6UnWwxRvv/MB8GA1UdIwQY
MBaAFLVYADAPpAF/lwyV12fYEv0Q0Ny8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQt
YzUyZGY0YWE1MjFkLzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC84YTg0ODctOTMxYS00MmZiLWI2NjQtYzUyZGY0YWE1MjFk
LzEvdFZnQU1BLWtBWC1YREpYWFo5Z1NfUkRRM0x3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1kXFiFYO
9aNYjiqNtplH7rny3d/QI3+ZCrPG2+bhHISTvWx/l+FUNZyC4E9jF/7hzKKbZTI+
xIys9K5Zp32xksTEO4H5EXl5sRdwy8TmjU5b7RjNtD57kM8qIB9ic0IfOyoVseka
fKZtkPGmWzZrZgjV3cH8CWuvawCutv3eiKxA6w6hT1MXrUeufrZ4dOZ2bA2FMhS2
feEaUy28ZQztl+yIbYjwZYhRcjeO5xp4GYSjgxl1/j1JstxjbuNzhKegWzcvxQaW
CMyrZjiHfDZ6Cux4SPV6LPiMAu4suISMwJxEN23m8EwLYY8uuHQxYSYD9422+rV+
PRhLEycaTGQI1w==
-----END CERTIFICATE-----
Generated at Thu May 7 23:51:25 2026 by rpki-client