Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          oUNMYSHZNOpZAC/fgKvt4o1l9hTrTm9EgneJyXuG4sg=
Subject key identifier:   5E:9B:87:1C:9C:D9:E3:CC:9C:CE:A8:9F:6E:63:3D:8B:D0:4B:2A:A1
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       019EE85754BF196F2D651480785FC61BFA26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          0894
Signing time:             Sun 21 Jun 2026 04:01:37 +0000
Manifest this update:     Sun 21 Jun 2026 04:01:37 +0000
Manifest next update:     Mon 22 Jun 2026 04:01:37 +0000
Files and hashes:         1: 0mKPMQWV_Qy-vh6NIOs-vGzzkcs.roa (hash: 40hzdqt6UbwBLVWM2lystwa7D/FQ/GMdaZDwu9K4ql4=)
                          2: BS20TmqftUiHcp-uC9dL2gI-BNc.roa (hash: pr6OCsI1Ad/tkV2rABLwG62aqjOA03sElNbNxIP4zvk=)
                          3: IHxGZu_O4SFl3mCd8QYX5eqd12E.roa (hash: 1i0b2nBfdKjb8NkkxZHECgejSLN+yW+3HQmhrGhzeOI=)
                          4: UMFicQc5pR1BZjbSliFsmn9hVsQ.roa (hash: J5/XGYpI2q8qdb/0SuhhGpJUPu+HCV/urhJXWQ6uRoM=)
                          5: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: mAgTF3KkVzIU1KwQEmnGh0rLqTfPOjMWAXubb+k7Olo=)
                          6: fYCGMW86HvkokqvOye3BXB7qdn0.roa (hash: AoWZDQMD3coEMg6j06S65Y7Jgk6AHa8z0l76aoDlKpI=)
                          7: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (hash: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 22 Jun 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:e8:57:54:bf:19:6f:2d:65:14:80:78:5f:c6:1b:fa:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Jun 21 04:01:37 2026 GMT
            Not After : Jun 22 04:01:37 2026 GMT
        Subject: CN=5e9b871c9cd9e3cc9ccea89f6e633d8bd04b2aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:06:07:18:c0:f6:f3:68:0a:59:ab:66:59:bf:
                    11:1c:39:99:a1:0c:84:e3:4c:fa:45:6b:b2:fe:f9:
                    d7:ac:69:fa:1d:c1:86:4f:74:e0:90:43:54:f6:52:
                    52:99:89:3e:c8:4b:80:6c:66:5d:1d:75:fb:50:13:
                    bd:7c:9a:d2:17:47:86:09:d8:96:75:a1:be:45:5f:
                    dc:57:14:88:d1:8d:61:d5:5e:68:ea:c5:b0:18:11:
                    a9:3c:9d:9a:91:eb:88:4c:dd:92:26:80:b2:75:43:
                    24:00:eb:45:37:03:ca:46:46:24:4f:95:f9:0b:be:
                    33:d8:7a:59:73:98:38:fa:df:51:df:25:93:77:99:
                    b3:ef:be:92:43:dc:b4:7a:fe:8f:26:11:4e:3a:37:
                    45:c8:21:a7:3b:79:52:b5:5a:c4:5c:18:df:ed:dc:
                    d2:37:cc:df:4f:b0:bc:ce:3f:0f:d2:e1:a4:e2:33:
                    f6:61:75:87:92:53:2f:76:21:de:dc:6d:49:fc:ec:
                    81:9c:53:be:3d:16:09:f0:c2:86:52:b8:d9:7d:21:
                    61:9a:1d:aa:13:33:ed:38:bf:00:3d:ec:90:04:b6:
                    90:b1:43:fd:ff:e9:e5:e8:8a:54:4d:30:25:26:f3:
                    7c:a1:5f:38:68:12:3a:58:b9:af:61:6d:2e:80:f6:
                    af:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9B:87:1C:9C:D9:E3:CC:9C:CE:A8:9F:6E:63:3D:8B:D0:4B:2A:A1
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:53:65:88:96:bd:fe:95:33:9c:e3:62:5c:4e:73:a5:64:c6:
         7a:ea:f1:b5:4c:23:ea:f1:fa:0d:45:76:e9:5c:4c:a4:9f:24:
         44:8e:af:e0:4a:e6:b3:ec:c1:e8:9c:25:41:55:77:77:07:cc:
         9b:fe:6f:50:06:e1:7d:71:ec:bf:90:76:78:13:fe:1f:82:b2:
         26:02:2f:99:8d:9a:5f:7d:63:4f:a9:37:42:1d:8c:b5:2b:c1:
         e2:fa:e4:18:df:17:c8:f1:19:ee:5e:16:83:66:9f:a1:f3:72:
         46:86:9c:55:c9:ff:40:25:4b:be:45:11:e2:6d:95:9d:f5:1a:
         f5:fe:61:d7:d3:45:ab:34:cd:11:c6:be:c3:20:e7:23:12:24:
         92:58:a0:d7:2d:64:14:43:f2:cd:ca:17:fa:2a:0f:4e:e1:5b:
         0b:2b:0a:f7:94:47:1e:95:b2:09:6d:41:29:e2:6a:59:74:da:
         7a:3a:c0:55:e5:ff:94:18:ee:29:87:fc:27:84:0b:ca:f2:e3:
         70:03:d4:ee:d5:d0:b0:89:7c:25:ff:8a:b9:04:64:2f:06:e6:
         75:2b:92:6a:21:61:c4:7f:50:89:ee:c5:cd:ff:53:7f:c0:dd:
         8f:0b:20:58:36:b6:9d:49:93:1d:0a:c9:1e:84:be:d7:1d:a4:
         a4:14:b8:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 21 12:43:21 2026 by rpki-client