Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
File:                     vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json)
Hash identifier:          7mUosSZuaZB25zSl/Y2TwM4ZLCzG0mxb/b4oBuvO+LI=
Subject key identifier:   CB:D4:25:58:14:84:23:8B:75:BE:DA:2D:2C:E0:A4:EE:19:C0:6B:B6
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Certificate issuer:       /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial:       019FAB9A5F08614487BC116C8FED67F74016
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
Manifest number:          1966
Signing time:             Wed 29 Jul 2026 02:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 02:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 02:00:48 +0000
Files and hashes:         1: _qrU1bCSPRoOOveg6cKRbdBRuMk.roa (hash: EuanKU6jP53XoKKJyuThtthL9JW99aO6nJOSR8TpqPE=)
                          2: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: 9HNDvRqr7YoHJkdVXh3iXCerCAr96LTapPAGzffvckI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 02:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:9a:5f:08:61:44:87:bc:11:6c:8f:ed:67:f7:40:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
        Validity
            Not Before: Jul 29 02:00:48 2026 GMT
            Not After : Jul 30 02:00:48 2026 GMT
        Subject: CN=cbd425581484238b75beda2d2ce0a4ee19c06bb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:44:ac:e8:ee:cd:e1:00:db:63:ec:09:cd:ba:
                    95:bf:d9:b2:00:21:3b:8e:5a:d2:f3:ae:71:73:e8:
                    20:18:06:77:41:77:30:25:20:51:d5:1b:68:77:72:
                    c1:52:f2:59:bc:69:18:41:a5:6e:f8:c8:85:a0:20:
                    c1:f8:52:d4:2a:99:e9:54:dc:78:ae:26:7d:db:03:
                    9b:e2:26:69:3e:fd:1d:68:54:1f:88:52:08:60:98:
                    04:1b:9d:ba:f0:bc:36:56:91:95:33:18:68:36:ac:
                    87:0f:f9:27:b4:ef:49:3e:bf:86:b1:d9:a6:a9:ce:
                    a4:96:89:0f:f2:45:6a:5b:4a:21:31:bb:84:e5:b0:
                    ba:a5:d2:65:e3:74:f9:c2:51:d6:af:e8:a2:aa:83:
                    8d:e3:c9:f6:2c:45:f1:a2:0a:03:86:fd:10:3e:1e:
                    cc:28:3e:1e:cf:5c:47:a7:e1:06:0b:4b:44:2f:31:
                    0b:ca:9d:f1:4d:ff:33:85:fa:39:86:83:8c:0a:46:
                    cf:a6:1a:ae:bb:cf:f3:b8:b1:0f:ac:70:91:a1:bf:
                    5d:bd:f1:43:a8:7e:63:a1:d3:1f:c7:6a:6f:2c:34:
                    9f:3a:74:64:2d:83:e3:b3:ab:d0:88:ed:73:9c:b7:
                    9d:e0:27:7e:a1:49:be:81:55:23:bc:81:2b:35:2b:
                    07:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D4:25:58:14:84:23:8B:75:BE:DA:2D:2C:E0:A4:EE:19:C0:6B:B6
            X509v3 Authority Key Identifier:
                keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:4a:c7:2a:e5:68:d8:88:f2:50:aa:2d:48:13:a2:07:ef:e3:
         f5:34:2b:f4:f0:cb:d8:19:9c:ce:ea:71:fe:72:85:b7:b2:bb:
         ec:0f:12:84:d9:da:c8:9c:91:ad:79:e6:d1:df:b2:c1:fd:93:
         b5:4e:b7:e9:c2:aa:04:02:58:05:fd:87:65:a9:b2:6a:c7:26:
         06:fd:54:d2:fb:96:ad:3c:7e:d3:87:52:cd:72:39:af:f4:6a:
         76:d7:bf:8a:60:42:2c:14:c3:95:e8:2f:8e:e7:55:cf:9e:43:
         c0:80:f2:b1:bb:b7:69:b9:db:ef:38:d4:fc:ae:01:ed:63:cf:
         09:03:ed:2b:39:92:1f:10:0a:2b:92:92:ef:00:bc:63:c4:d1:
         c9:e4:4c:06:ff:91:da:9f:08:17:17:40:1b:6f:13:1d:9d:b9:
         df:0f:e3:df:60:cc:39:b6:9f:c7:23:18:c7:19:bc:a4:d6:78:
         ca:d3:27:a4:28:d2:7b:87:b7:05:88:ac:0b:42:47:88:1b:a4:
         81:ac:46:0c:eb:56:db:7f:d6:b3:59:3f:c4:4f:5c:ec:df:9f:
         2f:43:04:eb:cf:18:5a:8e:74:39:52:33:dd:4a:11:00:2c:af:
         7a:06:28:d6:88:ab:f3:17:37:df:01:40:33:e0:cb:a9:6b:62:
         51:52:c7:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+rml8IYUSHvBFsj+1n90AWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTg0ZDMwZDFmZDJmZGU1MGJlYTZmNzBmZTJkYmUyMDUx
OGEwM2UwHhcNMjYwNzI5MDIwMDQ4WhcNMjYwNzMwMDIwMDQ4WjAzMTEwLwYDVQQD
EyhjYmQ0MjU1ODE0ODQyMzhiNzViZWRhMmQyY2UwYTRlZTE5YzA2YmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArESs6O7N4QDbY+wJzbqVv9myACE7
jlrS865xc+ggGAZ3QXcwJSBR1Rtod3LBUvJZvGkYQaVu+MiFoCDB+FLUKpnpVNx4
riZ92wOb4iZpPv0daFQfiFIIYJgEG5268Lw2VpGVMxhoNqyHD/kntO9JPr+Gsdmm
qc6klokP8kVqW0ohMbuE5bC6pdJl43T5wlHWr+iiqoON48n2LEXxogoDhv0QPh7M
KD4ez1xHp+EGC0tELzELyp3xTf8zhfo5hoOMCkbPphquu8/zuLEPrHCRob9dvfFD
qH5jodMfx2pvLDSfOnRkLYPjs6vQiO1znLed4Cd+oUm+gVUjvIErNSsHKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvUJVgUhCOLdb7aLSzgpO4ZwGu2MB8GA1UdIwQY
MBaAFLwYTTDR/S/eUL6m9w/i2+IFGKA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUt
MDVkN2JkNGE3NDFkLzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC84Y2M0N2YtMDI2NS00MDdjLWJhNDUtMDVkN2JkNGE3NDFk
LzEvdkJoTk1OSDlMOTVRdnFiM0QtTGI0Z1VZb0Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZUrHKuVo
2IjyUKotSBOiB+/j9TQr9PDL2Bmczupx/nKFt7K77A8ShNnayJyRrXnm0d+ywf2T
tU636cKqBAJYBf2HZamyascmBv1U0vuWrTx+04dSzXI5r/Rqdte/imBCLBTDlegv
judVz55DwIDysbu3abnb7zjU/K4B7WPPCQPtKzmSHxAKK5KS7wC8Y8TRyeRMBv+R
2p8IFxdAG28THZ253w/j32DMObafxyMYxxm8pNZ4ytMnpCjSe4e3BYisC0JHiBuk
gaxGDOtW23/Ws1k/xE9c7N+fL0ME688YWo50OVIz3UoRACyvegYo1oir8xc33wFA
M+DLqWtiUVLH7g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:01:29 2026 by rpki-client