Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
File:                     vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft (raw, json)
Hash identifier:          it6YtsJXAaorFWBRksvYwI/Si/5e54vlUOR2cnIHlF0=
Subject key identifier:   0D:D9:17:B7:C8:FF:78:71:87:98:02:30:D2:DF:5B:10:83:14:5F:5F
Authority key identifier: BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D
Certificate issuer:       /CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
Certificate serial:       019D9999167968FB1531D4D2C9D331CB8B59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
Manifest number:          0819
Signing time:             Fri 17 Apr 2026 04:00:39 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:39 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:39 +0000
Files and hashes:         1: EagfZf7uOA-EcxDU6NrLorRUTHg.roa (hash: ZzLwLxegYBjANU90XpuWKekpQSntlkwyY6ixkFnhEJs=)
                          2: vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl (hash: 7SU1BtRJCPBAzr7OxW0ruPeo9gVUZ0x7bn0cogazIPo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:16:79:68:fb:15:31:d4:d2:c9:d3:31:cb:8b:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd350606914333f7bfc2c0d1f8d3c3e4b72a302d
        Validity
            Not Before: Apr 17 04:00:39 2026 GMT
            Not After : Apr 18 04:00:39 2026 GMT
        Subject: CN=0dd917b7c8ff787187980230d2df5b1083145f5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6c:49:90:bb:fe:85:fa:f1:11:ee:a0:e6:8d:
                    3f:c4:2f:5a:75:14:b3:06:a7:07:a0:ba:36:bc:07:
                    dc:c6:0a:f9:ff:cf:e5:76:5e:c5:fa:7f:d8:e7:e1:
                    e1:91:e3:30:55:4a:ea:59:e0:4b:1d:a2:47:6d:a9:
                    80:67:32:22:00:4c:69:57:1b:ac:58:69:36:91:84:
                    22:c2:07:65:00:3d:8f:09:b4:6d:34:30:33:76:89:
                    00:5e:7a:c3:2d:57:72:9f:be:42:af:91:29:94:a7:
                    80:34:c3:69:15:31:8a:32:01:dc:33:5c:47:74:97:
                    2b:c5:a3:e7:a7:db:11:63:11:a1:99:5a:b3:2f:ef:
                    0a:67:02:34:9c:4d:76:da:2e:8d:cf:7d:6b:03:91:
                    ce:d0:ec:cc:ff:bc:e3:ce:39:8d:5e:62:5f:6c:6b:
                    d3:7b:fb:fc:03:d5:9e:e3:7c:ac:0d:c4:7f:d7:24:
                    f5:1d:c8:76:07:fe:ba:b2:9b:e2:83:fe:cb:b1:9d:
                    ca:5b:d7:fb:07:fc:a5:62:69:40:d0:5b:e8:9e:b4:
                    bd:0a:70:7b:93:e6:d2:f4:c2:e4:6f:61:6c:60:b4:
                    89:3f:56:f6:1a:b1:04:c2:4d:3d:ba:63:58:c9:85:
                    17:f7:4a:4e:28:5c:1a:19:1a:c5:61:c4:e1:30:83:
                    d3:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D9:17:B7:C8:FF:78:71:87:98:02:30:D2:DF:5B:10:83:14:5F:5F
            X509v3 Authority Key Identifier:
                keyid:BD:35:06:06:91:43:33:F7:BF:C2:C0:D1:F8:D3:C3:E4:B7:2A:30:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTUGBpFDM_e_wsDR-NPD5LcqMC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/f0c9d7-168f-4e10-b5a1-cdc8f9bbc372/1/vTUGBpFDM_e_wsDR-NPD5LcqMC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:eb:b4:6f:b8:ed:db:c3:53:f3:5e:13:06:3a:98:bc:65:0f:
         df:0f:62:fc:91:8e:75:9a:84:c4:42:27:8f:b8:93:6c:5e:23:
         4b:2d:e9:2c:36:59:37:7c:d0:34:c9:2f:1b:2c:39:d5:d7:5f:
         94:a8:76:0e:93:f3:00:5f:0c:b6:80:93:69:98:e6:42:69:3e:
         b1:db:7e:6a:24:8e:2f:3e:4f:2b:35:f8:f5:a1:b9:1f:09:00:
         79:31:a8:c4:98:17:0c:e4:f2:7a:af:41:42:b0:8d:0d:f6:63:
         50:2d:a5:7d:9f:94:a6:93:89:1a:9e:f9:78:b2:16:09:98:3d:
         6c:74:1b:25:bf:e7:47:95:7e:90:73:7c:c3:ac:16:6a:ee:37:
         12:93:a9:e6:34:da:25:0f:81:78:89:e2:42:e7:10:8c:3d:7f:
         6c:20:80:d0:4f:81:2f:e7:e1:fd:f7:77:b8:fb:0c:22:d3:61:
         ba:fd:5f:c5:f6:6d:c4:3d:20:58:31:32:06:8d:18:ba:c9:7f:
         3c:fc:ff:fc:51:10:5a:d4:07:48:ba:92:3e:20:4b:62:66:ae:
         d8:17:30:39:57:6b:05:9b:75:c5:ea:9d:f2:a3:e4:07:b0:a7:
         16:13:91:5f:09:5b:fc:ee:74:22:48:89:00:a5:14:69:14:41:
         60:b7:50:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:11 2026 by rpki-client