Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          vvVuOmGhUUOmafdzXoGwc4IIT4KuQCwnzg9kVSH/D5Y=
Subject key identifier:   2D:34:77:27:60:7E:81:43:5B:DE:5E:00:3F:A2:32:8B:A1:AD:65:71
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       019FAC3ECED037AF6C8A35BEEF538423A4F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          04C2
Signing time:             Wed 29 Jul 2026 05:00:24 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:24 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:24 +0000
Files and hashes:         1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: 5FISUeLHIb2CaWW+b5uSP+BR/83Nu1Xf/zJ7UV3tZ04=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:ce:d0:37:af:6c:8a:35:be:ef:53:84:23:a4:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Jul 29 05:00:24 2026 GMT
            Not After : Jul 30 05:00:24 2026 GMT
        Subject: CN=2d347727607e81435bde5e003fa2328ba1ad6571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:41:31:90:da:a1:ac:73:3a:a3:86:b0:bf:f9:
                    8c:b6:62:a5:eb:6c:50:26:a9:1e:52:68:60:90:c6:
                    a0:7e:c7:c0:bc:94:29:5e:9d:04:dc:fe:42:03:fb:
                    26:33:d5:06:42:e9:52:5e:91:5a:bc:50:11:f9:88:
                    69:e9:3f:e7:95:3c:1b:aa:87:7b:f7:5c:2f:51:10:
                    fc:be:a3:a8:fd:16:b5:19:cd:71:1f:c2:57:b5:0e:
                    85:d3:31:ca:bc:db:d3:dd:d9:9d:e6:bf:5f:d9:b7:
                    53:82:c3:67:32:3a:46:1e:73:28:23:04:ca:41:12:
                    48:36:d1:5e:8a:38:c2:11:d7:6d:05:d0:7c:f6:40:
                    27:18:d4:e0:46:db:b5:f4:e4:75:8e:52:42:de:c4:
                    51:17:52:cf:26:91:3e:2c:d1:c1:52:f9:76:7d:d2:
                    54:5f:65:78:16:ca:ee:7b:15:01:2b:e5:9b:10:9f:
                    21:01:76:a7:c3:cc:07:00:aa:ba:f2:57:65:bd:e9:
                    6c:5e:87:e9:8e:a2:42:03:f6:2c:00:52:1f:c8:58:
                    8b:07:b8:ac:37:e5:2d:26:24:9b:7f:2c:7d:54:84:
                    60:ed:28:3c:57:31:52:1f:13:1e:ed:35:75:5f:1a:
                    91:02:38:1b:6a:d0:8a:c0:61:56:be:87:94:e5:8a:
                    ec:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:34:77:27:60:7E:81:43:5B:DE:5E:00:3F:A2:32:8B:A1:AD:65:71
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d4:34:c4:79:a2:31:bf:31:1d:9f:00:0a:87:92:2e:99:86:
         c1:21:ba:1e:a1:7f:4b:cc:70:62:ed:b2:70:42:78:9f:21:fc:
         23:88:9f:c3:8f:be:a5:6f:63:03:e5:2d:a7:57:38:84:2b:ef:
         42:71:ee:c4:c6:90:d7:30:26:63:4e:09:ab:fb:19:2b:37:fc:
         d2:aa:77:8c:71:9f:19:07:7d:40:5c:1c:ca:65:46:2a:56:b3:
         5f:57:49:47:d2:72:2b:e7:a5:95:ad:fb:46:d4:bb:4f:96:ed:
         74:a6:fd:9e:47:78:8b:a3:1f:9f:1b:82:00:a8:aa:38:1c:e0:
         6c:65:39:e4:02:0a:5f:84:b6:e3:58:79:7e:87:f8:6b:34:aa:
         b8:dc:6a:97:33:33:3d:d5:b5:e2:41:80:b4:d4:43:0e:a5:1b:
         f7:03:d8:c3:a3:14:3d:9d:39:1a:4a:9b:cc:7c:bf:bd:38:05:
         64:1d:38:14:e7:fd:ec:0b:92:e9:31:e7:36:ee:bd:d0:54:95:
         88:c0:34:82:6e:68:b1:4b:a9:3c:f0:19:f4:79:83:af:fd:2c:
         88:c3:88:9a:5e:e3:f1:35:eb:55:13:7d:ec:5f:87:63:16:10:
         b4:1c:3a:30:a9:72:e1:06:52:91:cc:dc:81:27:36:77:65:bd:
         85:ff:30:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:07:59 2026 by rpki-client