Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File:                     VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier:          i4bztQRJryCgFK1e/u9Rd0LCAyfn4OKBrXDIai8pdYE=
Subject key identifier:   3A:CE:1B:99:35:C9:1A:F2:A7:9D:97:D9:B5:06:05:96:80:8B:85:2C
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer:       /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial:       019EBFC7F8FAC23D1487FE9BED9AFE0274DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number:          079B
Signing time:             Sat 13 Jun 2026 07:00:14 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:14 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:14 +0000
Files and hashes:         1: Eu41_P7LziP7tbN3y79d5Zld-yA.roa (hash: AfrnyrK9VXdcG7fWfl7gD7MMFiGqvdrIsV969hWJlbc=)
                          2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: CVJOP7PRYVjVxObN1Cis9O1jcuO7TD3RcjVMk+QM3/k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c7:f8:fa:c2:3d:14:87:fe:9b:ed:9a:fe:02:74:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
        Validity
            Not Before: Jun 13 07:00:14 2026 GMT
            Not After : Jun 14 07:00:14 2026 GMT
        Subject: CN=3ace1b9935c91af2a79d97d9b5060596808b852c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:00:3c:0f:0b:94:8d:cd:8a:7f:dc:7a:01:bc:
                    b5:88:2f:4c:bb:ef:26:73:c9:25:01:3e:53:dd:a3:
                    75:a3:ec:eb:80:00:d6:90:9d:43:17:5f:54:1a:9d:
                    fd:ec:aa:1f:ab:69:b4:dd:5a:9d:ef:6c:46:9e:b2:
                    9e:db:69:4b:8f:8d:05:39:f1:e8:b0:39:ee:8f:e7:
                    1f:de:13:87:77:4c:bf:11:ee:08:e3:ea:e2:f3:e2:
                    1e:9e:fe:a5:a6:02:08:93:46:e1:77:ee:db:1b:99:
                    f1:e9:12:9d:b7:21:5d:fa:ed:62:b1:00:b5:83:4f:
                    43:6d:d7:1a:d5:ef:5c:f1:1b:f5:05:72:e8:e9:51:
                    8d:6d:1d:7b:f4:bc:64:f7:fa:85:51:16:72:71:9a:
                    48:72:25:08:b8:24:5b:a3:51:1e:45:1c:50:b5:7b:
                    1d:5e:0a:c7:1d:b7:6f:de:b2:59:ad:99:8c:fb:95:
                    95:3c:57:aa:35:af:c3:f5:a8:b9:c3:fc:2b:30:22:
                    f5:9e:c1:6c:50:9c:67:36:f6:09:61:17:dc:c2:2c:
                    00:a1:9f:6e:21:d5:dc:c7:6c:81:e3:07:6d:41:36:
                    67:fc:a3:65:a3:8f:cd:ec:58:2b:fc:3f:86:67:3d:
                    02:3f:28:f2:af:bd:70:63:15:28:ba:90:80:16:24:
                    43:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:CE:1B:99:35:C9:1A:F2:A7:9D:97:D9:B5:06:05:96:80:8B:85:2C
            X509v3 Authority Key Identifier:
                keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:43:2e:72:cb:ab:d4:43:47:d7:d4:09:2b:ba:e6:56:9b:14:
         14:04:38:2c:04:43:1e:38:d2:cc:2a:bb:4e:60:04:e0:13:0c:
         8a:0f:89:b6:da:8b:9a:61:e4:22:d0:d0:cc:00:0e:1d:79:dc:
         c4:fe:80:12:b4:99:cd:d7:06:4e:e6:d4:8c:62:00:c5:b3:b6:
         70:dc:6f:0b:e1:81:e8:6a:18:bf:c9:70:3e:d3:47:18:8d:f0:
         0a:7c:83:49:d9:5c:28:22:c5:a6:2c:a8:16:e3:79:b8:0b:b2:
         63:8e:fb:0a:ef:79:14:28:40:05:09:4d:f3:34:c4:c1:e7:7b:
         04:d5:06:b0:98:98:8a:21:8a:c3:25:34:2e:85:e6:f8:73:8e:
         4f:d0:19:b7:1e:5e:4c:95:b8:57:ca:b5:e1:d9:2e:c4:82:5a:
         62:8a:34:bc:8c:39:24:47:14:a1:00:97:65:9b:d2:78:f7:ff:
         e7:56:66:5c:63:76:30:94:f7:22:15:49:e9:50:b1:24:80:c3:
         cd:bf:d2:ef:eb:2d:b3:de:e0:2e:d8:04:22:ce:fd:43:9e:ba:
         1d:7a:e6:14:ed:20:a6:16:5f:20:ec:71:26:fd:25:3c:d3:e9:
         6d:fb:19:e7:63:01:22:74:f6:53:38:cc:47:ec:e4:79:1a:16:
         12:fe:90:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:46:25 2026 by rpki-client