Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File:                     vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier:          /FSkebIKqhNT2GNf2cWf0w1TrQ/hQrh8RnWP7raYy2g=
Subject key identifier:   6E:D5:16:DC:8D:AA:E1:1A:2C:E3:39:86:78:D6:32:3F:45:4B:6C:C5
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer:       /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial:       019EC0A3FFFF1EC8519D77E19D072A0ACA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number:          18EB
Signing time:             Sat 13 Jun 2026 11:00:33 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:33 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:33 +0000
Files and hashes:         1: 5DvFWn8hN7piazN1T8HIXkNFc8w.roa (hash: XsihtnWpKZygkLBke+BN9JF5neJLF/Mp9MsWC2DKCb8=)
                          2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: r/QsaNm8ZlMI/4VHIGV2HIaMnT9jbL86824TKV298EI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a3:ff:ff:1e:c8:51:9d:77:e1:9d:07:2a:0a:ca:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
        Validity
            Not Before: Jun 13 11:00:33 2026 GMT
            Not After : Jun 14 11:00:33 2026 GMT
        Subject: CN=6ed516dc8daae11a2ce3398678d6323f454b6cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:68:d9:5d:9c:f6:ba:dc:96:e8:8b:c7:92:90:
                    d3:c8:fe:08:7a:cb:31:81:85:74:d4:de:01:07:e2:
                    32:45:72:46:81:c7:f3:e0:3b:d7:02:22:65:a3:b3:
                    61:1a:90:96:86:9a:f0:11:65:1e:50:19:99:19:4a:
                    44:07:80:08:b1:3d:8f:d2:cb:da:72:26:f0:07:9f:
                    07:08:4f:48:62:56:70:a0:2c:70:bd:d9:65:fd:4e:
                    8e:7f:bd:7d:ba:7b:f8:ad:21:4d:5b:00:55:55:4e:
                    89:dd:1e:6f:c1:0a:10:d7:96:8e:9d:7a:f1:86:2b:
                    a2:95:24:6b:b6:eb:0e:c4:83:7d:53:77:e7:b3:a4:
                    a8:2f:8b:d4:59:8d:a6:e7:4f:ff:6f:15:ee:d9:1f:
                    87:b3:6e:b9:f4:3c:6b:32:4d:5f:d2:2d:e3:87:ce:
                    94:fe:16:8b:03:45:93:2d:ce:bc:5d:7e:bd:a3:7d:
                    53:05:b8:5c:62:bb:df:0e:9c:b3:ca:41:d4:e9:a6:
                    53:55:90:b9:59:b4:04:26:c4:ec:c7:c3:fc:fa:cd:
                    32:3f:e0:0e:9a:a8:f3:bd:f8:fa:de:6e:bf:e1:63:
                    f5:2c:da:1e:ea:c1:e7:e4:9a:c9:54:60:84:de:10:
                    95:64:a4:d1:ba:5c:0a:3c:6f:5f:54:b3:db:70:e4:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:D5:16:DC:8D:AA:E1:1A:2C:E3:39:86:78:D6:32:3F:45:4B:6C:C5
            X509v3 Authority Key Identifier:
                keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:e6:fc:94:d5:93:56:44:da:a2:e7:9d:97:95:fe:43:fe:ad:
         7b:24:ef:af:6b:8b:b1:78:13:96:8a:9f:f4:d4:1c:13:38:aa:
         67:03:e8:ec:b0:08:8a:5e:dc:de:66:f7:02:6a:73:1a:c0:27:
         28:bb:d3:00:91:81:33:16:90:73:d4:88:89:fc:1c:85:ec:60:
         57:74:3f:e7:d1:4b:b5:97:02:aa:be:15:73:29:bd:6f:17:06:
         3e:54:33:9d:ec:78:9d:72:60:68:f9:8f:21:c8:04:2c:6d:1e:
         c6:30:fc:7f:40:8d:69:45:d5:56:bf:d6:12:50:03:f4:de:fc:
         bd:67:24:e0:7b:38:b8:5e:fb:9b:85:a1:1a:4c:67:3c:09:26:
         6e:09:2b:47:3c:ce:33:6b:2f:71:9d:df:94:10:86:11:ad:2a:
         43:a0:6a:43:d3:0f:4d:dd:3d:30:e0:09:3c:54:b1:8e:bf:b6:
         65:ba:90:92:d5:ff:23:94:5e:f6:3e:ae:fe:35:d3:ca:48:10:
         c5:ad:64:3a:50:04:f7:81:e7:a8:31:db:27:3d:f0:2a:70:1d:
         46:b5:b9:ea:4f:f2:b8:14:c1:dc:3e:e9:98:01:c3:70:38:0f:
         35:35:05:d9:39:7b:95:cb:ce:bb:d1:cf:bd:5f:bc:f4:7f:96:
         9d:b4:5d:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:25:46 2026 by rpki-client