Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File:                     vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier:          dVFMJnjJsi5Wa0YOd+cnKdmbWNTNv6APRctKcxHBgxE=
Subject key identifier:   DA:FB:0A:9C:14:7C:1D:1F:FF:48:7E:2A:82:29:D8:74:39:3F:DB:B7
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer:       /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial:       019EBFC8F47E42AA3C332F3BCF236D06600F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number:          18ED
Signing time:             Sat 13 Jun 2026 07:01:18 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:18 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:18 +0000
Files and hashes:         1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=)
                          2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: 74de3rec7/u6meyNzPjumy12WemXcyBEbNKMt+k/xOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:f4:7e:42:aa:3c:33:2f:3b:cf:23:6d:06:60:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
        Validity
            Not Before: Jun 13 07:01:18 2026 GMT
            Not After : Jun 14 07:01:18 2026 GMT
        Subject: CN=dafb0a9c147c1d1fff487e2a8229d874393fdbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:16:2e:a9:fe:84:87:39:5c:85:8c:9c:08:2c:
                    aa:99:d5:f1:98:36:c6:dd:90:ef:69:ef:7b:41:e4:
                    68:97:ba:d5:5b:97:83:61:2e:b1:92:0e:8a:ab:5c:
                    1f:bb:37:e5:28:98:23:e2:08:91:72:ad:3f:34:fc:
                    a6:92:eb:dd:f8:62:c0:01:1f:cf:11:e3:d5:e6:5a:
                    cd:a4:eb:e6:af:4f:4b:06:03:e4:ac:85:f7:a3:e0:
                    5d:4b:bf:87:35:13:27:08:02:3d:90:bd:ca:91:5a:
                    38:2c:66:5e:6b:02:2b:05:31:5d:9c:38:24:82:9f:
                    29:b5:ad:7c:15:25:65:d6:7e:5f:2c:80:5b:91:fe:
                    af:a0:84:48:3c:3a:a9:5d:86:30:e5:f8:9d:0a:1c:
                    91:57:d6:7d:b2:6a:32:f7:da:6c:bc:7b:f6:cb:2d:
                    12:d8:da:e3:68:38:49:19:dc:80:21:e3:f0:b3:02:
                    c0:aa:f9:72:83:33:d3:12:09:59:07:60:b3:50:a5:
                    22:97:bc:17:2a:00:4d:5d:1f:0f:36:f6:10:15:e0:
                    94:71:79:31:02:2c:18:e7:54:b3:20:ae:e6:77:89:
                    37:d6:3c:a0:9a:ca:a0:4d:c3:35:b1:bb:1e:16:fc:
                    13:0d:1c:2c:9a:63:3b:76:06:67:4d:42:51:d2:82:
                    38:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:0A:9C:14:7C:1D:1F:FF:48:7E:2A:82:29:D8:74:39:3F:DB:B7
            X509v3 Authority Key Identifier:
                keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:da:71:2e:99:44:9a:b9:a5:4e:7e:c9:3d:7e:f0:f9:9f:90:
         4c:1d:02:79:ae:06:39:9c:bb:57:dd:5d:18:91:80:f8:d7:8a:
         fa:b5:9b:7c:03:39:d3:80:77:87:ff:d7:bf:21:03:c7:36:3f:
         b5:df:89:49:2a:e4:a9:b5:c6:af:de:9f:8d:54:66:1c:6d:96:
         b6:5b:4a:de:12:e1:f0:e7:6c:5f:23:d4:e7:ed:3e:b8:b9:95:
         2e:a1:47:d0:46:26:bc:84:48:1f:f2:8c:2a:4b:f5:67:22:54:
         43:65:af:0d:ee:f1:62:64:c2:13:7e:04:57:90:8d:84:a9:59:
         34:8e:26:1b:f9:c0:ad:5e:5e:bd:20:da:c1:93:51:dd:ab:e9:
         8b:20:d0:80:0b:6c:4d:61:9d:0a:6a:0d:f9:84:9a:7e:6b:47:
         9d:91:d5:e1:85:a4:a5:99:d8:24:54:b0:79:e3:1e:fa:20:25:
         7b:87:07:35:54:a7:52:61:df:f6:9e:53:0b:7e:9a:13:86:c8:
         fc:06:cb:78:5e:7b:39:6a:81:41:03:c5:44:0c:b6:45:76:9c:
         27:99:82:fa:0d:b9:9e:c5:9f:59:03:7f:03:58:4b:b0:6e:60:
         a5:80:ed:cd:1e:a4:f4:84:77:79:e9:5d:37:df:88:df:40:dd:
         c2:ff:27:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6/yPR+Qqo8My87zyNtBmAPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlM2M1NGQxZWRjYTY5MmY0NGM5ZGEzODM0MDJjMjRmZGU3
MjM1MDcwHhcNMjYwNjEzMDcwMTE4WhcNMjYwNjE0MDcwMTE4WjAzMTEwLwYDVQQD
EyhkYWZiMGE5YzE0N2MxZDFmZmY0ODdlMmE4MjI5ZDg3NDM5M2ZkYmI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArBYuqf6EhzlchYycCCyqmdXxmDbG
3ZDvae97QeRol7rVW5eDYS6xkg6Kq1wfuzflKJgj4giRcq0/NPymkuvd+GLAAR/P
EePV5lrNpOvmr09LBgPkrIX3o+BdS7+HNRMnCAI9kL3KkVo4LGZeawIrBTFdnDgk
gp8pta18FSVl1n5fLIBbkf6voIRIPDqpXYYw5fidChyRV9Z9smoy99psvHv2yy0S
2NrjaDhJGdyAIePwswLAqvlygzPTEglZB2CzUKUil7wXKgBNXR8PNvYQFeCUcXkx
AiwY51SzIK7md4k31jygmsqgTcM1sbseFvwTDRwsmmM7dgZnTUJR0oI4BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNr7CpwUfB0f/0h+KoIp2HQ5P9u3MB8GA1UdIwQY
MBaAFL48VNHtymkvRMnaODQCwk/ecjUHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQt
YzM0OTUzZWRjN2U1LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS81ZDY3NDUtZTBkNi00MGQwLTg0ZWQtYzM0OTUzZWRjN2U1
LzEvdmp4VTBlM0thUzlFeWRvNE5BTENUOTV5TlFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPtpxLplE
mrmlTn7JPX7w+Z+QTB0Cea4GOZy7V91dGJGA+NeK+rWbfAM504B3h//XvyEDxzY/
td+JSSrkqbXGr96fjVRmHG2WtltK3hLh8OdsXyPU5+0+uLmVLqFH0EYmvIRIH/KM
Kkv1ZyJUQ2WvDe7xYmTCE34EV5CNhKlZNI4mG/nArV5evSDawZNR3avpiyDQgAts
TWGdCmoN+YSafmtHnZHV4YWkpZnYJFSweeMe+iAle4cHNVSnUmHf9p5TC36aE4bI
/AbLeF57OWqBQQPFRAy2RXacJ5mC+g25nsWfWQN/A1hLsG5gpYDtzR6k9IR3eeld
N9+I30Ddwv8nRg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 16:16:25 2026 by rpki-client