Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          rBuKte5RYAts+Lf9zutl+wTd8XLCKAjZ3KvudNhsIGo=
Subject key identifier:   96:A8:BF:0E:65:26:7A:1D:C7:31:BA:74:73:9C:39:52:A2:F7:46:CF
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019FA9077FA597C08F137391D4DF9E0DDB70
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0FE2
Signing time:             Tue 28 Jul 2026 14:01:08 +0000
Manifest this update:     Tue 28 Jul 2026 14:01:08 +0000
Manifest next update:     Wed 29 Jul 2026 14:01:08 +0000
Files and hashes:         1: 0QR437_yNuwd46JSd_IiWmhwYow.roa (hash: 6GDXre6adrsJyqw14UC9mtlOqvJoPEYUbHv7Lqn+43k=)
                          2: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (hash: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk=)
                          3: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: 07NbQKNdvjZivmYIlRCf4NhY648P0YzifFB/AjlPzzA=)
                          4: wwh70_fWojYStsjUuAC2NCdOguo.roa (hash: FHvLtN1EizK8sBcMqm1u4JO0yb8K5X+r6eZldZxIZo8=)
                          5: ydQtvb3bvjFb-2ukCgShBr4iJ7o.roa (hash: D1atPq/SoJlgXADbklDBQIhta1tm984jYa7MmKBjm1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:07:7f:a5:97:c0:8f:13:73:91:d4:df:9e:0d:db:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Jul 28 14:01:08 2026 GMT
            Not After : Jul 29 14:01:08 2026 GMT
        Subject: CN=96a8bf0e65267a1dc731ba74739c3952a2f746cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:0d:c6:c6:44:4a:85:89:50:48:8c:81:a0:
                    d2:de:f2:9a:11:18:e5:67:5c:b7:4f:6c:fc:06:b3:
                    d4:79:0a:be:36:e9:5d:9a:b5:37:ee:c8:11:75:f6:
                    a6:39:6c:4b:80:a4:a2:8a:38:12:8f:5e:60:4e:2c:
                    38:1d:21:5c:e4:c2:70:4f:78:f0:bb:c7:8e:4d:82:
                    0a:a1:de:a7:0a:19:ef:52:d0:60:f3:0d:a4:5f:e6:
                    25:0f:14:d1:4e:a6:c9:5b:02:a2:49:79:ac:d4:56:
                    5b:04:86:27:f0:ed:02:3b:6a:b6:6f:1e:06:0e:c0:
                    6d:e7:3d:36:97:53:26:ff:ee:59:8c:53:e1:85:6d:
                    66:e4:51:d1:ad:d5:a7:55:15:3d:aa:e2:d6:51:39:
                    c6:d2:21:8f:9c:9b:03:9e:1d:79:5c:19:62:86:d1:
                    ff:17:37:f0:2a:7f:b0:e3:ed:b3:81:71:fd:6b:18:
                    ea:86:37:cc:f1:fe:88:87:55:82:3b:2c:5c:cf:22:
                    61:9d:8e:31:4d:1b:e0:ec:07:cc:86:43:57:e4:10:
                    ca:ce:6c:9d:77:da:ca:da:3a:4d:9b:91:2b:b1:74:
                    77:16:1f:c7:27:a4:cf:05:af:91:2c:e1:35:73:c2:
                    52:81:84:01:9a:43:e9:86:0c:4d:e5:45:ce:c1:ae:
                    c6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A8:BF:0E:65:26:7A:1D:C7:31:BA:74:73:9C:39:52:A2:F7:46:CF
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:eb:18:95:fd:33:cc:fb:ff:e3:03:9d:43:86:91:e2:82:f5:
         4a:0e:f9:97:34:96:ad:4c:be:c1:d7:1b:62:2e:19:81:69:07:
         cf:de:49:bc:0b:53:d7:98:93:29:9f:84:3d:1e:4a:d8:cd:a4:
         08:3c:ff:85:f2:b0:ae:99:e6:32:b3:bc:33:f8:a8:d9:42:77:
         6f:91:f4:03:ae:aa:01:98:ee:fa:36:8e:3d:cc:4b:45:ff:32:
         1c:b6:d2:f5:8d:cf:5a:69:02:dc:d4:63:a4:00:0c:3f:96:01:
         9c:fd:b7:bc:fe:53:6e:a2:70:92:85:83:b5:db:f6:0f:92:fa:
         83:7c:3a:6f:12:6a:5f:58:22:d7:db:05:e4:a6:ec:8f:c9:fc:
         e4:96:40:7b:8a:96:dc:f7:6b:c7:ae:54:d1:cd:65:c3:90:b4:
         10:fa:2c:ad:9e:86:cc:f8:26:4d:78:b7:71:6a:da:a9:b4:95:
         ad:49:c5:c2:8d:0c:b1:44:f5:5b:b7:86:82:d1:d3:3e:e6:eb:
         0f:f0:78:a1:93:a4:cb:92:e9:3a:9c:31:1a:b0:1b:0e:8d:88:
         b6:8b:9e:24:da:0d:56:76:7a:9c:b5:6f:57:ba:56:ba:8d:ae:
         71:25:54:f8:44:6f:57:75:9d:9f:35:66:87:91:80:50:d4:ce:
         f4:76:c2:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:27:07 2026 by rpki-client