Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          NpPCEXG1xlIjelwRfPLH6lqOjUVxjaSBdNj6wtdsm8M=
Subject key identifier:   3F:52:A4:1B:2D:BF:1B:72:01:D1:00:22:46:22:04:45:7E:D5:E4:17
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       019EC292768D00F95ABB401C1685ADFDF6AB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 20:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 20:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 20:00:38 +0000
Files and hashes:         1: Zhqy7g8lJUOishUdKqXaWCvxzx4.roa (hash: UN8EUtXHVUb/yxu+HKPvBFBWS56nPQFqhJoUEVPPqMY=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: we+48p4zE5Nc9gDuOXl2FXBDTej/ipSFvmThRkEV2gw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:92:76:8d:00:f9:5a:bb:40:1c:16:85:ad:fd:f6:ab
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: Jun 13 20:00:38 2026 GMT
            Not After : Jun 14 20:00:38 2026 GMT
        Subject: CN=3f52a41b2dbf1b7201d10022462204457ed5e417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d4:60:6d:78:ce:55:c7:b9:9a:ca:fa:21:66:
                    85:27:d8:a3:db:6b:83:f2:66:d6:f8:99:78:58:47:
                    ef:fb:7f:57:e9:e5:ca:fe:09:5a:24:47:df:fe:59:
                    7a:01:22:ff:3a:18:4a:03:d5:28:a3:bf:06:8b:ac:
                    66:0f:89:52:c1:a4:be:8e:6f:2f:4f:c4:6d:36:7a:
                    90:89:c0:d8:c6:e4:c2:2b:85:8b:de:81:c1:a8:fb:
                    44:93:27:9a:84:87:7d:e3:5f:b3:87:fc:6e:2e:49:
                    e7:0a:29:61:14:69:f0:7d:c9:c2:0d:fc:8f:a6:ff:
                    e5:19:89:23:ec:dd:02:30:21:a8:68:9d:e9:68:5e:
                    6b:3d:c5:d9:10:e1:de:8b:ce:fd:3f:1d:d9:f3:a0:
                    f6:64:ad:43:65:f6:f3:b9:e8:db:bd:94:40:95:f4:
                    62:aa:07:fd:e2:04:64:d8:e0:5d:a4:8c:46:c8:d8:
                    a3:66:b2:cf:1a:df:b0:b9:29:d6:c7:42:29:e2:53:
                    01:2e:d0:06:67:da:82:83:cf:30:83:33:be:9c:96:
                    65:6e:59:90:61:b9:2e:6e:87:46:c9:95:bd:ca:13:
                    79:fc:e9:f1:79:3b:77:db:24:be:17:43:34:1b:cf:
                    0d:68:6c:dd:67:af:c5:e2:ea:3a:b5:49:8f:ae:96:
                    38:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:52:A4:1B:2D:BF:1B:72:01:D1:00:22:46:22:04:45:7E:D5:E4:17
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:69:67:c9:8e:20:58:56:07:85:99:d9:6d:3c:cd:ab:d8:4a:
         5d:58:7d:88:f9:cc:c5:b2:a6:91:c6:42:97:17:89:f0:4e:2a:
         02:b2:40:81:30:08:94:76:95:ff:65:cf:bf:f6:47:d0:bc:b6:
         5c:c9:4d:27:9e:9d:c6:9c:24:14:f5:97:48:1e:84:10:bb:74:
         55:af:08:3d:f2:82:42:c3:45:ea:90:62:82:51:69:56:fc:15:
         08:1f:f4:63:18:9e:07:af:d8:fc:e6:d5:7a:da:0b:07:d8:e8:
         e0:e3:0d:53:67:c9:67:35:d2:8e:0d:7a:96:4c:3e:39:41:14:
         42:bb:13:aa:8f:68:49:b0:4f:c9:3d:7e:bb:87:91:73:df:7c:
         96:44:55:e3:95:6b:42:27:22:51:b0:65:35:e8:16:63:12:41:
         14:35:03:77:b0:95:15:be:2f:47:2f:96:4c:a4:e1:5e:22:6a:
         e2:02:68:83:70:68:fb:96:ef:1e:4f:4f:ea:ec:96:24:48:cc:
         03:79:c0:1b:c7:7a:62:a0:e2:23:f0:78:d5:d0:5b:87:bc:61:
         8d:81:10:01:3f:e2:04:a4:2f:d2:4e:2c:ba:30:46:69:bb:df:
         fe:e5:66:93:75:7e:42:31:b1:84:1e:f4:2f:2c:7d:f8:af:9d:
         0f:35:20:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:49 2026 by rpki-client