Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File:                     VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier:          SsYkeCX3YK9z2MSKe01WbvSnR9qB3NavTT+OAt/97zM=
Subject key identifier:   97:C9:19:19:8C:5E:93:03:CA:76:5B:06:68:FB:6F:85:A5:5E:59:19
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer:       /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial:       019FA8D09F9F385389951838CA895A287E43
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number:          035C
Signing time:             Tue 28 Jul 2026 13:01:12 +0000
Manifest this update:     Tue 28 Jul 2026 13:01:12 +0000
Manifest next update:     Wed 29 Jul 2026 13:01:12 +0000
Files and hashes:         1: 5iHp1QJzSxFi9y4pkePt5QKL-Zg.roa (hash: lJiI1N3DnF79ErzjbyhVb741cRQCBNwpN9QEJj/N4lg=)
                          2: M9L4U5JoYbCtWv7gAD7KA_WviB4.asa (hash: RUh7/m1A6kF4bAMmLaC8OSPQKRtwY1TY3SbqfUWHrbE=)
                          3: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: GCrD0Bc92G2AobtyEvdFuGOAOJdILU3TNloW4m+HL3M=)
                          4: fepTS1XefYM5Mm0VJMMPSN02wxo.asa (hash: VKdt4tdwgcz86/Usr6Qv72R8qP1GifrjrQfQv6ap4/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 13:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:d0:9f:9f:38:53:89:95:18:38:ca:89:5a:28:7e:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
        Validity
            Not Before: Jul 28 13:01:12 2026 GMT
            Not After : Jul 29 13:01:12 2026 GMT
        Subject: CN=97c919198c5e9303ca765b0668fb6f85a55e5919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e3:0e:49:e6:8a:cd:23:47:6e:4e:6b:ef:20:
                    c9:b5:58:d0:be:00:b3:1a:a8:23:e6:e3:df:5c:53:
                    2f:dc:19:d9:49:b4:c7:ed:bd:5f:2f:36:b2:39:44:
                    41:04:b7:79:31:56:6a:61:ba:52:f1:09:6d:9b:19:
                    e5:bb:97:1e:14:2d:36:81:b9:c7:c5:e2:fc:a7:11:
                    1a:37:1c:ac:42:e3:f6:f3:92:8e:b7:3b:86:56:95:
                    3d:c0:52:f2:45:10:79:6b:48:3f:b4:16:70:b3:2c:
                    7a:ee:6c:b7:93:a5:b7:1d:35:28:86:dd:bb:7e:ab:
                    10:be:ba:bc:69:f6:ed:91:c6:6f:2c:88:a6:fd:7a:
                    11:b5:1a:6f:b7:83:3f:47:ee:12:6e:20:df:58:94:
                    b6:7f:02:94:dd:86:6a:4c:f0:66:97:bf:e8:55:d5:
                    f8:fb:30:b5:d8:06:10:c1:cb:e2:8c:19:03:45:3c:
                    53:03:13:6b:3d:63:eb:51:4d:3f:19:82:88:1f:e2:
                    87:ed:ed:b5:49:c8:46:18:fc:dc:9d:c0:63:b4:e9:
                    57:b4:7e:a9:af:de:c2:7f:d1:df:9e:a0:06:94:7b:
                    07:01:6e:75:07:79:98:f3:52:e9:4f:f5:44:26:21:
                    07:3a:9a:a4:aa:5b:0c:4c:e6:6b:8f:a4:df:8a:60:
                    a9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C9:19:19:8C:5E:93:03:CA:76:5B:06:68:FB:6F:85:A5:5E:59:19
            X509v3 Authority Key Identifier:
                keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:2c:1c:87:34:11:05:49:71:cc:df:9d:b1:32:c3:97:2f:35:
         81:6e:4a:5c:75:96:60:17:11:13:8d:e3:4b:df:bd:e5:ab:aa:
         00:0a:41:04:0f:66:12:4b:5d:d9:ff:c3:da:a5:cf:47:76:42:
         50:ba:8a:43:f4:ec:a3:1e:ee:12:df:60:d3:f0:44:b6:24:50:
         fd:fb:e0:f9:2b:67:f4:18:c3:02:35:90:5e:b4:9d:9e:a4:28:
         a4:ab:4d:e2:54:25:ca:11:de:66:63:c2:13:62:d5:c5:8b:e2:
         97:bf:a8:ad:78:7a:17:52:68:64:a9:a0:45:50:43:53:25:ea:
         a9:06:c5:c2:aa:de:ef:8d:ba:26:24:de:bf:73:3e:8c:22:56:
         e0:11:84:a6:66:be:8b:02:0c:c6:eb:4e:c8:f4:e2:f7:15:37:
         ef:6d:d9:08:b4:fe:7d:b9:2e:2c:51:c9:38:a1:99:89:cb:ce:
         00:6d:0e:2b:32:75:8b:db:43:4c:17:63:39:cc:e0:04:9d:18:
         29:a4:7d:15:43:a2:bf:9a:9f:d7:ac:2f:da:16:03:e0:3b:3a:
         ec:78:66:66:df:69:d3:ba:c8:32:45:b7:7e:32:91:6e:00:0d:
         b6:92:fc:ef:2b:fa:05:88:98:0f:15:79:28:d7:9a:fc:ea:be:
         13:a2:3f:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:52:11 2026 by rpki-client