Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File:                     VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier:          x1341YRi29vjVMMUCEdSfP2hWQ4mg48zrQAU84FopNM=
Subject key identifier:   A3:E1:AA:45:8D:80:2D:A7:4C:33:69:B5:C9:F1:52:CF:7D:68:AC:25
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer:       /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial:       019FAC3F12B3BF5910A1990CB24928560DB0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number:          08F8
Signing time:             Wed 29 Jul 2026 05:00:42 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:42 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:42 +0000
Files and hashes:         1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: euHJMf0Yiobv64LryG9DtU2DeOxljdDFU1iAvxwtuHA=)
                          2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:12:b3:bf:59:10:a1:99:0c:b2:49:28:56:0d:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
        Validity
            Not Before: Jul 29 05:00:42 2026 GMT
            Not After : Jul 30 05:00:42 2026 GMT
        Subject: CN=a3e1aa458d802da74c3369b5c9f152cf7d68ac25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a5:4e:9d:32:e2:f2:dc:b5:54:d4:4e:e3:45:
                    34:e0:e1:01:7b:7b:45:2d:a0:7b:97:68:05:c9:1b:
                    a0:85:ce:c8:0d:ed:e4:f3:b9:b0:11:a7:c9:c0:9d:
                    69:d8:09:48:2f:da:e7:fd:b2:21:5f:97:d0:b6:72:
                    1f:f9:73:5f:57:39:0a:4c:cc:45:5b:df:32:e9:e6:
                    c0:a6:0f:0d:e1:05:d3:2d:61:71:32:82:8b:ec:69:
                    e3:74:23:a3:1a:c9:78:5c:49:a5:63:31:3a:51:72:
                    13:78:35:32:85:46:32:eb:1c:ae:f6:70:bd:74:ed:
                    ec:9b:9b:7c:c3:13:a2:6f:cc:5b:dd:c5:c0:4c:20:
                    6c:3d:d3:21:ac:c0:1b:2b:47:9b:9d:76:16:58:22:
                    23:6a:94:09:48:6d:6c:cb:59:da:20:a1:d1:0f:47:
                    8e:7c:f3:51:45:c8:85:97:7a:33:1c:6a:fb:5e:24:
                    7c:a8:1b:ee:a2:32:6a:02:1e:d1:13:fe:3a:66:16:
                    25:e1:dc:bd:96:2a:39:48:b0:55:64:1f:8d:44:87:
                    00:49:ba:88:a3:56:9b:26:af:88:e6:31:8d:c3:5e:
                    50:56:3a:0a:1d:38:e5:05:29:36:9b:bc:59:7e:14:
                    a2:3d:4e:91:3a:0f:f5:28:53:8d:4c:d2:60:35:cc:
                    f4:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E1:AA:45:8D:80:2D:A7:4C:33:69:B5:C9:F1:52:CF:7D:68:AC:25
            X509v3 Authority Key Identifier:
                keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:ae:97:9b:32:41:4e:51:0a:64:31:24:60:80:dd:58:92:30:
         71:1c:45:c9:b4:2f:5d:e9:87:67:b2:a5:da:63:82:90:1f:ee:
         db:cf:e5:6a:13:9b:c2:51:d0:41:25:71:10:65:48:3b:45:99:
         c7:50:7a:0f:bb:49:a1:fd:dc:25:62:da:56:62:0b:fc:e8:04:
         c6:4c:d5:45:63:cc:c4:43:56:6e:40:b8:3c:30:1f:0f:de:73:
         35:79:84:9b:de:23:6a:52:08:e5:22:97:8f:e3:b5:9e:67:b2:
         f1:6c:b1:4d:be:fa:4e:3d:eb:7c:93:f6:eb:df:f2:0d:71:46:
         7b:62:f4:fb:ec:f8:c3:e8:39:41:da:56:e5:f7:0b:e2:8d:8c:
         40:b7:ea:b9:72:21:d4:c4:92:c0:bb:a8:53:49:56:b2:16:b2:
         d4:18:7e:de:46:a7:d4:5a:a7:eb:db:ae:01:59:e3:29:eb:06:
         29:ea:6f:d9:11:d3:33:4d:9f:d5:fc:29:8f:25:14:59:ea:ec:
         45:e5:5f:65:09:57:72:68:bb:cf:6c:82:ec:6f:38:aa:3f:87:
         1d:b6:6c:15:88:ac:1c:c3:37:79:c6:fe:c2:33:68:30:3a:95:
         a1:b9:49:fc:fc:31:5d:35:f3:67:42:ae:1c:af:cc:02:2f:52:
         cc:0e:b0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:53:35 2026 by rpki-client