Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File:                     vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier:          W9RKUSaQOCsBZvmdPabDMrKc6kDjMKduOIWuKzHa8OM=
Subject key identifier:   EB:72:AE:2A:F0:56:80:38:BE:DA:D4:11:06:CB:A2:E5:97:24:AF:5B
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer:       /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial:       019D9E1AB86468E8E8D5513501B1470A84BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number:          0379
Signing time:             Sat 18 Apr 2026 01:00:44 +0000
Manifest this update:     Sat 18 Apr 2026 01:00:44 +0000
Manifest next update:     Sun 19 Apr 2026 01:00:44 +0000
Files and hashes:         1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: y7f/TnfWV/G9xPRg/epVZN1fSgg7yfmpD80Z8tTngUs=)
                          2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:23:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9e:1a:b8:64:68:e8:e8:d5:51:35:01:b1:47:0a:84:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
        Validity
            Not Before: Apr 18 01:00:44 2026 GMT
            Not After : Apr 19 01:00:44 2026 GMT
        Subject: CN=eb72ae2af0568038bedad41106cba2e59724af5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:15:ef:d6:71:b2:e7:c2:53:75:f5:24:d7:71:
                    87:e9:bb:d4:52:e2:09:8f:04:d4:ca:4c:70:08:2e:
                    aa:77:8b:60:a4:8d:c9:80:1c:4b:b9:f8:e4:cb:f7:
                    cc:40:9b:14:62:4d:cf:ae:71:ec:e7:fc:3d:9c:4e:
                    ac:54:bf:7b:92:6d:cb:b7:ad:9c:5e:93:c0:fc:f8:
                    e9:9a:b1:30:7d:44:04:37:3d:2f:9d:de:ab:fb:dc:
                    ab:b9:f4:9a:ba:69:ce:7e:be:84:66:87:6f:3c:93:
                    99:00:43:c6:15:61:f2:0f:5b:33:f2:a5:22:e8:ff:
                    f0:1f:af:e1:b0:9b:ab:49:7a:b8:f4:54:17:e4:ad:
                    a0:6f:42:ec:c7:6b:8a:78:81:1b:d3:c3:65:1c:60:
                    f3:2e:09:92:34:55:45:8b:f6:bc:09:6f:2d:2d:1f:
                    3b:0f:9f:2f:98:2d:6b:0a:23:e2:0a:7d:4a:da:18:
                    1c:67:c1:26:12:eb:e0:52:97:8a:8a:4d:66:54:e6:
                    4f:42:54:d5:3a:09:b5:cf:8c:21:ce:98:ae:aa:97:
                    ed:d4:8b:35:31:55:13:24:54:fc:e9:77:24:a3:f4:
                    e8:db:74:05:49:98:50:66:4c:75:b0:df:2e:4c:0c:
                    70:ef:65:c7:db:14:d9:9a:a2:49:76:83:11:38:0f:
                    de:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:AE:2A:F0:56:80:38:BE:DA:D4:11:06:CB:A2:E5:97:24:AF:5B
            X509v3 Authority Key Identifier:
                keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:10:ac:94:c2:bf:87:a2:13:30:39:ef:77:33:48:51:59:74:
         e0:72:36:9e:e8:18:f8:35:c7:03:79:e7:90:9e:22:31:10:4f:
         00:84:0e:c8:92:32:88:a5:6a:ee:47:d3:3e:23:23:d3:6c:97:
         80:54:42:06:46:f0:45:b1:ec:a8:82:e9:6c:ee:ea:fb:3b:3d:
         da:af:18:85:b3:9b:6e:46:a9:3d:ed:33:87:38:f5:3f:b4:47:
         dd:ad:c1:f3:28:8f:a3:11:e5:f9:0b:0b:60:ad:b4:25:82:c3:
         48:26:45:b8:c9:87:2e:54:5c:30:62:a5:b6:51:5e:88:84:21:
         6b:24:87:0d:19:f6:a2:f3:5a:88:4e:0b:06:06:0e:ee:ea:e6:
         68:43:d3:03:7a:b1:78:d0:48:2b:c0:8e:9a:cf:0a:24:b7:b2:
         0a:05:bc:ee:aa:8f:07:8b:4c:9b:8c:a1:04:1c:8b:dd:12:01:
         1f:cf:d7:ea:1b:8a:53:df:38:a5:64:c2:94:f5:27:f8:8d:1b:
         e8:ee:d4:51:07:9b:e9:92:35:50:f0:30:e8:ad:d1:71:b3:bd:
         6b:ee:c2:c2:c8:7e:95:dd:7a:26:20:01:00:98:bc:4d:d1:0d:
         d7:ee:9a:59:27:9a:2e:1a:75:46:be:de:6e:24:9d:04:be:7d:
         e7:e0:87:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:17:05 2026 by rpki-client