Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
File:                     2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft (raw, json)
Hash identifier:          9bQSiU3INfNPXPChf4Uzg29aODb380zvquzd8xttGRU=
Subject key identifier:   70:35:E4:9E:1F:CC:F3:FA:D1:DF:A8:51:BC:B7:4C:03:F1:41:F8:1A
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Certificate issuer:       /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial:       019FAC07FCC1D9871D4DDD0D945102C95D58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
Manifest number:          A5
Signing time:             Wed 29 Jul 2026 04:00:32 +0000
Manifest this update:     Wed 29 Jul 2026 04:00:32 +0000
Manifest next update:     Thu 30 Jul 2026 04:00:32 +0000
Files and hashes:         1: 2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl (hash: zlWDylHPnvRExOrKhwlGBepNNBZXF+XiTgS0ag2fTck=)
                          2: D9_btYwl0fQhOMvvEzfg91IZ8P0.roa (hash: WuI7JG/DTFeMuDLWYMfuwcvhxvoBD8M0//z426pEYRE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:07:fc:c1:d9:87:1d:4d:dd:0d:94:51:02:c9:5d:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
        Validity
            Not Before: Jul 29 04:00:32 2026 GMT
            Not After : Jul 30 04:00:32 2026 GMT
        Subject: CN=7035e49e1fccf3fad1dfa851bcb74c03f141f81a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:2b:39:57:3b:cc:3b:1d:26:30:3f:96:d5:7c:
                    39:a5:d6:76:61:dc:a5:7c:29:fe:df:fd:b0:dc:17:
                    53:6b:d9:87:69:fe:fe:fd:a7:0f:9c:a4:d8:77:1e:
                    55:02:25:aa:1f:5e:b7:de:d7:62:35:13:1b:3f:3f:
                    f0:4e:89:7e:9e:3d:7c:51:3b:e5:04:e3:58:4f:5a:
                    14:e4:12:2c:e0:98:54:8b:8e:59:bd:5d:d2:48:d9:
                    ae:39:6c:88:72:5e:2f:62:35:67:3a:4a:40:f3:4d:
                    a4:13:5b:c3:e4:d0:2f:91:29:2e:b0:5a:c7:38:05:
                    af:3e:2a:a6:b6:53:21:2e:48:cc:52:cc:3b:40:3d:
                    4a:bb:3b:0d:e4:cd:6c:00:0d:a3:46:57:f4:d9:34:
                    db:02:de:f4:d3:fe:10:df:9d:fa:9e:cc:d6:cc:6c:
                    36:c9:06:1a:74:d3:4f:90:d6:dc:f8:e5:2a:0e:53:
                    6d:03:31:12:05:fe:3f:9c:b8:6a:87:df:c0:6b:58:
                    14:6d:d3:67:c7:88:f2:28:47:ae:6e:df:73:ab:ff:
                    54:fd:cb:d8:a1:d9:e1:fd:62:0d:15:67:82:f3:19:
                    c4:95:5f:7f:73:97:0b:02:95:58:84:39:4f:09:ed:
                    a8:68:c8:69:24:08:ce:9e:56:8b:c4:90:47:e0:dd:
                    db:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:35:E4:9E:1F:CC:F3:FA:D1:DF:A8:51:BC:B7:4C:03:F1:41:F8:1A
            X509v3 Authority Key Identifier:
                keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:8e:9d:c3:2a:73:da:0c:05:01:57:f3:9e:bf:a7:48:ca:d5:
         a8:f4:38:22:89:48:a9:7f:ca:b4:f8:41:de:34:ce:d5:74:67:
         84:8a:97:0f:60:ff:36:7c:9d:25:15:41:ac:a0:c4:0e:c1:85:
         1c:5b:01:7d:f5:ca:f1:e1:d0:da:86:b4:d9:5e:87:c1:92:e4:
         f6:36:01:8f:30:d3:89:27:2f:46:ca:75:7c:1f:fc:fb:93:ff:
         61:52:7e:7b:30:2a:ba:7b:d5:2c:42:a8:de:cc:28:bf:0d:99:
         24:3a:21:de:45:aa:b6:01:42:06:eb:a1:98:7b:e6:45:30:1c:
         cf:39:94:52:af:ac:69:b7:e3:bc:72:1c:c8:a0:43:9d:66:69:
         0f:05:84:00:c1:3f:49:a6:7d:09:e9:29:b6:ae:b0:74:da:5c:
         cc:e8:60:94:5e:53:09:5c:7b:a5:35:3c:59:4b:df:b9:d6:87:
         c2:57:1e:a6:db:3c:76:ef:d5:7f:73:6f:03:26:be:00:64:1c:
         aa:29:e9:58:dc:10:ca:8b:85:23:24:b8:7c:4f:29:59:2e:78:
         c2:93:89:43:8c:ad:7f:22:d2:09:eb:5e:43:e4:58:a7:eb:02:
         ab:ef:76:c4:49:40:56:96:33:81:6e:f7:3c:8c:66:64:a2:ae:
         32:97:4d:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sB/zB2YcdTd0NlFECyV1YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiZTQ3ZTU1OWQyYTgyY2Y1MGI0MTUxOTY1ZTM2OTM3ZTNm
Zjc2N2EwHhcNMjYwNzI5MDQwMDMyWhcNMjYwNzMwMDQwMDMyWjAzMTEwLwYDVQQD
Eyg3MDM1ZTQ5ZTFmY2NmM2ZhZDFkZmE4NTFiY2I3NGMwM2YxNDFmODFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0is5VzvMOx0mMD+W1Xw5pdZ2Ydyl
fCn+3/2w3BdTa9mHaf7+/acPnKTYdx5VAiWqH1633tdiNRMbPz/wTol+nj18UTvl
BONYT1oU5BIs4JhUi45ZvV3SSNmuOWyIcl4vYjVnOkpA802kE1vD5NAvkSkusFrH
OAWvPiqmtlMhLkjMUsw7QD1KuzsN5M1sAA2jRlf02TTbAt700/4Q3536nszWzGw2
yQYadNNPkNbc+OUqDlNtAzESBf4/nLhqh9/Aa1gUbdNnx4jyKEeubt9zq/9U/cvY
odnh/WINFWeC8xnElV9/c5cLApVYhDlPCe2oaMhpJAjOnlaLxJBH4N3bEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHA15J4fzPP60d+oUby3TAPxQfgaMB8GA1UdIwQY
MBaAFNvkflWdKoLPULQVGWXjaTfj/3Z6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMi1SLVZaMHFnczlRdEJVWlplTnBOLVBfZG5vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi9lNDE5OTktYzBjOS00OWRiLWJkZmEt
NzkyZjI5ZWIxM2Y4LzEvMi1SLVZaMHFnczlRdEJVWlplTnBOLVBfZG5vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi9lNDE5OTktYzBjOS00OWRiLWJkZmEtNzkyZjI5ZWIxM2Y4
LzEvMi1SLVZaMHFnczlRdEJVWlplTnBOLVBfZG5vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaI6dwypz
2gwFAVfznr+nSMrVqPQ4IolIqX/KtPhB3jTO1XRnhIqXD2D/NnydJRVBrKDEDsGF
HFsBffXK8eHQ2oa02V6HwZLk9jYBjzDTiScvRsp1fB/8+5P/YVJ+ezAqunvVLEKo
3swovw2ZJDoh3kWqtgFCBuuhmHvmRTAczzmUUq+sabfjvHIcyKBDnWZpDwWEAME/
SaZ9Cekptq6wdNpczOhglF5TCVx7pTU8WUvfudaHwlcepts8du/Vf3NvAya+AGQc
qinpWNwQyouFIyS4fE8pWS54wpOJQ4ytfyLSCeteQ+RYp+sCq+92xElAVpYzgW73
PIxmZKKuMpdN0w==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:31:13 2026 by rpki-client