Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
File:                     vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft (raw, json)
Hash identifier:          y4wBbRAnoC4b9+uRFNoGyxiFzPUP7+P9D6ARQ3H/9KU=
Subject key identifier:   97:01:83:DE:51:56:EA:4D:E4:5F:F2:62:8F:B5:D1:BE:85:01:7D:31
Authority key identifier: BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D
Certificate issuer:       /CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
Certificate serial:       019EBF5AC5E11D6B1B1E2BAEA971ECE44B37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
Manifest number:          195E
Signing time:             Sat 13 Jun 2026 05:00:57 +0000
Manifest this update:     Sat 13 Jun 2026 05:00:57 +0000
Manifest next update:     Sun 14 Jun 2026 05:00:57 +0000
Files and hashes:         1: J_AqbRRwbv9N6VWFHOb5S7w5E84.roa (hash: qnOkRGeYiVK7GUYOu7VW19sEbzCZQZR5A+RT6PLbwi0=)
                          2: nQN4cLKNegYOd-usKrALjYrvoiE.asa (hash: E5UzlVG/AYUsYDcEZ2bwekYc5ZlCnWcJiociB8390vE=)
                          3: vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl (hash: jFH17GBgkYyjto5ozSe7tmX6j4JclxWsTFBYhSGjNcI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 05:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:c5:e1:1d:6b:1b:1e:2b:ae:a9:71:ec:e4:4b:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf20e64b18831bc98527cbe0e1067c1a95d1687d
        Validity
            Not Before: Jun 13 05:00:57 2026 GMT
            Not After : Jun 14 05:00:57 2026 GMT
        Subject: CN=970183de5156ea4de45ff2628fb5d1be85017d31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a1:ad:37:cf:b6:2b:54:72:20:be:bd:54:60:
                    f5:c4:7e:a5:aa:72:f0:7e:f2:d6:04:38:cf:68:2d:
                    e1:90:4e:4b:c8:5b:ac:38:41:62:a7:c0:81:89:3e:
                    30:8b:46:6c:49:f4:6e:a2:8c:be:91:4e:0f:fc:ce:
                    ce:c1:cd:6a:63:48:69:a9:5b:c3:28:64:05:9b:06:
                    4c:f4:66:7c:4e:96:99:08:16:59:13:ca:5b:c9:8a:
                    15:f4:64:b4:d0:e5:40:17:0d:08:4d:ea:bd:73:f2:
                    59:ae:b5:f2:aa:38:99:47:0a:48:d7:3c:31:99:7d:
                    26:9e:58:af:42:9b:a0:b1:59:31:bc:2a:89:f4:67:
                    76:a6:06:2e:fa:f6:6a:46:33:85:6b:ab:e6:9e:57:
                    99:b7:e8:75:72:b8:a0:f7:e3:a7:04:1a:e9:40:f3:
                    2b:a8:b1:bf:10:28:11:05:08:3a:c1:6f:4f:7a:56:
                    a5:c3:0d:bf:6d:81:30:e0:60:0a:95:7f:45:58:30:
                    50:66:e9:c8:9c:65:92:dc:22:8c:f6:85:e1:6f:cb:
                    07:70:ca:ca:29:cb:3f:69:4a:a1:e6:93:3f:12:d1:
                    b5:b3:c8:11:c4:7a:8e:83:3d:51:5f:32:ce:ed:da:
                    ea:b1:5f:35:ed:7c:1d:37:ed:a7:a5:16:07:07:c6:
                    fb:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:01:83:DE:51:56:EA:4D:E4:5F:F2:62:8F:B5:D1:BE:85:01:7D:31
            X509v3 Authority Key Identifier:
                keyid:BF:20:E6:4B:18:83:1B:C9:85:27:CB:E0:E1:06:7C:1A:95:D1:68:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/eb340f-8053-4f5f-a3a5-229b6409f2a0/1/vyDmSxiDG8mFJ8vg4QZ8GpXRaH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:32:07:3f:2e:98:60:87:a6:c8:07:6e:06:d3:e0:2b:4c:78:
         0b:bc:6d:08:82:28:d1:24:35:89:b4:d9:ce:ba:3c:e7:d7:3a:
         08:64:af:89:55:f3:b9:80:fd:00:c4:bb:52:73:c3:36:9d:52:
         aa:af:e3:97:ac:ba:99:f3:fa:a8:6a:95:6b:68:a7:06:12:8a:
         69:f8:00:a2:07:bd:24:8d:f1:7b:be:34:71:c5:70:e2:51:17:
         32:7c:12:1f:50:ce:34:ba:c4:19:05:d3:34:d8:8e:68:a9:de:
         5a:b4:7f:9b:81:d2:ba:10:83:8d:26:ff:71:61:9a:03:fd:30:
         ce:30:86:28:9f:40:98:df:ad:45:61:d6:da:52:83:8f:3d:63:
         10:ac:54:07:20:3f:c5:5f:1c:b5:a2:3b:4b:0e:9f:5f:b1:93:
         1a:93:86:db:4a:92:6a:a3:51:cb:a3:1d:bf:4c:df:7e:be:ed:
         a4:79:be:6b:ff:cf:e8:d6:34:ad:8f:75:07:20:89:6b:96:68:
         a1:3d:61:08:14:91:52:83:14:52:3b:a6:f2:16:67:ef:2a:ba:
         3b:68:aa:72:4d:52:3a:a1:1d:e4:d1:ce:c7:d0:a0:22:1c:af:
         f2:92:0c:96:63:71:9d:dc:0e:38:a6:40:85:65:80:5c:83:ca:
         89:5f:93:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:02:10 2026 by rpki-client