Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File:                     VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier:          uzOAjQ687jXM4zCgGbvGb3eD8E0qrwFWlLNXsEYnr/M=
Subject key identifier:   11:9E:5E:38:3F:70:0E:85:BA:CF:28:D5:7F:07:29:14:76:31:BE:20
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer:       /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial:       019FAB63FDB2DAB0F546E7FB7F11F9C5E6CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number:          0667
Signing time:             Wed 29 Jul 2026 01:01:24 +0000
Manifest this update:     Wed 29 Jul 2026 01:01:24 +0000
Manifest next update:     Thu 30 Jul 2026 01:01:24 +0000
Files and hashes:         1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: IumC64ftCnMIcOXW909KLqPL3WZtAODW5RUhBLw5cRc=)
                          2: Yuo4raHbuV1AupPWdNm1jMw95T8.roa (hash: lmnKCE9fJdmr7z73updpBxSnhRCLKa9yvUVY95GYbw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 01:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:fd:b2:da:b0:f5:46:e7:fb:7f:11:f9:c5:e6:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
        Validity
            Not Before: Jul 29 01:01:24 2026 GMT
            Not After : Jul 30 01:01:24 2026 GMT
        Subject: CN=119e5e383f700e85bacf28d57f0729147631be20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:07:18:b7:8a:02:1a:27:47:06:7b:35:6d:68:
                    4a:33:1a:7e:67:2a:b3:2b:59:29:fc:6c:9d:59:53:
                    cc:b9:e0:9b:36:c1:e3:df:92:84:63:54:8b:6a:ce:
                    06:06:29:0a:73:10:df:73:80:8f:83:ef:7c:50:bb:
                    a1:18:80:01:31:73:80:68:79:f5:91:e2:e7:ee:3d:
                    3e:45:75:9f:c1:9e:40:cf:63:87:31:4b:c5:9a:6a:
                    7d:d3:e9:ec:63:b8:81:50:f7:04:22:6c:df:a9:b6:
                    34:a3:7b:0f:60:9f:b1:65:59:82:59:ee:6b:33:17:
                    f6:cd:3e:ce:bc:5b:3f:94:15:e7:98:b3:c3:92:b3:
                    e4:92:14:e3:02:ae:69:f2:63:78:8e:2b:e7:5c:17:
                    15:e9:82:3e:f4:c3:62:76:d6:f5:3b:da:c4:97:df:
                    cf:b6:23:94:84:ae:29:7c:a4:6d:ac:b7:40:41:b5:
                    86:59:23:4f:42:ce:c1:0c:f3:18:54:67:6c:e9:e3:
                    a4:a8:db:eb:9d:51:da:fc:c7:5f:cf:fe:b2:e7:9f:
                    46:f2:a4:bd:5c:7f:53:d5:8f:83:5a:d8:9c:76:b9:
                    12:9a:1d:05:6f:87:89:cc:cc:82:45:90:e1:15:86:
                    ad:ba:a6:01:0e:0b:ee:02:53:99:7a:2e:19:01:cb:
                    f7:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9E:5E:38:3F:70:0E:85:BA:CF:28:D5:7F:07:29:14:76:31:BE:20
            X509v3 Authority Key Identifier:
                keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:87:61:21:e2:82:f3:f7:71:07:2b:1f:c9:22:6f:17:40:78:
         28:47:9a:f5:85:10:59:46:34:8d:00:5d:c2:b2:cb:20:01:53:
         51:ae:a9:fe:c8:80:60:32:7a:c8:43:b8:93:83:ae:50:f4:36:
         98:c7:07:5d:ff:50:9f:87:58:f5:97:63:8b:3a:16:dd:2e:b8:
         9a:f1:d0:fc:7d:99:b7:81:e8:b9:8a:03:f9:1a:8b:f4:9e:47:
         86:8a:69:f8:e8:9b:12:50:50:cb:29:43:0c:a6:ed:75:ec:ef:
         6c:e9:1f:04:a0:8d:ff:67:7a:8f:38:f2:56:d6:11:02:aa:8e:
         ff:2f:f3:72:d7:ae:95:bd:06:6d:ec:00:bd:65:02:37:75:c5:
         3d:d6:27:c2:0b:16:d5:b8:e0:0d:f4:91:7a:c5:01:35:f2:48:
         44:ed:48:c1:4d:6e:27:c4:d1:59:50:a9:89:6e:df:b6:43:31:
         f0:79:2f:42:a2:a0:b1:25:0f:8b:0a:64:c6:28:61:cd:ed:1d:
         c5:2d:dc:e1:4b:f7:98:6f:80:24:7d:97:ac:0e:2d:ad:c2:e8:
         6c:1a:5a:fa:85:d7:18:62:fc:a3:e6:52:74:87:7a:b3:3c:4d:
         b4:48:19:d5:70:11:d0:f6:d3:46:54:f5:b3:5f:06:63:b8:d4:
         63:74:e2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:42:13 2026 by rpki-client