Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
File:                     vz3ogsJhnWgPLX_mALkBbaKHqNM.mft (raw, json)
Hash identifier:          Isnu2lJB/F1Lv4zylSlil3RsVJf6fYjDBfWTYGSj7MQ=
Subject key identifier:   6A:67:A4:12:B7:01:74:5C:03:3E:30:79:B1:E1:16:3C:6D:70:73:5F
Authority key identifier: BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3
Certificate issuer:       /CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
Certificate serial:       019EC2247D55569C1AA7755C80D128A2E32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
Manifest number:          17B2
Signing time:             Sat 13 Jun 2026 18:00:31 +0000
Manifest this update:     Sat 13 Jun 2026 18:00:31 +0000
Manifest next update:     Sun 14 Jun 2026 18:00:31 +0000
Files and hashes:         1: GG89hAoixp0ZJE8Ef-5VuRyD-Wg.roa (hash: fpAmvEh19YQT+8W5VCcnDo3VDNg2kVBnOH7P5uACyqA=)
                          2: vz3ogsJhnWgPLX_mALkBbaKHqNM.crl (hash: Fnx93m5p/UrH7gjw5SowE2w+mRiBM0sAQeP37Qz60mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:24:7d:55:56:9c:1a:a7:75:5c:80:d1:28:a2:e3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3de882c2619d680f2d7fe600b9016da287a8d3
        Validity
            Not Before: Jun 13 18:00:31 2026 GMT
            Not After : Jun 14 18:00:31 2026 GMT
        Subject: CN=6a67a412b701745c033e3079b1e1163c6d70735f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:67:e3:37:25:6f:ab:fd:06:4c:5a:f9:0d:46:
                    fd:0f:72:5e:e3:7a:b4:98:ef:a0:2f:3d:06:62:db:
                    ee:dd:24:ec:aa:7a:d9:b0:84:91:74:72:c1:12:34:
                    2f:a2:d2:1b:ac:2c:39:ac:11:0b:56:b8:5a:8b:fc:
                    6b:66:26:14:9a:b4:c7:93:97:e0:0c:43:7a:0d:fd:
                    0e:43:97:29:78:29:7b:b2:6f:3d:9c:0e:34:a7:31:
                    a0:eb:38:3b:ab:b8:77:83:b5:50:03:95:94:1e:a3:
                    a8:81:67:28:ba:d9:d9:13:2e:63:0c:5f:6e:a3:e9:
                    5c:fb:fa:d2:73:15:27:e1:ec:9e:76:b7:08:99:fb:
                    0b:0f:ac:0d:6e:ea:54:f9:bf:01:54:80:21:15:6f:
                    fe:8c:1e:d4:e1:78:2d:6d:64:77:a1:4f:61:fa:ce:
                    a9:93:a6:6e:37:a5:9a:9b:6e:b2:d6:6c:8b:77:53:
                    92:dd:eb:15:1a:8a:35:4f:cf:00:a9:ea:53:91:98:
                    5c:10:8b:a7:c5:4e:a1:f3:e4:3e:ae:3a:0f:2c:81:
                    8d:30:9a:2e:e1:db:88:1e:5a:81:f5:a8:46:32:16:
                    cd:d0:70:80:70:cc:30:d8:62:97:77:3e:fa:1d:67:
                    86:4b:65:a8:d0:68:d4:6f:07:65:68:7f:20:1d:51:
                    4b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:67:A4:12:B7:01:74:5C:03:3E:30:79:B1:E1:16:3C:6D:70:73:5F
            X509v3 Authority Key Identifier:
                keyid:BF:3D:E8:82:C2:61:9D:68:0F:2D:7F:E6:00:B9:01:6D:A2:87:A8:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vz3ogsJhnWgPLX_mALkBbaKHqNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/65/46f996-38de-42fb-b982-03bf6cf73ff1/1/vz3ogsJhnWgPLX_mALkBbaKHqNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:25:65:85:f9:cd:e0:7b:71:29:13:c6:06:51:28:ee:8d:ff:
         9a:49:81:86:78:f9:1b:64:a4:d0:39:82:a2:58:17:7c:ec:81:
         81:ec:83:16:68:8f:17:24:26:d1:80:f1:50:c6:06:d4:9a:cb:
         1c:87:4a:5c:69:03:ca:5d:16:cf:ee:ab:d6:d6:53:d2:34:50:
         b6:f3:a4:de:0a:3f:b1:c4:56:bf:64:46:c5:f2:1a:a1:38:5c:
         9b:6c:5c:d5:f0:38:d2:8c:4e:a6:02:6d:6b:58:9c:75:88:da:
         eb:0e:be:6f:72:7b:5f:3f:e3:0c:ad:4e:ad:14:af:4d:a5:9a:
         64:ab:88:e8:61:03:97:6a:cc:d4:c0:e9:79:48:c9:28:5c:2c:
         b8:56:2e:72:cd:86:1d:88:5a:8c:9e:14:06:a4:67:24:15:37:
         86:cb:ff:24:4e:5d:88:66:0d:a4:6f:f2:1c:e6:a8:cb:cf:49:
         51:85:e4:05:d7:0f:1b:42:7a:04:34:95:3b:bc:ec:a9:ec:b7:
         1b:c9:ab:80:18:3d:14:31:be:74:fa:7f:43:bc:28:fc:52:46:
         ac:82:3b:12:15:09:05:a2:6c:a0:8f:6a:e6:8c:e0:a2:9a:4a:
         0e:23:25:b6:cc:54:91:52:7d:55:15:c3:c6:ee:f0:ef:27:1e:
         5b:bd:d1:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:21 2026 by rpki-client