Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
File:                     vPPYLGBpUlW7VE_xoawy2w-xFuU.mft (raw, json)
Hash identifier:          EfOY4CBV21Q4vvKzOSbKF8rcntFLqmHyDP86dhddMec=
Subject key identifier:   60:C9:98:EF:81:83:47:BE:1F:A4:AD:15:75:CD:1C:A1:5C:47:4C:69
Authority key identifier: BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5
Certificate issuer:       /CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
Certificate serial:       019DA3AEC0F394544E2E31055B70D8C1498B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
Manifest number:          024B
Signing time:             Sun 19 Apr 2026 03:00:32 +0000
Manifest this update:     Sun 19 Apr 2026 03:00:32 +0000
Manifest next update:     Mon 20 Apr 2026 03:00:32 +0000
Files and hashes:         1: vPPYLGBpUlW7VE_xoawy2w-xFuU.crl (hash: 6Zc50gAP/KXhkYIRyW/U64S+8PilYQ4KnlooxIjNUTw=)
                          2: vw2ntvLesz6s464z3Zxlqxg_Jfg.roa (hash: jJvGLsLP1bSLpBaz6ycodyIwzcBAdVDfBxgVTq271mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:ae:c0:f3:94:54:4e:2e:31:05:5b:70:d8:c1:49:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
        Validity
            Not Before: Apr 19 03:00:32 2026 GMT
            Not After : Apr 20 03:00:32 2026 GMT
        Subject: CN=60c998ef818347be1fa4ad1575cd1ca15c474c69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:69:c1:60:0c:e7:04:0b:94:1b:e0:ab:c4:13:
                    a0:bc:71:a0:c6:c8:99:b2:60:cc:d7:6f:11:66:da:
                    a4:e7:be:fd:70:28:27:a7:05:d9:ae:c8:03:14:7e:
                    af:e0:29:83:8c:83:40:c9:b3:94:ce:65:de:8f:af:
                    b5:17:53:a4:d4:39:46:75:05:3b:ff:4e:9d:cf:d9:
                    94:b8:9c:1f:5f:56:ae:b2:56:7d:37:68:f8:64:50:
                    de:15:f2:a8:7b:66:bb:2d:0d:9e:50:b2:ae:8c:46:
                    f6:ea:eb:19:45:9f:95:e3:62:c6:ee:01:9c:56:62:
                    55:dc:89:4c:d5:dd:ca:d0:4e:6e:92:9a:98:8c:92:
                    2f:d7:74:72:c3:e0:d7:98:91:03:ea:6a:bf:7f:6e:
                    c4:e4:2b:79:7f:a5:8e:64:16:3c:77:21:d2:fa:5b:
                    8d:fa:03:30:e0:aa:0e:49:5d:d6:e6:c8:61:58:67:
                    09:29:6e:94:d8:1c:29:17:16:ad:d0:9c:07:42:a2:
                    d2:18:10:2b:b2:f8:e5:50:fe:83:24:ff:9c:f9:cc:
                    b0:cf:38:e2:1f:19:3d:1b:35:06:97:d1:79:c8:70:
                    fd:6a:e0:12:8d:25:77:33:d7:10:65:fd:62:89:07:
                    2a:60:e1:41:48:70:f6:92:b5:b3:0d:c8:30:12:98:
                    f0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:C9:98:EF:81:83:47:BE:1F:A4:AD:15:75:CD:1C:A1:5C:47:4C:69
            X509v3 Authority Key Identifier:
                keyid:BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:a2:92:d8:76:38:a8:16:1d:73:7e:77:9e:3f:e0:1d:c7:5e:
         ec:4f:31:de:64:91:16:2c:85:c2:54:dd:df:84:9d:9f:20:26:
         d8:e0:13:f5:b0:a8:c7:5c:bc:ca:c4:cc:d4:5a:66:28:0a:d0:
         ef:b6:ba:a3:c9:58:17:b0:ae:e6:42:c8:62:e7:03:a7:9c:b7:
         2c:9a:59:94:f6:b5:ae:16:04:c8:1a:ea:33:e6:92:60:c0:7c:
         fd:ed:e4:9b:a6:de:cb:8c:5d:6d:da:cd:da:8d:c1:b1:ba:63:
         9c:bf:99:5a:af:86:79:8e:a4:8c:f9:5b:2b:c4:12:f7:64:54:
         69:74:38:c3:fe:1c:a9:0d:a8:6b:ca:e3:99:05:e8:55:6b:48:
         19:6b:7d:5f:54:ea:56:a8:07:9f:7e:56:e9:9f:22:62:d6:18:
         28:62:5e:06:36:3b:a6:0f:dc:f6:a2:b0:26:cc:ce:9b:2d:dd:
         cd:11:e9:c4:f9:bb:04:fc:bf:5d:66:9c:6a:40:97:4f:6e:bb:
         54:12:27:75:d7:54:0c:25:9a:d0:c5:ae:c5:52:4a:4f:62:d7:
         55:71:6a:7e:94:91:2c:b5:f4:9e:b8:5b:be:40:e6:57:e0:d1:
         34:6d:61:ef:77:18:8f:03:52:c3:bd:ff:60:31:9e:5d:c4:7b:
         49:7a:d2:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:16:11 2026 by rpki-client