Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.mft
File:                     vCBE7THwVIFIur_gbyzgQqEpbwE.mft (raw, json)
Hash identifier:          ZIWZeJf+TFbxCoNyzTDYeFsuFB15kyKJW5sBvqY58h4=
Subject key identifier:   8C:51:D9:64:97:FA:FD:4F:0B:29:8D:B6:A9:47:6F:A7:C6:F8:CA:31
Authority key identifier: BC:20:44:ED:31:F0:54:81:48:BA:BF:E0:6F:2C:E0:42:A1:29:6F:01
Certificate issuer:       /CN=bc2044ed31f0548148babfe06f2ce042a1296f01
Certificate serial:       019FAC7635A60A4F78456E1BBB37B9D94D74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vCBE7THwVIFIur_gbyzgQqEpbwE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.mft
Manifest number:          4E
Signing time:             Wed 29 Jul 2026 06:00:55 +0000
Manifest this update:     Wed 29 Jul 2026 06:00:55 +0000
Manifest next update:     Thu 30 Jul 2026 06:00:55 +0000
Files and hashes:         1: vCBE7THwVIFIur_gbyzgQqEpbwE.crl (hash: aIKSv2dyv11leRw3WrJIS2jZvaY453wByuvptozJIwU=)
                          2: vd2NQOBj5lSde-m3HqUwXoo_Q5Y.roa (hash: YTexY3/D7amaR9YR6Y4Hve22o/zq6VGa3rMg4qGGB1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vCBE7THwVIFIur_gbyzgQqEpbwE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:76:35:a6:0a:4f:78:45:6e:1b:bb:37:b9:d9:4d:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc2044ed31f0548148babfe06f2ce042a1296f01
        Validity
            Not Before: Jul 29 06:00:55 2026 GMT
            Not After : Jul 30 06:00:55 2026 GMT
        Subject: CN=8c51d96497fafd4f0b298db6a9476fa7c6f8ca31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:22:4b:63:af:84:91:89:de:48:24:a8:1b:0f:
                    ae:a4:f1:22:11:90:c9:38:6a:21:bd:42:5c:58:b3:
                    08:c0:22:da:e0:d7:18:af:06:81:64:94:95:82:9b:
                    b5:72:69:ef:8e:c9:23:cd:25:73:01:22:b5:ce:22:
                    1a:53:24:e0:a8:81:4d:70:73:a1:f6:10:0a:87:9d:
                    f3:35:88:a9:f1:42:da:4a:2e:a0:9d:9b:de:e9:78:
                    bb:aa:f7:2d:fc:6f:c9:b7:c0:7f:51:2a:e4:e3:9a:
                    a4:51:24:4c:e0:1e:2d:17:ad:1a:bc:07:ed:17:e1:
                    25:10:6a:0e:8a:5e:36:00:76:2e:07:e1:2a:86:f7:
                    07:c5:a0:1e:3c:40:9b:7a:3f:0c:9a:a1:4d:8b:4d:
                    72:c0:3d:b2:a7:27:f6:12:3a:03:86:9a:b2:86:64:
                    b6:88:33:77:7c:9a:bd:d4:3e:d3:44:24:6c:65:93:
                    ef:fa:35:03:57:fb:85:1b:e1:39:aa:62:fe:64:2f:
                    69:c0:7b:cc:fa:4b:cc:07:60:72:eb:6b:4a:84:fe:
                    ad:7b:00:4d:89:7b:18:08:c4:18:de:e6:b1:f7:f0:
                    b5:21:e6:b2:a7:80:86:3c:48:92:cc:8b:98:6e:ee:
                    85:23:fe:e7:9e:9d:0e:c5:80:83:bd:2c:fa:b8:5d:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:51:D9:64:97:FA:FD:4F:0B:29:8D:B6:A9:47:6F:A7:C6:F8:CA:31
            X509v3 Authority Key Identifier:
                keyid:BC:20:44:ED:31:F0:54:81:48:BA:BF:E0:6F:2C:E0:42:A1:29:6F:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCBE7THwVIFIur_gbyzgQqEpbwE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/95/0f9632-8c3d-4f7c-b22a-92f1d7dfc817/1/vCBE7THwVIFIur_gbyzgQqEpbwE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c2:ab:9a:63:d3:53:56:a3:e2:00:03:d8:00:4c:ce:8c:c8:
         50:c7:b8:5b:dd:6e:dc:3a:c2:7d:27:bd:56:7b:10:a2:39:9d:
         40:8c:1c:d0:42:bc:33:47:39:bb:7d:d3:7f:02:56:6d:26:88:
         79:bf:3a:0e:ce:32:f9:4f:19:14:f6:88:a9:59:9b:cd:77:8b:
         b1:16:9a:62:31:e7:35:6f:51:48:ab:f7:f3:f3:b0:61:0c:75:
         0d:40:1c:97:0f:04:c2:2d:3a:ef:ba:a4:73:6c:db:db:30:02:
         7c:f4:29:ac:19:31:d8:de:90:de:89:74:99:be:e3:f5:5d:62:
         db:a7:2d:1a:d0:c5:b1:1a:49:c7:a5:22:82:54:0c:da:3b:0c:
         2c:85:55:c6:7d:90:b9:41:6c:fc:86:2b:07:1e:8f:33:c9:62:
         3f:5a:2d:0a:b2:5b:a5:93:b8:37:7a:8e:5d:25:9a:5c:11:dc:
         11:69:34:d5:7d:fc:84:88:ef:18:d6:3d:3a:71:a7:6d:e6:95:
         ea:c9:40:e4:dd:4d:2e:0c:c4:d2:3e:5d:9c:f7:cf:be:5a:c7:
         5e:d1:7e:c8:ae:c0:ea:b5:1c:d2:69:27:d1:14:f1:30:ba:2b:
         14:d6:85:0d:de:68:e5:e7:74:7c:c6:27:bc:d5:09:11:3b:12:
         3d:d9:af:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:05:56 2026 by rpki-client