Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File:                     vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier:          ShuFZKTDRRswBiMIWZyWjxOhzsatFpCFIMtOpbbD+7s=
Subject key identifier:   C8:24:6B:A0:1C:52:76:73:5E:42:2E:91:2D:8E:8E:D6:08:45:71:DF
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer:       /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial:       019D9998F40E81613BC0F4B95FC85A0DF3C7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number:          18F5
Signing time:             Fri 17 Apr 2026 04:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 04:00:31 +0000
Manifest next update:     Sat 18 Apr 2026 04:00:31 +0000
Files and hashes:         1: 1Pn7XD-9HZImU-J6Q1IGY1xRKYQ.roa (hash: CGENQXcjM+y9uAdpqQaU4OjFkM8xEPGnXTz4n/PpaZQ=)
                          2: HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa (hash: o7T4Dh22yBlZp7Egs8uQK5dq+Y2Bk/ktQFDv0GOBtkk=)
                          3: UF7QBqdoE-90-2ErsJhTaZEA9Jw.roa (hash: y8KALfg/A9ZQoSBfRXYsuUsTnM2o7AmSVN+QqsI9w7k=)
                          4: v48JmomxhaoI6u0BG-SoULz1plM.roa (hash: dhwyORgcffoV0wLuFDDS3LRqFm5mZR3KZS5s1MZubBA=)
                          5: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: q+N6qFjNNe9ogybEQ2FFjobHm9C3LVQ9nj2qDhJ5Zpw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:98:f4:0e:81:61:3b:c0:f4:b9:5f:c8:5a:0d:f3:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
        Validity
            Not Before: Apr 17 04:00:31 2026 GMT
            Not After : Apr 18 04:00:31 2026 GMT
        Subject: CN=c8246ba01c5276735e422e912d8e8ed6084571df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:d1:2b:38:4d:d3:ca:20:26:13:a3:12:ba:
                    aa:e1:4a:86:ef:a1:1c:33:a3:04:a6:a2:d6:a5:25:
                    4c:1f:55:96:81:1a:ce:a0:0c:ea:0a:66:f0:f0:c1:
                    12:8a:af:2a:f1:84:97:44:24:e0:60:9f:ff:33:b7:
                    7a:ec:1a:bd:b3:80:41:76:c6:d8:39:4e:6f:52:ef:
                    41:1f:b6:fb:73:40:40:ff:7d:df:e1:17:64:e4:ba:
                    45:aa:91:34:cb:9f:d0:d6:5a:6e:78:05:3a:c9:68:
                    e9:89:e5:6c:b9:26:52:a1:d6:f1:89:b9:16:1c:6c:
                    ee:6c:9f:57:7a:73:96:4d:a5:e3:8e:f4:3e:61:23:
                    31:4a:d0:3f:2e:87:c2:ee:56:5c:27:28:9b:4a:55:
                    bb:87:35:60:ff:2e:51:d0:fe:67:48:a0:ac:b8:56:
                    a7:7d:46:29:82:23:ef:d7:7b:b5:fe:4b:54:de:fb:
                    2a:1d:f0:f2:e0:2d:21:3a:43:af:d5:fd:69:85:61:
                    f8:53:a4:55:4d:66:e8:0c:86:d1:37:2e:c1:0b:1d:
                    66:a0:d1:72:b7:b9:c6:2e:ad:8c:0a:28:d3:c2:0b:
                    5e:bb:93:c0:bc:c8:be:7e:3d:24:72:4f:93:1e:a0:
                    93:3d:80:7a:d8:1a:52:3e:d5:54:4b:d0:f0:22:e2:
                    c1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:24:6B:A0:1C:52:76:73:5E:42:2E:91:2D:8E:8E:D6:08:45:71:DF
            X509v3 Authority Key Identifier:
                keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:54:7d:a6:47:ff:bd:9d:aa:ab:8b:b4:99:ce:79:e5:83:ed:
         f4:c9:24:50:98:96:29:fd:70:b2:6b:0b:fb:e9:b1:89:54:c3:
         6d:8e:b6:3e:75:ce:95:be:92:a2:17:2d:eb:59:69:cb:67:6c:
         47:b9:08:06:67:55:68:fd:3f:e8:48:98:ae:fb:ae:f6:55:f4:
         4a:b7:1b:ab:19:49:b7:d5:73:31:07:9c:77:f4:79:85:74:b9:
         ad:03:bb:25:cb:7f:85:7e:b9:79:b9:cc:53:3b:61:74:86:e5:
         f3:a0:20:39:47:e1:50:c6:ae:59:af:51:af:d8:e2:d3:e8:0b:
         16:0b:cd:3c:6e:c4:34:0a:a8:f8:bc:e8:ce:32:83:4f:ea:0a:
         f2:9f:68:35:2c:d8:88:e8:b8:a4:16:1f:5a:ca:0f:be:34:0f:
         ca:11:f4:ee:d8:8f:0d:3d:fb:01:35:71:97:51:19:d3:4a:cd:
         bd:46:1d:7e:ba:46:4b:0d:ec:c5:23:71:05:e8:55:f0:49:7f:
         7e:2a:d9:3d:1e:cd:34:a1:7c:83:de:77:70:60:fc:11:41:e1:
         2a:b9:3f:9b:e0:0e:7c:65:88:8d:fd:ef:1f:31:74:d2:49:96:
         83:94:4e:8c:56:ab:d0:e6:aa:92:a4:ca:9f:a0:b8:25:59:89:
         db:d2:30:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:54:03 2026 by rpki-client