Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
File:                     VSrToLS3ToWvVPWK11owJrffcYE.mft (raw, json)
Hash identifier:          7Me6b5/I8CUzgrn/OUCCfgSD7tFbEI3xhX7xQctBLN4=
Subject key identifier:   5B:83:EA:2E:45:4D:2E:F5:B9:07:0E:20:60:C3:33:61:7C:2A:C8:6B
Authority key identifier: 55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81
Certificate issuer:       /CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
Certificate serial:       019EC1B73C5453D4312A09242734B8CD1DD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
Manifest number:          1996
Signing time:             Sat 13 Jun 2026 16:01:11 +0000
Manifest this update:     Sat 13 Jun 2026 16:01:11 +0000
Manifest next update:     Sun 14 Jun 2026 16:01:11 +0000
Files and hashes:         1: 7NGoj5cGztX58pAtipUcpmb4aIM.roa (hash: vlOULZs24F/kcnILYjizoe3IHDjDEgukRjmyfRx6nIw=)
                          2: V2ZzzbVPUiKvWiZZCU89cR5PNd0.roa (hash: A3URN1enAjnCkB6UzDkrO/J0z/XkaxyVPZWO9Xu4fHc=)
                          3: VSrToLS3ToWvVPWK11owJrffcYE.crl (hash: lIgxDn8QPhZeDJh4f3hLucZRh7doxqLl3FgtxjV9JvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 10:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:b7:3c:54:53:d4:31:2a:09:24:27:34:b8:cd:1d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552ad3a0b4b74e85af54f58ad75a3026b7df7181
        Validity
            Not Before: Jun 13 16:01:11 2026 GMT
            Not After : Jun 14 16:01:11 2026 GMT
        Subject: CN=5b83ea2e454d2ef5b9070e2060c333617c2ac86b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:ce:7b:66:0b:a4:dc:9a:7f:8f:af:1b:b4:fb:
                    b9:87:7a:2a:bc:e2:58:63:20:a1:c9:55:a1:b5:c3:
                    b5:ac:10:d1:05:d6:63:da:ef:cb:37:46:d1:0a:40:
                    70:0a:24:45:bf:93:ec:39:38:ff:67:06:01:ca:08:
                    aa:5d:53:69:fc:dd:83:ef:f5:a2:ef:05:87:1e:61:
                    e5:7f:e6:22:6b:76:c9:2b:29:d7:0a:23:69:9c:db:
                    9e:42:31:4e:6a:d6:76:62:51:d9:9d:21:03:a3:2b:
                    4a:c2:fb:e2:70:98:00:e8:cc:de:2c:9c:d7:3d:20:
                    f9:bd:46:52:1f:0b:59:94:50:a2:22:2c:4e:d9:74:
                    01:37:b9:b5:74:e7:14:8d:c3:75:ae:28:ed:82:38:
                    67:8c:68:63:6c:24:79:13:71:1b:97:72:e6:0d:0d:
                    56:55:10:8f:b7:82:5b:ee:4e:23:12:85:82:0c:d2:
                    b4:c8:dd:2c:55:d0:9f:f5:80:08:a3:81:9b:49:58:
                    53:9a:96:51:9b:79:26:5e:15:4c:6d:55:45:c9:e9:
                    a9:7b:4e:0b:c7:98:d2:4f:36:0c:5d:d7:fd:67:50:
                    75:75:d5:38:95:2d:bd:5a:1d:0e:ce:19:c2:5b:96:
                    0b:7f:dd:3f:0e:f1:ad:2c:cc:39:a7:75:af:73:15:
                    51:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:83:EA:2E:45:4D:2E:F5:B9:07:0E:20:60:C3:33:61:7C:2A:C8:6B
            X509v3 Authority Key Identifier:
                keyid:55:2A:D3:A0:B4:B7:4E:85:AF:54:F5:8A:D7:5A:30:26:B7:DF:71:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSrToLS3ToWvVPWK11owJrffcYE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/16fcf1-6412-4db2-b3ae-49a3c49f393c/1/VSrToLS3ToWvVPWK11owJrffcYE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:9c:cb:00:a3:dd:26:b7:fa:81:8e:c4:24:5b:cb:6c:b6:3a:
         ba:6c:2e:bb:66:7e:6f:12:56:41:5b:c6:ff:34:1b:2e:1b:be:
         ed:99:49:f5:4d:69:bf:bd:d5:70:fe:1b:6e:fb:9c:42:72:82:
         34:25:ac:b1:85:cb:6f:a7:ef:cb:c0:8a:5c:fc:29:85:17:0b:
         64:0c:27:f0:e1:f2:6c:b3:b6:e4:9d:d8:6b:b4:aa:d3:a2:37:
         01:be:83:64:37:91:f1:89:b8:2a:ae:23:9d:96:10:76:09:08:
         82:34:c6:55:5e:9a:5a:e3:f3:d9:01:68:f6:7a:6d:12:63:b0:
         1b:df:77:8f:5e:50:a5:e6:34:36:51:58:fc:e2:a7:3e:33:0d:
         6e:fb:6c:e8:3a:e3:26:e2:12:e0:27:4c:8d:77:aa:af:62:d3:
         50:ce:84:da:e2:bd:e0:02:24:d3:0b:b3:0d:d4:4a:04:a5:05:
         3a:25:68:13:7e:33:b5:3a:97:d2:35:69:87:e1:e8:8c:c2:59:
         82:3f:2f:60:15:77:cc:0d:c6:b5:be:c9:ca:7f:4e:1d:e4:2b:
         90:23:44:63:3f:89:6e:c4:11:b8:66:63:43:d4:cf:b7:12:e2:
         3f:8b:15:0d:97:06:99:8c:62:b1:f8:e8:12:09:1b:dc:0b:ab:
         e8:2f:bd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:57:45 2026 by rpki-client