Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          g8Q/EIZ2lGBly/VAildeAhB6927gVNnm5j5BnZ9l7uM=
Subject key identifier:   02:97:1A:65:44:1C:94:94:F6:2D:E2:F3:3E:BF:0C:F8:04:7A:92:41
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       019EC0A43957EC1D60F58D850E986A826CDF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          1185
Signing time:             Sat 13 Jun 2026 11:00:48 +0000
Manifest this update:     Sat 13 Jun 2026 11:00:48 +0000
Manifest next update:     Sun 14 Jun 2026 11:00:48 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: 87EC3WhM6gGafTcHJijyMXPjTlPSSnod+iq9TD3c3lQ=)
                          2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 11:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c0:a4:39:57:ec:1d:60:f5:8d:85:0e:98:6a:82:6c:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Jun 13 11:00:48 2026 GMT
            Not After : Jun 14 11:00:48 2026 GMT
        Subject: CN=02971a65441c9494f62de2f33ebf0cf8047a9241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:9f:af:15:67:ba:52:55:5e:07:03:e7:a9:86:
                    46:67:fc:97:c9:66:a9:ec:0e:d2:61:fc:34:7a:19:
                    f3:b1:d3:29:41:b4:4d:13:e6:46:de:85:05:fb:93:
                    07:97:7b:1c:d9:7a:38:ae:c4:43:fd:9d:de:06:9b:
                    99:eb:c3:66:85:53:f4:aa:ab:d1:78:3c:ec:d7:9f:
                    e5:ef:e6:a6:7e:61:56:b6:7e:79:ae:02:32:a8:bd:
                    b5:2c:60:11:76:c6:86:29:ba:8e:d7:0a:46:9e:25:
                    b2:6e:90:53:55:42:4a:90:9a:d4:ab:84:69:2d:b7:
                    83:04:83:2e:00:0a:3b:6f:82:37:8b:56:1a:d4:bc:
                    7c:07:8f:8e:b4:ac:ce:33:82:ce:84:d3:88:66:fd:
                    ec:57:69:71:86:25:c1:04:93:74:e3:88:32:95:73:
                    e4:6f:a8:05:d9:d7:63:4f:39:b1:ea:0b:e3:4f:56:
                    f1:57:ad:73:40:82:f4:43:0d:2b:f0:84:2c:29:3f:
                    9a:bb:6e:ca:0b:4c:f9:69:c9:74:1d:59:a6:ba:0b:
                    6e:17:fd:75:4c:26:65:c9:07:27:78:64:6b:f1:11:
                    3d:b1:4a:06:1e:75:64:f6:a6:e0:fe:0e:9d:95:06:
                    ee:6a:81:bb:2a:b9:f1:de:ce:93:56:45:8b:c3:23:
                    ad:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:1A:65:44:1C:94:94:F6:2D:E2:F3:3E:BF:0C:F8:04:7A:92:41
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:96:79:a1:4a:10:0c:75:8f:bc:60:19:3d:4c:e7:80:12:10:
         a4:73:c2:04:3d:00:c7:b7:7e:99:24:ae:f5:1d:ac:b7:2c:33:
         55:6b:8a:16:1a:84:ca:61:43:ac:3b:fc:ca:85:51:cd:9a:54:
         08:70:d5:f6:a2:f6:45:16:2f:e9:0b:35:e9:b3:ce:a9:a4:fc:
         4f:33:87:4c:a6:eb:ba:2c:8b:82:7f:96:5a:fa:2f:2c:25:8d:
         f8:8d:46:bf:eb:da:b6:3b:0a:61:44:49:4c:99:02:c0:ea:c9:
         0f:a1:b4:2c:dc:de:5a:aa:1a:86:8b:38:84:a4:fb:61:c5:ba:
         2d:02:a8:fc:d1:45:5d:40:22:ca:ea:26:fb:da:26:8b:e7:06:
         21:8a:84:51:56:5e:63:0d:53:92:8f:ba:22:20:15:2a:ec:a5:
         cc:67:a4:29:eb:67:26:80:cb:11:13:dd:e8:13:e9:f6:01:13:
         2e:00:60:45:ff:17:92:74:82:af:ce:2b:18:a3:03:67:7d:ca:
         bb:20:86:14:b1:43:0f:7c:c6:f4:30:04:92:cb:f3:83:7d:64:
         3a:ec:78:cb:de:69:49:6b:4c:c4:87:b0:cd:88:00:a5:4e:4b:
         1e:7f:c3:b7:19:af:0d:0f:70:57:39:1e:d6:ca:3b:93:be:63:
         e5:b5:b2:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:58:58 2026 by rpki-client