Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
File:                     VLJNiVv5wKX9AApFo0dRCyoIf7g.mft (raw, json)
Hash identifier:          fnDHbY6n5eFUteOB94ysa0TNq7+T98KDFLXe84rQ99I=
Subject key identifier:   2D:4F:0E:E2:7F:3D:6D:98:CE:93:63:9A:0D:6D:B4:49:5E:62:CD:2E
Authority key identifier: 54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8
Certificate issuer:       /CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
Certificate serial:       019FAB2C58DB831BA20C70FF9238552BE6AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
Manifest number:          19D4
Signing time:             Wed 29 Jul 2026 00:00:37 +0000
Manifest this update:     Wed 29 Jul 2026 00:00:37 +0000
Manifest next update:     Thu 30 Jul 2026 00:00:37 +0000
Files and hashes:         1: Ib0Ol3nFOYIDYH3957HPZoQwY64.roa (hash: NuhOlS+BLbt/74LFrOD5mSh8QUGvts9CSbc+WHsVsPE=)
                          2: J7wDsk5s-Q_yyFk6-jZeZlS5aaE.roa (hash: Bfl8ObvmfqtyBp5KbMoNS07tnVUojBcqdmR2bkync4I=)
                          3: PDGpMhI2hhzaEunrKmCMvh1sj_o.roa (hash: QUb67JZzKC8hODXF/OgGrllY6z+k5+rpZer5JCC+7YA=)
                          4: VLJNiVv5wKX9AApFo0dRCyoIf7g.crl (hash: JTahCUwzNSeN78YM9R3N+bMO7Ao37WFm8hnpzqgsXg4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 00:00:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:2c:58:db:83:1b:a2:0c:70:ff:92:38:55:2b:e6:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b24d895bf9c0a5fd000a45a347510b2a087fb8
        Validity
            Not Before: Jul 29 00:00:37 2026 GMT
            Not After : Jul 30 00:00:37 2026 GMT
        Subject: CN=2d4f0ee27f3d6d98ce93639a0d6db4495e62cd2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7d:7b:47:99:de:f0:b4:65:50:81:6b:f4:2f:
                    10:e2:a6:71:ad:34:78:8d:e9:ea:55:e3:4e:30:a6:
                    7d:0f:74:03:60:7c:ca:34:fc:76:24:a1:4f:0d:17:
                    b4:69:e3:e7:84:7d:9f:05:73:86:a1:66:84:90:50:
                    43:f2:c4:1d:45:a9:ab:96:47:13:cc:f6:03:ae:f2:
                    53:d6:7b:ba:2c:35:7e:30:8a:2b:44:bf:3d:1f:7c:
                    33:de:b0:df:c0:99:a4:d7:a6:3f:f1:25:04:3c:82:
                    c8:04:7c:b4:66:2e:ef:15:bb:11:9a:b1:78:03:0e:
                    fd:f6:0f:ce:a2:30:d2:b8:e1:21:e8:31:56:3e:71:
                    c3:bc:de:26:83:fa:9d:fe:81:2d:f5:04:23:31:60:
                    d6:4d:68:c3:e5:8b:b3:4f:bd:e3:9d:cb:d1:69:74:
                    14:dd:95:3c:0e:d5:81:52:8b:d1:ab:e9:e6:9e:2e:
                    68:2a:d9:bf:25:e4:8d:ec:91:a5:8e:26:a2:a0:09:
                    68:f8:4e:9e:a4:39:39:c1:4b:e0:9e:88:0b:06:d7:
                    e6:d1:cb:68:47:ec:14:28:c8:11:de:ed:ff:28:9d:
                    ea:48:f8:95:f0:03:6e:4e:b7:79:c3:24:14:2b:9d:
                    5e:4d:3c:c5:4d:69:3a:3c:e5:7f:67:5d:21:fc:ff:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:4F:0E:E2:7F:3D:6D:98:CE:93:63:9A:0D:6D:B4:49:5E:62:CD:2E
            X509v3 Authority Key Identifier:
                keyid:54:B2:4D:89:5B:F9:C0:A5:FD:00:0A:45:A3:47:51:0B:2A:08:7F:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLJNiVv5wKX9AApFo0dRCyoIf7g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d21679-2ad2-4df5-80b0-fcb9bd05b1ab/1/VLJNiVv5wKX9AApFo0dRCyoIf7g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:aa:70:63:1a:78:a9:d7:a8:10:f0:5a:3d:c0:96:3e:09:32:
         62:c9:e6:89:06:46:26:e3:17:12:3d:88:51:c8:b8:33:95:5e:
         64:c1:62:18:af:ea:8b:35:26:92:96:3a:b1:19:65:d2:65:02:
         00:68:c8:49:bd:e4:5a:a0:18:1e:e5:99:aa:41:33:69:d6:dc:
         8a:76:49:6b:ef:5d:23:18:97:58:94:a9:8f:e2:c1:28:5e:7f:
         84:46:6e:79:26:d6:f1:29:cd:00:6e:f2:3d:c1:a2:c0:56:f1:
         91:d8:98:9b:0e:38:4a:ec:85:ae:e7:c9:89:0e:c8:6c:35:cb:
         5a:25:fa:bb:0a:eb:a3:cb:e7:59:d1:c2:63:6c:61:e0:b2:f9:
         ff:ea:e9:18:f0:22:9b:77:10:e7:9b:59:54:5f:9d:89:32:2e:
         da:e6:e2:37:42:f2:ec:a6:92:d3:c6:93:df:e3:c4:b4:2a:62:
         42:79:be:f1:ce:62:73:e6:54:bf:7b:51:cd:01:30:84:47:c1:
         aa:5c:73:b6:38:f4:3b:d9:28:1a:83:bd:23:9c:5e:bd:7e:22:
         97:30:f6:f1:ad:e6:f3:68:50:02:23:6a:ef:53:9d:a1:5f:60:
         8d:ca:27:a3:ad:19:e2:2f:c6:5e:f3:a8:f5:36:65:24:6c:eb:
         a0:9f:d5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:09:42 2026 by rpki-client