Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File:                     vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier:          3cy80QIOGDKRrNAV38F3aLdOj4fgjwlus81TWU+qDd0=
Subject key identifier:   91:43:62:20:F9:6B:FA:8C:22:EA:06:D7:BA:0E:9C:8F:4A:8B:48:A0
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer:       /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial:       019EBFC8A077F5253EAF02EA578381B5BBF0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number:          1728
Signing time:             Sat 13 Jun 2026 07:00:56 +0000
Manifest this update:     Sat 13 Jun 2026 07:00:56 +0000
Manifest next update:     Sun 14 Jun 2026 07:00:56 +0000
Files and hashes:         1: 0RRbgUYbY47EzL3vocqK6zrfYdk.roa (hash: IF6XV0R5dhbBLV5xLicL36fWPzjrJS+64OX5boNdTPo=)
                          2: FxlVSI3Pzk5LMHhEN368eliO1Zk.roa (hash: gF++G6xQjDJflZ/Ja5HPf6B0qWFfzOW2mYFsfoVk7H8=)
                          3: tPyBEO-2bgQWRhIbSkeHYfcbCJ4.roa (hash: 7oVVhFstrQvcK+boD9No6AXtqD2sR6u8SatBlTCoiFg=)
                          4: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: 5Rw57Ah1QX0zBeJAK6hZhnI4xDCYoG1vyMLIcecOsu0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 07:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:a0:77:f5:25:3e:af:02:ea:57:83:81:b5:bb:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
        Validity
            Not Before: Jun 13 07:00:56 2026 GMT
            Not After : Jun 14 07:00:56 2026 GMT
        Subject: CN=91436220f96bfa8c22ea06d7ba0e9c8f4a8b48a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7e:b9:a8:85:3c:cc:df:c1:b6:90:49:51:ce:
                    aa:e5:ff:6a:c5:0a:e2:d8:8b:ea:d2:d2:04:62:7b:
                    e2:78:ff:3f:ef:a3:5e:1b:4c:a7:63:fa:59:67:58:
                    9e:55:0e:35:a3:17:a3:15:25:85:1d:b0:36:a8:fc:
                    72:75:6c:b8:00:a3:f3:16:09:46:1a:6a:94:2f:ac:
                    5d:26:26:a9:03:d0:38:c9:94:3e:0e:a8:d7:9c:ec:
                    4d:36:75:41:81:27:ac:3d:8f:da:fe:24:ea:4d:49:
                    c1:5d:e6:97:67:13:8e:16:57:b4:f7:6d:8c:eb:81:
                    1b:7c:5b:59:b0:2d:f8:53:1e:77:81:c7:04:17:86:
                    9e:18:9b:ca:6c:c0:90:0e:5e:c9:3c:91:a6:e2:66:
                    79:6d:ea:7e:08:d6:77:25:75:50:82:2e:b0:a9:c1:
                    f0:1a:b2:80:93:56:f4:53:7f:64:58:57:e0:fd:8a:
                    a0:69:a3:de:ae:fc:12:fb:ca:69:33:b1:0f:1b:dd:
                    c7:71:f6:cf:c6:94:90:83:fd:89:96:97:5f:25:02:
                    02:62:6f:e1:68:e2:bd:fb:40:5b:45:b2:1c:4f:58:
                    dc:b6:71:ac:1b:ee:82:f1:cc:a7:8f:53:ab:8e:ac:
                    8a:ca:f6:f8:8c:c1:75:fa:a3:03:f1:b7:6b:46:32:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:43:62:20:F9:6B:FA:8C:22:EA:06:D7:BA:0E:9C:8F:4A:8B:48:A0
            X509v3 Authority Key Identifier:
                keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:94:06:54:66:d7:31:05:74:0c:68:f0:7d:36:5b:41:46:22:
         0f:69:96:c7:d2:e4:7b:6e:33:96:ed:59:ae:6f:8f:7e:cf:e3:
         24:9e:6b:27:0d:1f:1d:da:f5:cc:b1:73:7d:41:99:e3:56:df:
         3d:e9:5e:bb:5a:08:01:04:6b:1e:4b:d5:24:36:40:da:56:34:
         bc:a6:73:d7:2a:7b:a1:cf:2c:02:e0:29:dc:f4:f0:ca:cc:be:
         c9:aa:4c:f2:bd:74:f4:cc:d1:b1:c7:51:c2:57:aa:19:19:cd:
         2d:0e:a6:79:45:fd:7a:e7:75:8f:18:0c:b3:1a:73:f9:d2:36:
         5c:08:72:a5:fe:ca:a9:f9:44:01:e8:32:59:8e:d1:28:79:6c:
         e1:e0:c5:0b:33:b2:eb:88:81:65:c4:15:ec:31:1b:9a:b1:5e:
         96:3d:01:31:6d:4d:80:43:76:05:e1:c6:d8:ab:5b:8b:bc:41:
         55:cc:3c:8a:3c:09:1f:01:97:9f:e3:34:3b:b2:88:36:29:e8:
         50:d3:cc:21:7c:bd:38:79:75:a4:a4:87:89:f1:80:88:44:b1:
         e6:f6:32:ad:4a:47:cd:49:86:01:8d:ab:b3:23:de:98:aa:04:
         88:e4:bf:34:1f:ff:52:1d:ee:61:84:b9:00:7b:8d:1d:e5:82:
         67:69:d7:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:06:59 2026 by rpki-client