Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
File:                     VwLHy8I1Jyt6zNez8LDkfGHHXis.mft (raw, json)
Hash identifier:          tgBFjYy3qz3o4hKD99H6Ght9892i+HHXZ42UN80tyfs=
Subject key identifier:   F8:82:CD:A5:59:9A:43:D1:59:BC:6F:C4:7B:9B:49:AB:D1:F3:52:8E
Authority key identifier: 57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
Certificate issuer:       /CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Certificate serial:       019FA899D935E49510C48E3162BBFE1C0F17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
Manifest number:          4C
Signing time:             Tue 28 Jul 2026 12:01:22 +0000
Manifest this update:     Tue 28 Jul 2026 12:01:22 +0000
Manifest next update:     Wed 29 Jul 2026 12:01:22 +0000
Files and hashes:         1: Dv1loStZYAsjb_Af0DKMu_bevS8.roa (hash: Zb9q97rROgQhDovcWngVEaqZebMrRktFUPt7d2lNmQc=)
                          2: VwLHy8I1Jyt6zNez8LDkfGHHXis.crl (hash: sRgBm0Z3D/N1sZnGULGYloGcZsaz/5WS7IyCKxQ5RZk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 12:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a8:99:d9:35:e4:95:10:c4:8e:31:62:bb:fe:1c:0f:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
        Validity
            Not Before: Jul 28 12:01:22 2026 GMT
            Not After : Jul 29 12:01:22 2026 GMT
        Subject: CN=f882cda5599a43d159bc6fc47b9b49abd1f3528e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:5f:cf:e4:27:d8:9e:af:5c:1b:62:5c:05:49:
                    e0:27:d4:20:46:ce:cc:80:96:b4:22:bc:b8:60:24:
                    58:55:05:36:b1:63:a4:10:f2:8b:c1:ef:ba:6c:88:
                    0e:83:1d:a1:89:96:8d:99:24:8f:06:88:37:79:57:
                    67:e0:be:9e:af:1c:ef:64:36:ba:3b:f4:7d:44:be:
                    76:c1:31:55:81:5c:55:a9:3e:1c:3b:e7:5b:79:fe:
                    44:e2:3d:14:9b:1b:c8:71:f2:90:ff:72:ea:19:96:
                    af:09:19:6f:1b:6c:d6:c0:62:88:74:56:ac:a7:71:
                    27:c1:2d:df:eb:60:bd:74:b2:e8:a0:7e:41:50:c5:
                    c7:b3:ba:84:24:b4:a8:a1:9d:46:57:8c:92:15:2d:
                    0c:aa:6b:83:41:f9:33:7d:6d:27:e5:75:c5:f3:90:
                    cd:4b:bd:be:26:5c:6c:94:52:48:6b:51:58:d8:88:
                    09:1e:08:fe:45:92:3c:08:6b:7e:ed:a5:f0:c1:ed:
                    ec:aa:91:6b:d7:0c:bd:d5:83:d7:fc:48:52:62:d0:
                    0e:5d:52:d1:a0:cc:c1:07:af:63:32:6b:11:26:e3:
                    02:99:d0:45:70:09:f9:e5:bc:1e:18:d1:4a:eb:bc:
                    93:0e:7a:c6:70:44:a6:f9:3b:21:fd:21:68:cf:6d:
                    a9:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:82:CD:A5:59:9A:43:D1:59:BC:6F:C4:7B:9B:49:AB:D1:F3:52:8E
            X509v3 Authority Key Identifier:
                keyid:57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:70:e8:17:a1:22:e5:cf:a4:4c:ca:09:2e:3f:e5:ed:8a:c9:
         fc:03:67:e9:d5:80:86:08:41:5f:4a:6d:ff:a4:c6:f9:c4:20:
         b4:bd:b8:7c:39:ce:c4:d9:34:b2:55:59:55:d9:e6:5c:38:93:
         b5:c1:2e:c4:37:0e:5d:db:dc:20:7f:50:64:90:1d:e3:ee:e6:
         1c:da:9c:ea:cb:50:5a:7a:eb:a0:2b:eb:99:bd:3c:7d:f8:15:
         f6:ac:0c:a5:1b:93:5b:4b:46:e9:2d:96:a1:76:8e:26:54:4a:
         36:ab:e5:3e:98:14:a3:ee:c9:7b:e8:89:0b:f8:29:be:25:95:
         2f:e8:3d:2f:ce:53:22:a3:b9:f1:88:7d:dc:fb:6b:b0:08:6c:
         1c:91:50:87:a7:49:4a:fa:ad:49:10:1e:67:90:79:62:ee:14:
         dc:da:b7:dc:b7:c3:14:01:d6:7b:75:58:a2:4d:7e:7e:ae:97:
         ea:25:92:e2:3b:bc:6e:9c:ba:c4:d6:ba:2a:d8:d6:bc:fd:62:
         4e:ad:d6:2f:b8:a9:e6:9f:38:cd:af:19:7b:16:c7:b3:46:12:
         80:17:b9:b1:28:10:84:55:c2:11:b9:24:7d:84:5c:c1:b4:ac:
         bf:d4:b8:5d:aa:e5:49:48:f3:47:6e:d5:23:eb:d3:b1:0e:ee:
         95:ad:fa:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:40:09 2026 by rpki-client