Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
File:                     vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft (raw, json)
Hash identifier:          EZcuj9rDRwPFmZoxU0p5IuLAt1s+tUJyutLL9t4ag4E=
Subject key identifier:   3A:3F:8B:7D:C4:59:87:FA:9B:3B:1D:D5:AD:D3:FC:9D:FC:CD:1F:D1
Authority key identifier: BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB
Certificate issuer:       /CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
Certificate serial:       019EBF5AE33CB2D86AAA2D9FAC75A2BC74B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 05:01:04 +0000
Manifest this update:     Sat 13 Jun 2026 05:01:04 +0000
Manifest next update:     Sun 14 Jun 2026 05:01:04 +0000
Files and hashes:         1: n7K--VygPD5bxJ2Nh4nbk7uTznw.roa (hash: fTr5X92PZm2YQIc6I3zwmHgOyHHHYgDg02uY9i85scE=)
                          2: vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl (hash: /GU4gDSEmVpjoOMvuX2RGsIVRXlW+Xl3IGtpcyFItCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:5a:e3:3c:b2:d8:6a:aa:2d:9f:ac:75:a2:bc:74:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf2eefa7c6048e6a0a5a65c07e3e255341e143bb
        Validity
            Not Before: Jun 13 05:01:04 2026 GMT
            Not After : Jun 14 05:01:04 2026 GMT
        Subject: CN=3a3f8b7dc45987fa9b3b1dd5add3fc9dfccd1fd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:dd:ce:49:50:c5:5c:a6:b5:ca:e9:db:46:b8:
                    91:45:91:c2:40:75:8e:ad:58:a4:75:d1:63:5c:68:
                    b1:c2:00:8c:b5:4d:f0:b7:3c:74:ee:c7:94:06:11:
                    65:90:d3:03:1b:5b:a7:cc:77:c2:aa:8e:75:3a:cf:
                    bc:da:38:a5:13:bc:47:63:44:2f:78:e4:11:96:10:
                    21:6c:56:13:7f:e8:fa:aa:fd:48:40:bc:41:a4:58:
                    ab:09:c6:4d:6d:ef:ab:3e:de:13:c3:ea:9e:8e:21:
                    9f:98:a1:7d:db:2d:e9:fa:f2:06:ce:de:3a:bf:72:
                    1e:10:94:43:44:d0:8d:1e:13:f4:2b:46:2c:c5:78:
                    49:67:40:62:43:13:a4:db:50:a7:67:fe:26:da:fe:
                    ae:f8:f2:09:53:9a:5e:14:eb:29:9e:b8:fb:0a:ab:
                    4d:d7:3a:2d:46:86:4d:14:b4:30:dc:49:36:8e:62:
                    ea:3a:30:87:3e:aa:ac:57:ea:83:e4:2d:c1:d5:59:
                    22:59:c6:e4:f7:be:43:4b:c0:d5:39:78:20:33:4a:
                    77:e8:7e:0e:38:06:1a:03:8d:31:b7:09:3a:40:2f:
                    69:36:ee:86:db:8d:3a:d0:a7:d5:ff:fc:05:2c:1c:
                    33:09:05:5c:7f:26:02:f5:72:9b:c5:b5:79:75:20:
                    54:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:3F:8B:7D:C4:59:87:FA:9B:3B:1D:D5:AD:D3:FC:9D:FC:CD:1F:D1
            X509v3 Authority Key Identifier:
                keyid:BF:2E:EF:A7:C6:04:8E:6A:0A:5A:65:C0:7E:3E:25:53:41:E1:43:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/vy7vp8YEjmoKWmXAfj4lU0HhQ7s.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:e3:6e:50:4f:a2:28:35:0a:19:21:4b:b9:1d:ce:7c:7e:1f:
         dd:a1:37:19:9e:27:fb:d6:42:cb:bf:ca:55:83:ce:df:2a:b9:
         08:10:2a:09:b5:15:04:c6:07:89:a3:35:42:60:56:89:88:26:
         5d:af:7a:71:fb:5d:13:ef:d6:43:c1:dd:41:79:a9:3c:d2:aa:
         3f:59:81:1d:f0:df:5b:a5:01:7f:14:80:29:9a:4c:e0:cf:78:
         96:71:66:94:e3:a7:0b:a5:bb:5c:4a:2a:94:68:2c:03:2c:ad:
         60:87:10:c4:fe:3b:49:ab:1d:0a:6e:43:f6:06:b3:b8:68:4f:
         07:51:1f:92:ba:bd:8c:43:e4:99:3d:db:be:3b:99:bf:89:45:
         e4:d9:93:a1:9c:f5:70:58:64:04:9f:0d:17:e1:21:ca:fc:c3:
         c7:73:64:89:f8:05:e1:50:d8:8d:7d:20:ba:ea:1c:1d:a8:90:
         ac:b4:c0:1d:95:18:bd:27:77:80:c2:26:45:d3:92:79:c4:ed:
         e7:62:74:97:e3:86:8f:f5:d0:e5:2e:ba:c1:8b:db:61:87:20:
         d8:5e:db:fd:5b:a0:14:23:64:1a:68:69:04:3f:89:8a:79:de:
         67:14:ea:6e:7e:fd:c6:3b:2d:a0:a6:76:6d:dd:d5:ab:60:f0:
         b8:9f:2e:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:14:28 2026 by rpki-client