Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
File:                     vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft (raw, json)
Hash identifier:          e2hRXe/XJLiDX4LFvz5hsyVnEQbuX2CvBc/7ylQe/1Y=
Subject key identifier:   0B:64:C2:F3:58:B9:04:1E:A8:85:9C:44:FB:18:3E:1E:44:2E:52:F7
Authority key identifier: BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98
Certificate issuer:       /CN=bc127864cd43048550ed1699c584b5c14d80e098
Certificate serial:       019FAC3ED779B3BBC7B257C4AF45D6F7C771
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
Manifest number:          0A50
Signing time:             Wed 29 Jul 2026 05:00:27 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:27 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:27 +0000
Files and hashes:         1: 2vPfx8Li_NUBxFIa1sHLuZQFAz4.roa (hash: 0dmBzMyhuyOWC20lzdsr5tWctKrKudD/LXfTno/MKsQ=)
                          2: vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl (hash: U3KWUn9zcgmqy1BLHlmJn0W7EZaFufimicSsUiuoOFg=)
                          3: xd89191APrZOUVHG3uZycN3SZ0g.roa (hash: IG6q5I2/G1oD/WZjTUVQ36euEC71avJGwrJIV9eTw8Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:d7:79:b3:bb:c7:b2:57:c4:af:45:d6:f7:c7:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc127864cd43048550ed1699c584b5c14d80e098
        Validity
            Not Before: Jul 29 05:00:27 2026 GMT
            Not After : Jul 30 05:00:27 2026 GMT
        Subject: CN=0b64c2f358b9041ea8859c44fb183e1e442e52f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:e7:f7:43:e4:b7:d8:c0:1a:67:97:49:14:
                    3c:bb:51:b1:97:c4:ad:69:b9:86:fd:b9:8f:1a:e0:
                    8f:74:b5:74:36:21:5e:b8:af:a7:26:6a:d3:b1:d5:
                    de:00:6c:49:c7:bc:55:da:98:88:f3:32:bf:59:1f:
                    a6:8b:98:77:9b:d2:1e:00:3b:88:a2:ac:1a:e2:84:
                    45:07:92:7d:97:7e:0e:51:06:e2:24:5c:dd:ea:af:
                    3e:30:ec:cd:16:83:51:3d:94:5d:9f:c5:a3:20:1d:
                    61:3a:41:5a:e1:06:fb:3f:37:b3:c7:5c:de:ee:7e:
                    d7:93:e1:72:de:91:8a:30:c2:e4:73:f0:6f:38:68:
                    cb:91:01:1e:e4:9a:04:df:a0:34:88:16:df:82:e4:
                    e1:94:b0:a9:fb:5f:3b:97:c8:a1:64:79:eb:7b:11:
                    21:07:50:5e:83:98:d6:d7:d2:11:c9:20:2e:ee:fb:
                    bb:bb:bd:9f:8f:f0:c0:f5:b8:05:65:1e:bb:0b:ae:
                    20:14:ec:ec:5c:a6:a4:7f:37:e0:70:c7:f6:92:c1:
                    c4:a1:c8:14:4a:b9:a7:e8:64:bd:fd:9c:7b:57:e7:
                    12:e2:35:15:98:c0:83:da:cd:26:0d:0b:bf:91:19:
                    10:3e:80:cf:88:6b:62:08:a0:56:b8:c0:35:d8:15:
                    c1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:64:C2:F3:58:B9:04:1E:A8:85:9C:44:FB:18:3E:1E:44:2E:52:F7
            X509v3 Authority Key Identifier:
                keyid:BC:12:78:64:CD:43:04:85:50:ED:16:99:C5:84:B5:C1:4D:80:E0:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/8a3bb5-9d95-4953-9388-031f407b3263/1/vBJ4ZM1DBIVQ7RaZxYS1wU2A4Jg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:eb:7a:11:6a:de:0b:f3:56:44:6b:c2:f8:b7:84:bc:97:17:
         dc:65:ae:7a:73:2b:df:63:ad:69:50:e3:a1:41:34:bd:c5:ed:
         38:26:7a:f3:1e:53:f5:ae:ee:09:f3:e7:26:a0:e6:5d:66:9b:
         a6:5e:b6:b8:6b:71:9c:13:f6:a9:63:ef:d9:9b:0b:46:8a:13:
         82:44:dd:85:73:7e:c4:90:3c:c0:b0:5f:7f:45:bf:2f:1b:01:
         47:28:92:a2:4b:21:72:38:e6:4a:6b:69:8d:fd:31:8f:63:4f:
         9c:3d:04:61:aa:8a:57:f6:28:7b:00:00:ce:a0:93:a2:85:03:
         33:af:c0:57:e7:be:1e:de:55:4d:f6:7c:c0:57:13:1e:57:e0:
         c4:94:d5:0d:d1:71:cc:af:26:78:88:4c:8d:ac:87:99:05:ae:
         79:18:28:2b:7e:b4:a9:1b:3f:c0:96:f8:f0:e3:27:42:c7:44:
         61:50:f9:c8:35:02:59:24:da:81:f7:64:5e:5f:08:61:77:d1:
         3b:7d:c3:29:2c:e0:5e:68:f6:71:25:6e:29:39:43:d5:c3:fc:
         2e:f5:ee:bb:6d:19:38:91:fb:ec:d1:d8:11:72:dc:d7:66:dc:
         f6:27:6b:a8:a5:14:b4:b4:a5:ac:ea:65:f2:cb:09:ca:2a:ea:
         d0:39:46:7c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+sPtd5s7vHslfEr0XW98dxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTI3ODY0Y2Q0MzA0ODU1MGVkMTY5OWM1ODRiNWMxNGQ4
MGUwOTgwHhcNMjYwNzI5MDUwMDI3WhcNMjYwNzMwMDUwMDI3WjAzMTEwLwYDVQQD
EygwYjY0YzJmMzU4YjkwNDFlYTg4NTljNDRmYjE4M2UxZTQ0MmU1MmY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cvn90Pkt9jAGmeXSRQ8u1Gxl8St
abmG/bmPGuCPdLV0NiFeuK+nJmrTsdXeAGxJx7xV2piI8zK/WR+mi5h3m9IeADuI
oqwa4oRFB5J9l34OUQbiJFzd6q8+MOzNFoNRPZRdn8WjIB1hOkFa4Qb7Pzezx1ze
7n7Xk+Fy3pGKMMLkc/BvOGjLkQEe5JoE36A0iBbfguThlLCp+187l8ihZHnrexEh
B1Beg5jW19IRySAu7vu7u72fj/DA9bgFZR67C64gFOzsXKakfzfgcMf2ksHEocgU
Srmn6GS9/Zx7V+cS4jUVmMCD2s0mDQu/kRkQPoDPiGtiCKBWuMA12BXBGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtkwvNYuQQeqIWcRPsYPh5ELlL3MB8GA1UdIwQY
MBaAFLwSeGTNQwSFUO0WmcWEtcFNgOCYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgt
MDMxZjQwN2IzMjYzLzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC84YTNiYjUtOWQ5NS00OTUzLTkzODgtMDMxZjQwN2IzMjYz
LzEvdkJKNFpNMURCSVZRN1JhWnhZUzF3VTJBNEpnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMet6EWre
C/NWRGvC+LeEvJcX3GWuenMr32OtaVDjoUE0vcXtOCZ68x5T9a7uCfPnJqDmXWab
pl62uGtxnBP2qWPv2ZsLRooTgkTdhXN+xJA8wLBff0W/LxsBRyiSokshcjjmSmtp
jf0xj2NPnD0EYaqKV/YoewAAzqCTooUDM6/AV+e+Ht5VTfZ8wFcTHlfgxJTVDdFx
zK8meIhMjayHmQWueRgoK360qRs/wJb48OMnQsdEYVD5yDUCWSTagfdkXl8IYXfR
O33DKSzgXmj2cSVuKTlD1cP8LvXuu20ZOJH77NHYEXLc12bc9idrqKUUtLSlrOpl
8ssJyirq0DlGfA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 06:48:05 2026 by rpki-client