Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
File:                     vFbbeW3vDb20x48kRavswVcKb9k.mft (raw, json)
Hash identifier:          rxbQge6H7ps024uczaXaxaZeevHUORGUVzV1u1l7LLo=
Subject key identifier:   49:84:AE:46:C7:75:2D:7C:E2:65:50:4B:CA:BF:6D:E8:FA:6A:6F:E9
Authority key identifier: BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9
Certificate issuer:       /CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
Certificate serial:       019FAB6331C2B15C0F255C82138559EAC4C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 01:00:32 +0000
Manifest this update:     Wed 29 Jul 2026 01:00:32 +0000
Manifest next update:     Thu 30 Jul 2026 01:00:32 +0000
Files and hashes:         1: ZGekjXEzpu_RZ-7_vyg6Eo2ZkNk.roa (hash: g9zJSRkWxGZifxxDK0NFw2MI+0xI5nvgLjURj1IFEFw=)
                          2: vFbbeW3vDb20x48kRavswVcKb9k.crl (hash: a0k1Yzwy5PvYZH05QwhsUZR0z2kclzgwS6lSSPcy3Gg=)
                          3: xj3KIjGGQeE9p2z5xDtR4kdM838.roa (hash: KadOdd0YIetDxyuEeROWrqZ3UbDrY1vHEUtLjmlaM0E=)
                          4: z6bCwLojIPVuxbTXw72sR-aZPSQ.roa (hash: jarPN7oKXyiEaRbhLltezQTSG2nKsHFs4sdkmV5yFgk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:63:31:c2:b1:5c:0f:25:5c:82:13:85:59:ea:c4:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc56db796def0dbdb4c78f2445abecc1570a6fd9
        Validity
            Not Before: Jul 29 01:00:32 2026 GMT
            Not After : Jul 30 01:00:32 2026 GMT
        Subject: CN=4984ae46c7752d7ce265504bcabf6de8fa6a6fe9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:20:27:48:c1:5f:2b:66:84:70:be:fb:9a:07:
                    9e:c4:76:25:79:08:73:7c:47:66:3e:d9:48:f0:a5:
                    bc:2b:45:6a:8e:d5:dd:50:4c:83:d4:6d:4c:11:c6:
                    84:15:20:d2:d2:36:c3:5f:d7:84:b4:da:5e:9e:46:
                    4a:60:dc:2d:c1:d8:f5:d9:40:5e:8e:8d:3c:01:a4:
                    c8:2a:85:8a:e2:88:31:dd:99:ed:5a:75:8d:76:05:
                    e6:a3:1a:14:52:a0:24:ed:7e:dd:13:e0:e8:d0:67:
                    6d:49:8b:7e:2e:28:83:92:ca:7b:4d:4c:ea:9b:d8:
                    38:f2:92:e2:3f:8d:9b:cb:13:e5:7d:e8:c5:63:ad:
                    6d:9b:59:1e:89:35:eb:37:67:5d:1c:af:03:be:51:
                    36:66:a0:7c:e8:cd:23:7a:d4:fc:bd:9f:94:dd:3e:
                    81:46:9a:d2:23:c5:51:2c:92:74:ed:e9:49:e3:59:
                    04:12:aa:e2:51:8a:ad:c9:81:24:3f:1f:a7:f5:77:
                    8c:6d:6f:0b:89:a9:1d:ca:78:89:ab:fc:eb:55:cf:
                    2b:4c:68:4d:d7:92:67:59:3b:44:87:4d:39:af:0e:
                    ad:9d:cd:23:11:a0:41:50:de:0a:be:c0:5a:d1:a9:
                    17:7a:42:d3:af:58:57:3c:c9:9a:dd:c5:1f:51:62:
                    80:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:84:AE:46:C7:75:2D:7C:E2:65:50:4B:CA:BF:6D:E8:FA:6A:6F:E9
            X509v3 Authority Key Identifier:
                keyid:BC:56:DB:79:6D:EF:0D:BD:B4:C7:8F:24:45:AB:EC:C1:57:0A:6F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFbbeW3vDb20x48kRavswVcKb9k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/8b9bd9-3f62-4e30-8085-1ec721fa2a30/1/vFbbeW3vDb20x48kRavswVcKb9k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:bf:17:0c:50:06:eb:3f:36:be:c9:75:64:0a:07:7a:4f:14:
         fb:d6:34:8e:d5:8d:5d:c2:95:4f:b5:1b:df:06:dc:89:08:5a:
         a2:2c:89:b1:68:54:a9:d5:d9:9f:70:83:6f:9c:1d:18:ac:1e:
         b0:e9:49:62:b0:58:d1:8a:ce:e5:73:38:af:7e:2b:ee:dc:9b:
         13:41:60:b9:2f:2e:51:59:83:32:fc:cc:bd:cf:36:bb:6a:1a:
         4d:45:a6:61:24:0c:55:50:a6:52:c7:85:8a:e3:2a:ac:ba:7a:
         b8:51:07:8d:ee:76:e1:5a:e6:d9:28:5c:11:82:b9:79:d2:59:
         15:a2:f8:55:81:97:62:20:83:30:0f:cf:0c:67:0a:81:f6:61:
         3b:b7:49:9d:cf:0e:9f:66:46:c5:ea:66:82:1f:d2:76:49:59:
         a0:33:b2:e2:07:11:ce:e7:4d:4e:d1:09:cf:a4:66:6d:a3:6f:
         a5:8c:c7:d2:95:a8:4b:5c:12:d8:1d:8d:6d:6d:21:b4:b1:28:
         ec:75:d7:00:ca:ca:1e:b2:76:b0:07:a7:d3:de:71:c6:72:6a:
         8b:d5:d7:ac:ea:2b:29:73:1c:5e:81:50:ef:8f:e7:6e:11:7c:
         a1:af:e2:f7:44:ec:47:b0:4b:ae:a4:9d:52:8d:2b:51:d5:d2:
         38:f3:d5:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:48:35 2026 by rpki-client