Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File:                     vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier:          0ntkwezXPFzZQGVktR49Uk5jU1m7Izc4MfmODV9F/c0=
Subject key identifier:   CF:53:B0:51:B6:44:F9:FD:12:EF:95:18:51:67:64:35:1B:20:50:3A
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       01A0BFC311F58E8516FF4CC1253D4939BD5B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number:          065E
Signing time:             Sun 20 Sep 2026 17:00:27 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:27 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:27 +0000
Files and hashes:         1: j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (hash: U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=)
                          2: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: rUVcj2FpLzQfi213GWa4Eqxaj0Cba8Ww5RLkbbD3ZhU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c3:11:f5:8e:85:16:ff:4c:c1:25:3d:49:39:bd:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Sep 20 17:00:27 2026 GMT
            Not After : Sep 21 17:00:27 2026 GMT
        Subject: CN=cf53b051b644f9fd12ef9518516764351b20503a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ab:6b:81:4e:fd:16:df:31:ef:23:a9:04:c1:
                    31:ce:01:e7:b2:0a:22:27:5d:68:65:75:f3:7d:f0:
                    08:38:3c:4d:59:a5:08:4c:12:73:8e:65:24:1f:31:
                    49:1d:f6:7f:d7:b2:a3:d5:be:2b:39:0c:c4:b3:eb:
                    72:8e:8e:08:0e:5a:2a:c7:f8:e3:9f:60:b6:f9:9d:
                    bf:54:a5:54:cf:b9:ba:d7:44:6f:a1:4a:2c:96:71:
                    95:61:ae:77:a8:b0:02:52:5b:f3:d3:7a:ac:20:f7:
                    2e:5c:d6:39:29:7c:fb:64:93:65:da:9a:51:ac:73:
                    6b:d8:06:1c:dc:d5:ef:09:b8:4d:5a:1a:67:4b:da:
                    b4:2e:6b:c0:92:83:da:31:2e:10:21:47:30:d9:74:
                    88:ed:05:d9:9f:81:0d:11:75:f7:6b:87:dc:99:db:
                    f7:1c:22:c1:e7:5f:7c:40:41:a5:5d:1e:e9:17:1e:
                    c5:6c:0c:20:19:bf:59:c0:32:a1:d1:5d:95:24:b3:
                    ee:c3:cb:0e:41:61:85:4d:0f:70:e2:fe:4f:c4:be:
                    59:ee:a1:c0:2b:55:f1:b5:17:e8:cb:b0:b2:04:39:
                    fe:48:10:a3:b0:98:c9:d1:89:a8:83:6e:d9:2a:74:
                    12:25:e9:38:70:81:5a:87:52:29:64:38:23:27:bf:
                    26:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:53:B0:51:B6:44:F9:FD:12:EF:95:18:51:67:64:35:1B:20:50:3A
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:1d:b2:61:40:f0:3a:e4:44:f8:dc:e3:c3:7d:5d:85:4e:94:
         99:ff:66:d7:95:2a:fd:7b:c9:a4:e8:76:7d:dc:3c:2d:99:c3:
         1e:03:0a:66:6f:41:bc:e5:b1:ea:b4:a5:38:ad:9f:ed:18:09:
         fa:f8:a9:84:ac:4b:a9:7c:f0:f0:65:cb:30:e9:33:aa:1e:87:
         19:20:c1:47:14:10:16:a2:62:cb:33:f5:a9:21:e1:9d:31:35:
         ed:67:f6:e6:e2:bf:01:4a:72:27:54:25:3f:be:e3:3f:d0:71:
         3d:9d:91:f5:3f:d6:c0:b1:44:ff:dc:c3:46:83:66:4e:c0:4e:
         e8:7f:3f:94:ae:7c:af:26:1c:98:88:52:0f:6b:89:be:48:31:
         b4:fe:31:9a:76:cc:00:15:23:9b:ef:a2:be:95:e5:d1:9e:84:
         80:0e:10:2c:17:4c:51:1a:71:85:1b:97:2c:fd:36:76:94:6e:
         fb:fe:10:6e:bd:28:03:2c:3b:77:7b:14:5a:83:f1:8f:18:d8:
         6f:3a:0d:71:c6:d0:5e:c7:40:18:d5:f6:08:77:c3:b3:f0:da:
         7c:7e:f1:55:f1:d7:99:c9:ae:f8:d8:ca:b7:19:8b:cb:07:60:
         38:cb:3f:68:c4:b4:e5:3f:6f:a8:c8:8a:a5:dd:68:07:db:95:
         d0:34:41:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:36:04 2026 by rpki-client