Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
File:                     vl_ipkltKkOapPeyHWmWu_u_CzU.mft (raw, json)
Hash identifier:          icI0SCZhvMMn1nwiN/6g90woa34tHxu8KIbTRKYi2ps=
Subject key identifier:   7A:AF:CF:6B:EA:A1:BC:E1:42:D6:43:F1:6B:ED:F6:E6:BB:67:E8:A2
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Certificate issuer:       /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial:       01A0DC4D71BCB8B2B6A69FD6ED73FA764927
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
Manifest number:          EE
Signing time:             Sat 26 Sep 2026 06:00:57 +0000
Manifest this update:     Sat 26 Sep 2026 06:00:57 +0000
Manifest next update:     Sun 27 Sep 2026 06:00:57 +0000
Files and hashes:         1: 1GIHSznDsxXrw3jKQkIzicOXuk0.roa (hash: 9Pl5E1KhSoDAyA5hgG5eNFyWYdKksOI+dFWiKoJazjY=)
                          2: NpS_oD6fm-O5UOaMpkZigJh2nTc.roa (hash: qIFJnleVwqTPPwrUhkvyWblZMC0jHP9X/BrE9rsE/eA=)
                          3: bcljfazgeEM-f4h7Gdy40mNg7JE.roa (hash: FNnWgsOBtX934LwXU89et8KvVLloyc53/NmDw9dHK28=)
                          4: v4bpHyawzRWnm8RqdJExgbPJfr0.roa (hash: sC7/VOkCbRGWzAVmIlTymUCvG6bGOihVG6LZ6ZpxHR4=)
                          5: vl_ipkltKkOapPeyHWmWu_u_CzU.crl (hash: v0b2B4RM4S3yMwDXV5L5a9oJ/Z/9YzGEPDcbSShtYQA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:4d:71:bc:b8:b2:b6:a6:9f:d6:ed:73:fa:76:49:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
        Validity
            Not Before: Sep 26 06:00:57 2026 GMT
            Not After : Sep 27 06:00:57 2026 GMT
        Subject: CN=7aafcf6beaa1bce142d643f16bedf6e6bb67e8a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:1a:c3:a6:88:d5:90:56:b2:bb:a8:26:11:72:
                    99:80:e0:44:8c:58:56:cb:ee:6c:d7:20:60:a3:7b:
                    a4:2c:08:f2:cb:43:c3:9c:fe:b5:88:a8:d0:4a:87:
                    89:38:79:ef:87:26:93:a5:25:ef:41:05:5b:b5:a7:
                    c8:31:79:a6:71:f0:12:0a:f3:db:90:a5:ca:05:9a:
                    69:16:7d:f3:c8:55:5a:ff:69:5c:35:40:7e:c5:a6:
                    7e:af:db:8d:4b:c2:38:e9:a3:e0:6f:54:e3:51:74:
                    dd:7a:69:58:65:9f:f8:9e:99:69:38:54:e5:52:fa:
                    8a:b0:89:b6:f5:6a:98:c9:f8:3b:65:99:f4:1f:d6:
                    16:84:3f:e4:ac:a9:ac:b5:61:bd:ee:f4:c3:51:9a:
                    12:5f:c9:d0:69:cd:9d:9b:16:c5:70:4a:27:b7:7b:
                    a2:35:5d:97:64:60:db:cb:6d:0c:fb:41:7c:a6:72:
                    f6:75:84:b3:11:3c:9f:a9:e5:01:4f:c1:19:38:73:
                    87:79:41:ba:e1:22:42:d1:89:9b:d4:29:84:58:b2:
                    5f:19:b0:cb:23:16:c6:77:2f:af:77:76:61:53:cd:
                    ef:33:08:19:8c:c6:63:91:8c:58:65:5c:62:08:85:
                    d6:38:8e:d6:50:14:0d:a8:d0:a1:16:ff:b6:e3:74:
                    89:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:AF:CF:6B:EA:A1:BC:E1:42:D6:43:F1:6B:ED:F6:E6:BB:67:E8:A2
            X509v3 Authority Key Identifier:
                keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:b0:74:39:4f:7a:00:1d:4e:5b:6f:37:a9:74:fe:48:8d:d8:
         47:7c:93:ee:ae:7a:f1:87:41:b3:01:85:58:0c:55:9e:65:4b:
         a2:d7:c3:e7:15:1a:b8:36:a3:4e:b0:de:d0:ad:86:d0:ea:a0:
         ae:f0:bf:99:e6:93:4e:e8:43:28:74:de:0e:a5:6c:fa:a6:68:
         a0:36:3c:ba:be:95:37:2a:16:86:29:2e:08:fb:38:81:e1:1d:
         44:b2:59:58:75:53:7d:c2:f8:89:72:5f:e1:48:67:63:5a:23:
         5c:3f:c6:11:b0:4f:ed:52:4b:ae:ba:09:5f:1c:c7:a8:9b:f0:
         a1:5d:ed:9a:ed:ec:5f:da:24:b2:d6:85:f5:8f:0b:7b:02:6f:
         95:cc:d3:5d:57:73:e4:d5:fd:25:cf:2d:ba:62:79:97:f1:78:
         fb:a9:74:85:dd:bd:65:13:2d:f7:d0:ba:17:d8:68:9f:31:5b:
         1e:e4:8e:eb:c6:cc:a0:f3:f0:76:fa:da:5b:26:a5:07:c4:b8:
         e3:3b:f1:a4:b5:33:71:88:5a:f3:60:89:a1:f6:49:44:14:be:
         86:2e:e0:51:9b:99:ff:ca:38:8b:90:bd:69:83:a1:e5:ba:93:
         19:5d:11:c9:95:16:c1:6a:32:b4:46:27:d7:84:c5:06:ef:02:
         52:73:6e:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 11:06:21 2026 by rpki-client