Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File:                     VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier:          P6lOQPmG5Vz2lJ+jLZw1UVIeIIQf+aHoD4Zjy12XE4o=
Subject key identifier:   AB:B9:FA:69:D8:5A:AA:48:BC:7C:10:9E:9B:95:8A:36:60:06:B7:8F
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer:       /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial:       01A132591BAA942B666133710C5CF57FE7B3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number:          09C2
Signing time:             Mon 12 Oct 2026 23:01:02 +0000
Manifest this update:     Mon 12 Oct 2026 23:01:02 +0000
Manifest next update:     Tue 13 Oct 2026 23:01:02 +0000
Files and hashes:         1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: KN0LkavnBLVlPs9s1JCieZlg+fn5sXiwl37BwqIcraU=)
                          2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 21:54:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:32:59:1b:aa:94:2b:66:61:33:71:0c:5c:f5:7f:e7:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
        Validity
            Not Before: Oct 12 23:01:02 2026 GMT
            Not After : Oct 13 23:01:02 2026 GMT
        Subject: CN=abb9fa69d85aaa48bc7c109e9b958a366006b78f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:9b:1d:6e:6c:a7:95:95:ca:25:73:c6:5b:
                    71:5a:c3:e4:02:54:a8:60:68:59:cb:03:ef:c2:c6:
                    6c:98:d3:8e:94:9f:db:e8:41:b3:d0:49:86:47:33:
                    dd:06:c9:64:ac:90:82:8e:01:59:29:69:ab:be:64:
                    91:77:6f:d9:f7:ae:59:14:5e:67:0b:c5:b7:3f:b8:
                    25:08:3c:9f:0f:99:96:6b:1f:8b:55:e9:fc:0d:a4:
                    5f:aa:a0:ca:1d:37:2e:fe:b1:3b:8a:99:2d:c2:a8:
                    46:32:1d:e8:87:77:8b:88:69:f8:06:d2:c2:67:b9:
                    cf:87:85:47:3a:6b:43:46:a4:2f:9e:a7:00:5d:90:
                    92:64:da:fa:1a:d6:90:02:85:7e:e2:76:7f:35:10:
                    8a:bd:af:b9:cf:35:2d:7a:82:a9:cf:94:0c:b4:88:
                    9e:23:a4:ba:87:75:dd:a4:b8:5b:4d:e5:ea:ee:c3:
                    16:5b:b8:e2:f8:51:f2:19:14:87:30:80:c7:e5:1b:
                    68:3d:e5:a7:af:cc:78:05:03:d8:56:1f:41:80:4b:
                    7d:d2:c3:80:4a:01:62:72:21:3f:3d:51:73:2e:bd:
                    92:24:b4:08:64:3f:23:91:cc:2c:60:0e:fb:0a:1d:
                    2e:54:9b:d4:ec:aa:44:48:19:94:81:a8:16:4b:79:
                    26:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:B9:FA:69:D8:5A:AA:48:BC:7C:10:9E:9B:95:8A:36:60:06:B7:8F
            X509v3 Authority Key Identifier:
                keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:94:14:86:8d:e0:de:00:78:0c:bc:09:73:73:09:63:9d:bd:
         74:a3:05:b9:a2:33:ec:5a:7c:ec:22:e4:8b:8b:20:73:f4:20:
         c8:20:ab:7d:8c:9e:1a:93:92:31:21:fa:86:3c:fb:7b:6b:5a:
         a3:8f:c1:8b:6c:87:a1:de:9a:07:49:c2:30:06:62:77:90:3b:
         e2:f0:68:d3:5a:7a:96:02:1f:c9:bf:19:c1:5d:76:1e:99:6f:
         3a:15:c1:b9:79:b0:88:87:98:d4:13:a4:4e:c8:a6:37:a5:87:
         e7:da:24:76:87:26:66:ce:3e:d7:65:4a:44:9b:33:89:40:ab:
         9d:1d:59:dd:cd:3a:1d:18:6c:00:c5:dc:57:1d:8d:79:57:ef:
         06:ab:5d:7e:a0:a5:6e:9e:97:63:dc:01:26:45:67:2b:95:7c:
         04:ea:9a:97:3f:dd:ea:33:6b:af:75:6d:d4:eb:d3:58:b2:78:
         a8:f8:3c:86:bf:51:58:74:2e:54:d0:a5:da:89:c1:5a:92:74:
         3d:da:6d:11:75:00:61:ed:54:98:06:da:7e:f5:5e:28:59:13:
         46:26:d0:63:b3:84:f5:cd:08:e1:c3:11:ea:fa:a7:34:de:11:
         ba:b6:f6:0b:1e:b1:fe:cb:9b:f6:76:79:d8:c7:40:51:1a:ee:
         a1:55:85:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:32:58 2026 by rpki-client