Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
File:                     vVxqtrwgalTEq7N0FYWMstU9NJ4.mft (raw, json)
Hash identifier:          ZLf5SQ/TW86ORcl+4yqDj4Uz1e7gmZCPo/Sbj4n2O9g=
Subject key identifier:   6E:4D:0E:7F:C4:FB:63:D4:84:0D:90:6C:22:29:1A:56:0B:7E:7C:35
Authority key identifier: BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E
Certificate issuer:       /CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
Certificate serial:       01A0D502AB0E21221DFC85A644124D9CFA6A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
Manifest number:          0332
Signing time:             Thu 24 Sep 2026 20:01:56 +0000
Manifest this update:     Thu 24 Sep 2026 20:01:56 +0000
Manifest next update:     Fri 25 Sep 2026 20:01:56 +0000
Files and hashes:         1: HVqsO0SEaw9-mt8SnzIkfdy49ec.roa (hash: dW2BrZognOp9PSojHUwspZ6qNfssSUD6yjA//f4n5ro=)
                          2: vVxqtrwgalTEq7N0FYWMstU9NJ4.crl (hash: lpPj0ve9nlJRWQjyo65iKb5nqy5EdctPy7VYD9ySnLQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 20:01:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:02:ab:0e:21:22:1d:fc:85:a6:44:12:4d:9c:fa:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd5c6ab6bc206a54c4abb37415858cb2d53d349e
        Validity
            Not Before: Sep 24 20:01:56 2026 GMT
            Not After : Sep 25 20:01:56 2026 GMT
        Subject: CN=6e4d0e7fc4fb63d4840d906c22291a560b7e7c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ef:72:3f:52:20:81:3c:36:77:bf:dc:8b:93:
                    48:15:61:0b:d3:30:c2:be:3e:ba:7b:9d:08:5a:98:
                    38:55:06:01:84:5d:80:14:e5:51:14:fb:0c:c0:5d:
                    64:94:69:dd:65:1a:d6:d9:e8:ad:0f:09:b0:34:79:
                    25:2b:be:b1:67:bb:5c:c2:f6:86:17:9b:ba:24:5e:
                    a9:bb:ce:10:7f:13:79:3c:34:f9:aa:c5:c7:50:c9:
                    f0:12:39:70:e0:ae:c0:4a:85:fe:6d:d8:40:2f:9d:
                    c5:9b:4e:31:44:d4:82:03:e2:01:a9:2e:86:2d:55:
                    f7:0d:5f:2d:6e:a6:fd:44:3c:0d:87:e6:7d:df:e2:
                    f6:ed:a6:69:5e:be:2d:8e:db:46:88:0b:2c:93:b0:
                    e7:f8:e3:08:36:75:60:1f:ce:bd:17:56:84:94:12:
                    4e:72:62:9e:43:4d:dc:c2:77:da:e1:87:48:be:0a:
                    d8:81:9d:78:f4:a3:0a:5d:a7:3b:f2:66:61:31:19:
                    0c:c9:28:5b:d5:5d:cd:6d:15:ed:fd:95:e7:55:bb:
                    83:d5:d2:22:b2:67:e7:1c:1e:d1:69:14:a0:12:fa:
                    60:d3:6e:ec:0b:ce:af:e0:a1:8e:01:1c:a9:8d:37:
                    20:12:19:82:4b:9c:92:c4:62:e6:33:31:be:7a:55:
                    c5:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4D:0E:7F:C4:FB:63:D4:84:0D:90:6C:22:29:1A:56:0B:7E:7C:35
            X509v3 Authority Key Identifier:
                keyid:BD:5C:6A:B6:BC:20:6A:54:C4:AB:B3:74:15:85:8C:B2:D5:3D:34:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVxqtrwgalTEq7N0FYWMstU9NJ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/12f4e6-af1d-4ef1-b7ad-42323b2009e3/1/vVxqtrwgalTEq7N0FYWMstU9NJ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:4b:de:fd:e6:2b:16:f6:52:24:88:a2:f1:1e:d9:e9:64:ed:
         8c:1a:46:b9:de:46:81:23:6b:82:d2:47:26:0b:69:48:47:05:
         64:bc:0d:8a:a0:c7:01:3b:e9:63:d8:bf:c4:6b:0c:a7:4e:97:
         9d:1d:57:e4:09:1d:42:ba:81:9b:2c:74:8b:01:58:94:ec:89:
         2b:3c:ce:20:22:fe:c8:1b:5c:4e:c9:a1:4f:35:67:0c:e7:4e:
         05:45:0e:e4:c2:14:cb:2c:95:9d:86:f1:22:32:5e:be:7f:67:
         90:b2:1e:a0:1f:4a:d1:93:e0:01:14:2d:31:20:2d:d5:96:8a:
         74:e3:23:c0:3d:42:84:d0:8f:b7:15:3c:f3:ad:4b:3e:67:65:
         99:c3:00:50:b1:52:53:74:3a:0b:20:6c:4a:e0:48:86:ab:35:
         ef:d3:30:0d:fb:5f:fd:23:c6:2f:9f:75:b6:f8:e4:45:b3:07:
         d2:6a:38:1e:a4:c7:5e:bd:a4:aa:5e:ba:86:04:6c:d5:e1:8c:
         fb:1e:09:76:7b:93:16:79:3e:00:5f:ee:39:53:57:d5:84:58:
         d7:9a:10:89:93:51:d9:10:39:3b:d2:63:0c:64:24:81:71:5b:
         ad:7b:3a:2f:c4:eb:b3:8a:1e:5c:90:4e:ad:bc:05:52:45:bf:
         db:7c:56:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:36:46 2026 by rpki-client