Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File:                     vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier:          bjrW078WOuDS66VD0/WaVIgRnDI5C+u3n6xh+0Q6Ulc=
Subject key identifier:   8D:91:46:74:4A:82:A6:12:53:68:BF:E3:FC:D4:87:C3:A1:82:F4:14
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer:       /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial:       01A0CC3579AA1506B89FC69C251E9654E101
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number:          1877
Signing time:             Wed 23 Sep 2026 03:00:51 +0000
Manifest this update:     Wed 23 Sep 2026 03:00:51 +0000
Manifest next update:     Thu 24 Sep 2026 03:00:51 +0000
Files and hashes:         1: PYuODH0zBuvAiK-JKuXaExSuhvY.roa (hash: j4fDEw0K8kYxrAUmB58fcgklFQjA7X3SeZOjGCv6B9g=)
                          2: r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa (hash: q8BWxYBDwimUfBX5rZs0mS3SnxWzlL9k3GvkEkEzIbs=)
                          3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: EcPYTYJa36xA2Ca0D9VhbOlCEzH0wsKRj0Xul269nfs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cc:35:79:aa:15:06:b8:9f:c6:9c:25:1e:96:54:e1:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
        Validity
            Not Before: Sep 23 03:00:51 2026 GMT
            Not After : Sep 24 03:00:51 2026 GMT
        Subject: CN=8d9146744a82a6125368bfe3fcd487c3a182f414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:85:a0:86:3c:f6:f6:bd:3c:28:10:8b:7e:7a:
                    41:40:c4:ef:96:2e:ba:89:ef:e5:1a:3a:18:2b:35:
                    63:fb:cf:bf:82:9a:43:8e:5e:c9:58:9a:16:7c:55:
                    38:df:9e:40:26:22:a6:b9:0d:de:56:b9:b7:81:0e:
                    dc:78:7a:e5:c4:4e:3e:6d:3c:2b:ac:85:6e:bd:c7:
                    13:31:77:0e:77:69:bf:ff:6f:f2:79:64:f4:7b:d4:
                    27:0f:ad:4f:81:29:82:bb:a8:19:0c:37:59:d6:76:
                    58:de:ec:b0:f1:60:d9:4b:84:66:88:97:99:08:be:
                    6b:c8:88:4b:fe:3c:6e:68:3d:de:a2:e9:ea:b7:97:
                    fb:db:6f:d4:4d:e2:d3:44:40:ae:0a:1f:71:10:95:
                    7e:e6:56:bb:fd:d8:05:76:ae:57:79:d2:6b:bd:78:
                    f5:30:ba:c7:87:49:9a:4d:a8:f2:48:47:cc:6d:5d:
                    55:bb:91:97:b7:26:f2:d3:13:4e:ea:47:81:f4:2c:
                    bc:fa:9e:b8:57:87:83:70:2b:cd:58:73:77:8d:38:
                    20:69:f1:1c:d3:b3:eb:35:0e:95:88:87:2d:2c:a9:
                    eb:6b:c0:32:01:96:6e:ac:cd:25:b0:2d:4d:11:24:
                    af:e4:95:ac:e0:8a:ca:82:00:4c:9b:2d:05:cc:da:
                    15:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:91:46:74:4A:82:A6:12:53:68:BF:E3:FC:D4:87:C3:A1:82:F4:14
            X509v3 Authority Key Identifier:
                keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e6:bd:f8:c7:06:ae:88:1b:b0:b1:86:64:98:6f:72:b9:3f:
         00:73:12:e7:ed:8b:bc:4b:d6:f9:8a:18:bd:e1:fe:fe:6c:c6:
         7a:af:19:e0:0f:8c:d8:a4:8b:e8:c3:d7:db:52:71:5f:28:af:
         f3:6e:1c:f1:8e:c6:0d:56:89:1c:8f:43:d7:1e:86:2d:22:10:
         b8:2b:c8:d8:4f:cf:c5:25:3b:f0:aa:64:27:1f:f4:fc:12:ec:
         b5:5c:1f:50:f4:3d:38:a7:e0:c0:66:ac:02:aa:52:ae:d3:05:
         4a:ad:13:0c:22:c5:7c:52:5a:72:07:ba:4f:d0:cb:87:6e:20:
         c4:eb:11:87:36:b5:e4:ed:6b:a8:4c:60:a4:12:05:1d:26:28:
         8d:9d:59:7c:4b:2a:9c:03:1c:59:ac:e7:39:5a:77:80:7a:c7:
         28:b8:6a:64:11:c7:70:26:3f:76:1e:04:8e:b1:0b:b4:44:bf:
         7a:f0:d9:fc:7a:76:95:ab:89:ec:8c:2c:32:05:df:14:4e:4f:
         c6:f4:a8:6f:2b:60:8c:4d:15:eb:9d:1d:99:61:73:c9:77:c2:
         1a:15:65:ce:3d:f6:28:ad:f6:b6:94:de:28:37:d6:63:65:ad:
         0e:3f:8d:eb:2f:0f:a6:31:2a:e2:c7:07:12:79:3b:bf:f3:b9:
         0b:b8:fe:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 08:06:55 2026 by rpki-client