Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File:                     VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier:          fo33sM8AFzXCQ4rxwdViGRRwSUPCpn626pNzCSmcQEk=
Subject key identifier:   8E:34:45:F6:D9:0F:A7:58:0F:87:A8:C2:EA:C9:1A:B7:90:08:05:AA
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer:       /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial:       01A0D6B99538867F5B85C9A4BB1D2EE28F75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number:          0702
Signing time:             Fri 25 Sep 2026 04:01:21 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:21 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:21 +0000
Files and hashes:         1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: 81523+yT2yPf+HLihuNx9VnkIauUwbAxQ+/m3ISB3OA=)
                          2: Yuo4raHbuV1AupPWdNm1jMw95T8.roa (hash: lmnKCE9fJdmr7z73updpBxSnhRCLKa9yvUVY95GYbw8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:95:38:86:7f:5b:85:c9:a4:bb:1d:2e:e2:8f:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
        Validity
            Not Before: Sep 25 04:01:21 2026 GMT
            Not After : Sep 26 04:01:21 2026 GMT
        Subject: CN=8e3445f6d90fa7580f87a8c2eac91ab7900805aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:5e:5e:fb:74:8e:36:34:97:a9:c5:f8:41:be:
                    b4:95:ce:9a:65:c0:4c:76:25:cd:fe:7b:ff:39:d4:
                    1e:7e:ed:3d:54:62:43:ae:a2:95:20:82:22:4b:69:
                    09:b7:3a:5f:59:eb:f8:8d:a2:7f:57:65:88:79:60:
                    18:9d:bd:1c:cf:27:38:e4:a8:4c:d4:e6:78:1e:73:
                    ff:3b:3e:5e:ed:b5:52:74:7f:ab:79:0d:b4:17:33:
                    4a:ee:25:32:e1:0d:24:5e:ee:d9:11:20:c6:e3:1a:
                    39:d1:0a:b5:6d:1e:fb:e7:99:ae:26:8d:3b:55:56:
                    44:dd:f7:0f:e7:69:d2:b8:9e:a3:de:49:73:32:87:
                    fb:c6:e7:33:11:25:84:81:0a:41:26:d9:9f:83:60:
                    35:26:3d:d5:f4:c0:4c:be:48:87:a9:14:a3:f4:ae:
                    f8:ed:68:e7:8f:1f:5c:fc:28:8a:06:e5:78:1b:a6:
                    a9:26:ea:e5:67:ec:85:ae:4a:6b:7a:0e:7a:19:f5:
                    54:e1:4a:2d:2e:f0:66:b4:af:df:21:bc:63:e7:17:
                    3e:99:78:c7:53:14:2b:a2:74:bc:0a:cf:e8:ce:bf:
                    88:1d:90:23:75:97:44:cf:56:fe:f4:be:65:33:a9:
                    60:a0:b4:ca:1f:35:10:3f:10:48:c9:f9:df:48:45:
                    85:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:34:45:F6:D9:0F:A7:58:0F:87:A8:C2:EA:C9:1A:B7:90:08:05:AA
            X509v3 Authority Key Identifier:
                keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:f4:d5:12:7a:c7:e4:7b:0e:65:8d:85:bb:dd:4a:2c:f0:51:
         cc:6e:32:ba:be:7b:f5:83:56:42:77:0a:6b:ff:15:5d:73:92:
         e3:b6:29:3b:83:5d:1c:63:39:b1:8e:0f:d9:ab:5b:8e:7d:fe:
         99:bf:de:07:9c:f0:64:a1:e2:24:4a:c8:94:c2:9f:e6:66:3d:
         0a:bf:21:e5:7c:6b:ba:ba:8c:df:9f:2e:6f:86:1f:30:f3:a7:
         f4:99:da:ad:0b:50:7c:49:4e:6d:a8:f5:eb:cc:ad:c1:dc:b2:
         76:99:27:c4:e0:cc:f3:50:79:3e:5b:04:eb:c9:97:fe:bc:69:
         70:01:fd:2a:16:62:b0:29:04:8a:06:e0:17:6c:e8:87:fa:8b:
         3f:8d:f7:66:d2:52:bb:5f:04:8d:dd:40:dd:b7:7b:95:e5:55:
         d4:c2:87:d8:df:8f:bb:c7:6c:77:12:3a:9c:d7:4d:a9:7a:ba:
         77:8c:af:bb:a9:63:30:b3:34:cc:a4:c8:4a:98:a9:09:45:43:
         5b:19:a3:53:6b:65:ac:4e:d5:41:26:6c:df:c2:17:b4:db:39:
         33:76:06:cf:d8:b7:b6:ae:7d:fa:28:fd:cb:70:a5:4d:31:a7:
         6c:b3:54:5e:76:c8:97:12:fd:dc:b9:e7:a7:f2:c0:59:59:a8:
         c0:04:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:43:40 2026 by rpki-client