Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.mft
File:                     5hQ8MwjtE07xZwHJBX3J49B_Vqs.mft (raw, json)
Hash identifier:          MbBTmOkHdlC6lWKwdcSJH5J6VOL0CnLi1fpAhsZpJ20=
Subject key identifier:   18:06:74:A0:F8:DC:CF:F8:00:5D:54:9C:A4:88:6A:1D:FD:4B:21:32
Authority key identifier: E6:14:3C:33:08:ED:13:4E:F1:67:01:C9:05:7D:C9:E3:D0:7F:56:AB
Certificate issuer:       /CN=e6143c3308ed134ef16701c9057dc9e3d07f56ab
Certificate serial:       01A0BDD4C979A832C16B4110C99381E9AF72
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/5hQ8MwjtE07xZwHJBX3J49B_Vqs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.mft
Manifest number:          0120
Signing time:             Sun 20 Sep 2026 08:00:33 +0000
Manifest this update:     Sun 20 Sep 2026 08:00:33 +0000
Manifest next update:     Mon 21 Sep 2026 08:00:33 +0000
Files and hashes:         1: 5hQ8MwjtE07xZwHJBX3J49B_Vqs.crl (hash: q/sI1Lv/AwAgibu1y3plJ4NsiGGNYXVegIytJLMQ/Tk=)
                          2: ZV_Bi68mHok_O16u73hg9_unbe4.roa (hash: pKZE1Xox+v3hSObod0mFA3GCqvyH07tUN5ZBH647nOs=)
                          3: oBWl8J3KxawgKyujZzXVc6InZTE.asa (hash: yYSRuG7gJB8Y/VPC6CZyk2QAWu+KQZrRNOJwOyX9BmI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/5hQ8MwjtE07xZwHJBX3J49B_Vqs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:d4:c9:79:a8:32:c1:6b:41:10:c9:93:81:e9:af:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e6143c3308ed134ef16701c9057dc9e3d07f56ab
        Validity
            Not Before: Sep 20 08:00:33 2026 GMT
            Not After : Sep 21 08:00:33 2026 GMT
        Subject: CN=180674a0f8dccff8005d549ca4886a1dfd4b2132
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7b:b8:66:28:97:f3:b0:68:97:f0:4d:ab:2b:
                    68:70:04:8c:ff:9e:d3:2e:f3:eb:37:ad:5c:a7:bf:
                    f9:58:4e:58:fa:ff:b1:69:95:65:ac:4b:65:42:92:
                    5f:17:1e:9e:70:a0:87:f1:3f:3b:b4:39:66:02:ec:
                    43:3e:bb:fd:17:23:58:02:9d:57:8f:0c:f6:d6:18:
                    2d:0b:84:7f:77:ed:cc:8b:db:ee:03:92:bf:af:44:
                    85:6e:8b:78:b8:1e:a4:a5:cc:72:42:5f:60:f7:b5:
                    89:ab:c4:98:03:6c:d2:e4:e6:71:4d:96:f3:e0:40:
                    02:92:77:36:3e:21:ee:67:22:04:2c:59:32:99:c1:
                    44:1f:72:11:7e:8f:14:f1:a3:47:14:f6:14:38:36:
                    56:fb:e7:83:70:6c:aa:33:a9:1d:af:3c:c4:e4:bb:
                    3e:32:14:16:f4:ec:ff:25:a3:4b:95:fe:f4:d2:c1:
                    f5:53:01:44:00:3f:43:40:84:cb:51:18:0b:4b:15:
                    85:a4:f8:b7:95:a3:92:b8:63:20:f0:64:e2:2f:70:
                    8e:59:fd:26:77:ad:d0:20:61:89:f3:bf:15:3f:07:
                    b2:e5:aa:a8:47:b3:49:d5:ef:c3:a2:b0:63:7d:9d:
                    4d:e1:4e:05:db:8f:91:28:85:ea:d0:94:ca:57:ed:
                    93:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:06:74:A0:F8:DC:CF:F8:00:5D:54:9C:A4:88:6A:1D:FD:4B:21:32
            X509v3 Authority Key Identifier:
                keyid:E6:14:3C:33:08:ED:13:4E:F1:67:01:C9:05:7D:C9:E3:D0:7F:56:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5hQ8MwjtE07xZwHJBX3J49B_Vqs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/89/8f6b4c-f872-484c-90c2-41c9f7448033/1/5hQ8MwjtE07xZwHJBX3J49B_Vqs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:bf:4a:01:61:53:98:51:cd:5d:f4:0e:09:ca:a9:c7:7f:13:
         fc:54:24:e6:62:77:59:9a:2f:63:76:37:d5:a0:c7:13:0f:74:
         34:24:2c:cb:2f:32:05:fe:ba:2b:b0:8e:e8:f6:a5:c6:de:1b:
         e2:5f:24:03:56:64:a8:0a:bd:d8:8f:14:d5:23:26:8c:54:47:
         8b:05:9a:2b:39:71:f0:4d:97:cd:ac:a1:dc:6a:f9:90:8e:60:
         46:bb:85:49:08:2f:20:4e:85:9f:04:57:2a:44:01:0b:6d:55:
         9f:18:2b:96:ac:4e:9c:0b:77:29:3f:40:f4:cb:7d:1c:6a:dd:
         d2:8e:f4:34:51:6f:bf:17:81:f6:9f:84:fe:98:0d:01:16:ea:
         52:07:37:ee:be:e3:1e:dc:30:45:1d:04:5c:07:ef:ad:6f:2d:
         22:c7:d1:d4:26:eb:7d:b7:ab:95:3b:09:cf:e6:b5:63:f0:88:
         64:bf:25:dd:98:50:46:78:24:e7:db:36:9e:62:50:fc:09:98:
         e4:ca:b3:43:3a:58:da:27:8e:3e:c3:e7:a7:fb:d3:02:15:bd:
         92:aa:2b:0f:5b:41:36:7f:ff:67:37:17:fc:c2:d7:04:5d:02:
         84:c9:42:e0:d4:47:cd:13:4e:f6:5b:79:bb:57:a2:82:01:ec:
         42:45:63:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 11:20:59 2026 by rpki-client