Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
File:                     V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft (raw, json)
Hash identifier:          bgrwaT1v2AXVwGEToQmAeeWgzyr7IxSQutFMNi0sHwE=
Subject key identifier:   92:7F:F2:41:0F:CA:A8:31:6E:41:F0:C2:4E:E5:73:76:69:5D:D9:8D
Authority key identifier: 57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0
Certificate issuer:       /CN=579d549a3316e42571cca5f8380e2df59c2b34a0
Certificate serial:       01A0FC46ABE994F11F789B0B440A558EA6E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
Manifest number:          EA
Signing time:             Fri 02 Oct 2026 11:01:24 +0000
Manifest this update:     Fri 02 Oct 2026 11:01:24 +0000
Manifest next update:     Sat 03 Oct 2026 11:01:24 +0000
Files and hashes:         1: HXHjwpKZ0hUuhA-ecTFWovLriWw.roa (hash: /sTU1en73B/4P9sdmgCdOcbF8vhNLR8j5kj2wC8xqfE=)
                          2: V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl (hash: N4dKtL+yfpnzpzXP/FRWcQMqlmdatwQfLe2yXa7g66c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 11:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:46:ab:e9:94:f1:1f:78:9b:0b:44:0a:55:8e:a6:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579d549a3316e42571cca5f8380e2df59c2b34a0
        Validity
            Not Before: Oct  2 11:01:24 2026 GMT
            Not After : Oct  3 11:01:24 2026 GMT
        Subject: CN=927ff2410fcaa8316e41f0c24ee57376695dd98d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:14:06:00:91:a2:77:97:81:22:bd:55:aa:7e:
                    ac:32:71:30:24:bc:40:68:88:32:ff:40:67:19:58:
                    c3:9c:b4:12:bf:d0:36:5b:5a:2a:bd:9a:b6:4b:4b:
                    ed:9a:e8:f8:fa:a1:bf:88:5d:a5:32:b0:42:58:d3:
                    a3:0c:5a:99:2a:ea:ad:e4:64:14:63:b5:9e:12:c8:
                    c8:cd:c4:97:76:f9:06:b8:73:b2:66:9a:e9:be:24:
                    bc:b8:6b:b3:6f:75:e3:88:ba:f3:fb:07:78:c0:4d:
                    63:2b:e8:d0:74:5d:c3:77:f5:c5:22:ac:36:27:37:
                    cd:23:12:78:84:9c:b9:8f:d9:af:39:54:65:e2:0c:
                    de:de:43:aa:ad:14:2c:4c:ed:ee:8a:a8:a8:31:0e:
                    76:93:06:07:91:dd:08:74:6c:be:6c:df:80:62:f5:
                    47:0e:8a:a7:fe:ad:2b:0a:bd:71:92:9e:1e:7e:ab:
                    88:76:01:a2:dd:83:50:92:46:22:11:70:95:65:11:
                    9d:cf:b4:ff:96:ee:12:ba:c8:a4:95:17:30:fd:d9:
                    22:98:7c:37:21:e2:71:a7:47:09:c8:61:10:19:a2:
                    e2:ed:35:d8:73:f9:46:57:4b:e1:54:ee:b5:b0:d8:
                    16:1a:1e:74:8a:f4:0d:41:a1:dd:67:ac:38:b7:b3:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:7F:F2:41:0F:CA:A8:31:6E:41:F0:C2:4E:E5:73:76:69:5D:D9:8D
            X509v3 Authority Key Identifier:
                keyid:57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ce:bd:b2:c6:2f:42:a2:11:4b:d2:11:ae:49:ff:10:c7:dd:
         d7:2f:ac:14:05:b6:50:fd:68:5d:f9:78:a8:37:41:12:fa:b8:
         e5:bb:fa:e5:75:72:34:ac:d3:3e:9f:2c:09:9d:b4:ff:c1:70:
         e5:bd:c1:bc:5e:f3:36:5f:99:42:e8:15:d2:c0:48:5e:fe:cb:
         ca:6f:e5:12:28:79:d8:6c:de:3d:94:0b:03:3e:dc:e1:49:6e:
         df:17:d3:f2:b5:e7:4a:60:1d:d0:e8:fc:79:36:0c:d4:54:7d:
         aa:7d:f5:15:27:d7:f9:4f:a6:f2:55:a2:e1:a5:68:35:83:19:
         af:17:af:58:5f:56:ed:1f:0e:03:f4:b3:29:86:a5:d3:b1:7e:
         74:59:73:cc:04:7a:7c:bc:1a:75:3d:3e:41:de:82:1b:4f:c5:
         de:be:06:56:70:fe:95:13:86:70:d4:0d:91:27:40:9f:c5:0e:
         aa:23:00:40:87:6d:e1:6e:32:60:77:7a:bc:df:f0:44:a3:9f:
         2f:16:ea:c8:46:b7:6d:2c:61:a0:9d:e6:57:c5:96:d4:ab:d6:
         08:5a:71:c9:51:77:fa:e9:bf:16:63:36:09:5c:36:2e:b0:2f:
         0d:27:9b:d1:1d:e8:1c:70:4d:d7:bf:d8:3d:30:c0:49:a3:c8:
         44:8b:32:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 20:54:48 2026 by rpki-client