Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File:                     vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier:          mNBBP00cNR8GaA3tB+Mlds+OOZNU5TXWzYCJSsfOaaE=
Subject key identifier:   EB:A6:C4:2B:A3:9A:6D:FC:80:98:05:56:2B:3B:7C:EC:21:E5:F9:0E
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer:       /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial:       01A0C5C517F231EA5DC00073E01596A62A0D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number:          1A65
Signing time:             Mon 21 Sep 2026 21:00:23 +0000
Manifest this update:     Mon 21 Sep 2026 21:00:23 +0000
Manifest next update:     Tue 22 Sep 2026 21:00:23 +0000
Files and hashes:         1: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (hash: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek=)
                          2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: 6wf8XkSIgLKiQ5oYfUljRE7wPygTUl7qL6TogDsxA5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:c5:17:f2:31:ea:5d:c0:00:73:e0:15:96:a6:2a:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
        Validity
            Not Before: Sep 21 21:00:23 2026 GMT
            Not After : Sep 22 21:00:23 2026 GMT
        Subject: CN=eba6c42ba39a6dfc809805562b3b7cec21e5f90e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:a3:8b:6f:26:1f:6b:64:b5:95:cf:3a:a0:ce:
                    27:6a:1e:7c:73:76:77:29:6d:8b:6a:89:76:db:18:
                    ad:00:28:f2:db:e7:e0:0b:84:70:fc:e6:97:83:cc:
                    90:45:c0:9c:85:83:e4:da:97:00:97:65:c7:2c:f1:
                    ab:f8:85:63:36:87:ef:af:d5:88:cc:ca:0a:17:39:
                    60:02:61:f3:ed:49:3d:e7:3d:14:9e:57:3c:37:ab:
                    9a:a1:bf:86:b5:3f:c6:85:76:15:f3:92:58:9f:bb:
                    56:49:8e:89:6f:b1:76:84:eb:db:1b:2e:c9:28:16:
                    8f:aa:8f:28:9d:23:08:38:c5:e6:c1:6b:c6:5c:67:
                    8a:11:83:40:6f:a9:b9:b7:00:b3:67:45:1a:8d:41:
                    81:88:f5:f8:06:bf:88:20:a0:7e:cf:3a:e3:ef:56:
                    d9:87:ea:65:da:43:61:77:91:9b:f7:60:3d:08:8e:
                    04:50:b6:fb:75:95:54:22:7d:fe:ab:54:b9:b6:f4:
                    3a:f2:c4:1d:cd:d9:1e:65:94:5e:54:ee:f7:e5:78:
                    61:20:ae:98:37:47:c4:bf:f2:32:e0:04:b7:02:34:
                    56:30:bc:94:63:fe:bc:39:56:e4:0b:6f:81:37:09:
                    b3:3a:3f:9d:59:4d:6f:87:17:9f:1d:92:92:73:f7:
                    d4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:A6:C4:2B:A3:9A:6D:FC:80:98:05:56:2B:3B:7C:EC:21:E5:F9:0E
            X509v3 Authority Key Identifier:
                keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:6f:72:6f:73:81:ec:bf:f5:f3:fc:3d:14:ac:8d:09:09:d4:
         3e:cf:1e:82:61:0e:d8:d0:82:f8:26:06:c4:e1:63:f1:c7:5f:
         b8:1a:39:c8:e8:d3:34:4f:79:8b:e7:48:fd:2f:2d:e2:23:c5:
         91:aa:e0:f9:99:20:5c:69:43:db:67:9b:7f:2a:63:c5:9e:03:
         01:b4:f5:73:e2:2b:c5:d2:1c:c7:ac:3a:1a:f5:13:ef:53:e7:
         f8:9f:ba:51:09:3c:ee:ed:c8:8b:4e:4d:af:6c:57:ca:c7:7b:
         18:f5:d0:8b:dd:ac:0f:2e:c9:36:89:4c:a2:b3:d4:98:0b:27:
         84:8f:58:12:b9:26:f1:f3:48:3e:e3:16:ce:20:52:84:e5:13:
         cc:e3:5b:de:98:ee:e4:7e:af:eb:c5:64:18:a1:64:5f:0c:c3:
         41:0d:1a:13:64:e5:a2:4f:0d:59:8c:cd:23:a8:50:10:36:6d:
         1e:4e:c8:42:40:54:95:52:57:05:c1:2c:69:8a:62:ad:ab:3b:
         ea:1c:a7:44:d9:bc:80:99:31:d4:fc:9f:e2:6d:41:23:5a:85:
         f3:96:17:fb:08:86:b1:64:ca:7d:e0:0c:25:fc:58:78:af:72:
         50:12:a0:e6:a0:61:24:54:35:10:87:02:61:f8:16:e9:48:19:
         35:a1:84:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:53:37 2026 by rpki-client