Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
File:                     VuYrFxYfM-OxppEMYnL-yzOOD28.mft (raw, json)
Hash identifier:          XT5CJbZqlsx3CjAF2Egvon7bx+lB0buN5WbKxdVFa5A=
Subject key identifier:   B8:0A:55:1E:53:7C:7C:9C:8F:B6:C0:94:F4:40:D0:73:63:F4:5B:8D
Authority key identifier: 56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F
Certificate issuer:       /CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
Certificate serial:       01A0C9A23A8EFA155D3BBEC4EEA77E961030
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
Manifest number:          0789
Signing time:             Tue 22 Sep 2026 15:00:47 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:47 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:47 +0000
Files and hashes:         1: VuYrFxYfM-OxppEMYnL-yzOOD28.crl (hash: 3vI8sKT1Kwqgc10OcDAGZPSfPALfH66KxNpmnYeCTI0=)
                          2: e-VizZSv37fu0G6N5sAYEMxdQEA.roa (hash: U52oLGF2TV8xzdfr5dhrBJaNhR6aX14GLZTv3N0JAOA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 15:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:3a:8e:fa:15:5d:3b:be:c4:ee:a7:7e:96:10:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e62b17161f33e3b1a6910c6272fecb338e0f6f
        Validity
            Not Before: Sep 22 15:00:47 2026 GMT
            Not After : Sep 23 15:00:47 2026 GMT
        Subject: CN=b80a551e537c7c9c8fb6c094f440d07363f45b8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:1c:80:a9:fd:5d:1b:21:89:9d:2e:78:c3:16:
                    18:5e:84:c7:8f:ac:5f:7a:e8:1e:67:6d:68:ed:17:
                    c9:53:27:cc:30:38:c3:d5:5f:48:38:99:36:45:80:
                    cc:f2:9d:a4:76:00:03:f6:df:fa:a5:01:06:2f:c0:
                    01:6f:4d:06:2b:2a:fa:aa:9b:32:5b:49:73:4f:3e:
                    60:4c:c0:cb:1f:15:4f:e1:0d:95:41:67:b9:4e:ac:
                    81:82:06:80:fb:13:84:d7:d1:5e:a9:73:11:08:08:
                    72:14:e0:e6:98:3e:f8:a1:45:f3:26:8d:53:73:85:
                    8a:db:bb:65:cf:ee:19:97:5e:e4:68:bd:93:82:23:
                    5b:7a:94:b8:1c:63:d7:6a:38:b7:75:8a:0b:5d:85:
                    03:6a:69:8e:d1:11:1e:90:a1:56:f6:cc:7f:66:c1:
                    85:e1:a2:18:e9:85:1a:a4:81:d5:65:24:3b:20:46:
                    2b:a6:19:f4:41:91:65:1d:10:7c:0b:57:5b:74:03:
                    b9:e1:3f:41:c8:54:3e:0f:5a:1f:0f:85:5c:29:2e:
                    7c:77:61:a9:71:f8:ac:74:84:79:5d:74:d6:e8:f7:
                    3f:8f:59:1e:23:dd:df:15:ea:1c:7e:d3:aa:5f:1e:
                    52:5d:37:aa:2c:b9:f9:c2:ac:7b:34:78:33:0c:73:
                    cb:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:55:1E:53:7C:7C:9C:8F:B6:C0:94:F4:40:D0:73:63:F4:5B:8D
            X509v3 Authority Key Identifier:
                keyid:56:E6:2B:17:16:1F:33:E3:B1:A6:91:0C:62:72:FE:CB:33:8E:0F:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuYrFxYfM-OxppEMYnL-yzOOD28.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/ecc583-e0c8-4f15-a800-e0c2bdfd6585/1/VuYrFxYfM-OxppEMYnL-yzOOD28.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:f6:c2:0e:b5:43:4e:f8:12:7b:3e:b4:9b:e7:0f:d9:89:81:
         56:70:2b:a7:49:84:55:c1:92:9e:7b:3e:a5:6c:f5:f3:1e:5a:
         6c:b3:e0:79:fc:9e:75:46:41:6f:20:24:4a:e2:56:91:47:56:
         18:a4:e5:91:b6:38:e8:b1:1e:fc:51:84:20:b8:60:51:42:cf:
         1e:b9:af:43:86:01:34:2e:ee:e4:5c:b6:e5:ab:a4:9b:0e:42:
         81:10:95:3a:22:ea:c1:f5:64:a0:04:e1:3f:0c:1f:07:8e:6c:
         42:d2:1d:70:62:41:2d:fa:7f:20:64:9d:f9:63:2d:0e:a4:ed:
         ad:d5:00:47:59:12:07:1c:d4:7c:c7:c8:ef:2a:1a:79:0b:9a:
         32:8f:88:02:33:c9:68:e8:06:cf:4d:81:de:7d:d2:33:d2:00:
         a3:75:f0:6f:ce:c8:37:d6:85:8e:b6:c7:cc:dd:12:43:4f:7e:
         7f:79:1b:ae:32:78:10:03:e1:b8:f1:01:30:54:4d:05:e3:c0:
         50:2e:31:ae:d3:72:b7:7f:4e:77:e6:12:ca:4d:50:a9:5e:1f:
         c2:49:85:0c:0f:cf:6e:5b:cd:cf:64:c2:59:d8:89:12:27:6a:
         1a:b7:3d:0e:43:c5:f9:c2:17:d4:c2:21:23:a2:b0:b1:9a:3b:
         cc:ce:ed:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:19:17 2026 by rpki-client