Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          8GdV98Tdh4lrDIYFv8CxTw5bMqMh4MurMR50gPcYCGc=
Subject key identifier:   6E:2D:B5:37:BD:14:38:47:2C:C0:82:F9:AB:BB:70:31:20:B5:BE:6A
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       01A0E8F6F6E48B87CE88C28BB54241DE6FCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          12A3
Signing time:             Mon 28 Sep 2026 17:01:34 +0000
Manifest this update:     Mon 28 Sep 2026 17:01:34 +0000
Manifest next update:     Tue 29 Sep 2026 17:01:34 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: UFKMHxtGRdnLXY9RZ1liFdlcxVXISYi8TiZzQ3hGcuY=)
                          2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 17:01:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:f6:f6:e4:8b:87:ce:88:c2:8b:b5:42:41:de:6f:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Sep 28 17:01:34 2026 GMT
            Not After : Sep 29 17:01:34 2026 GMT
        Subject: CN=6e2db537bd1438472cc082f9abbb703120b5be6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:2e:81:d1:60:3f:9b:92:dc:7d:c9:b5:98:b2:
                    64:d3:2c:0d:a6:48:45:bf:69:44:53:13:3f:42:b6:
                    93:b9:b3:4f:4f:7d:92:df:7a:63:84:b8:06:72:bb:
                    17:5a:fb:90:1c:e3:40:c3:3b:0a:dc:78:82:0d:44:
                    78:85:cb:61:ee:69:8d:f0:f3:4f:cf:36:6a:b4:7b:
                    05:ab:be:15:36:7f:2c:57:b5:cd:87:41:a7:59:79:
                    b5:11:ba:b4:50:58:18:7d:5e:73:52:27:fc:9d:14:
                    5d:d5:b1:78:3c:ee:87:5c:4d:af:2d:8d:fb:ae:7f:
                    32:ed:82:71:1e:32:df:e3:d3:51:dd:3d:2e:05:d8:
                    79:cb:25:a0:28:90:91:11:53:72:5f:c9:92:00:d3:
                    85:e8:6a:31:5e:a6:3c:b2:bd:67:15:76:39:da:25:
                    c0:c8:75:29:c8:9f:76:32:76:53:9e:0f:9a:6d:ba:
                    b5:69:d6:e3:0d:a4:e4:92:7f:83:c4:d8:07:e8:fc:
                    1e:c3:33:c3:a2:b7:03:63:a9:05:e6:31:88:95:9d:
                    a9:64:d9:86:04:bf:30:d5:01:6c:a9:84:3d:4a:e4:
                    7d:d6:39:36:85:b2:dd:a5:b0:b5:1f:37:54:f8:93:
                    6b:1a:4d:9c:09:f5:c7:ae:80:40:0a:ea:b1:e8:50:
                    5b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:2D:B5:37:BD:14:38:47:2C:C0:82:F9:AB:BB:70:31:20:B5:BE:6A
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:0c:ad:8a:ed:e2:34:90:8a:0a:7b:ff:48:29:d0:29:d2:99:
         bb:89:3c:31:f4:fc:3f:f5:26:78:6d:ac:74:c4:72:26:c8:2b:
         de:e2:d4:3a:f8:74:85:d6:a2:9d:bc:1a:e4:2a:fb:c7:8f:51:
         f1:44:35:6f:2a:39:cc:96:0a:4c:99:1b:c9:ae:8d:7a:4d:9b:
         6a:6a:5c:3d:e4:7e:e8:74:f3:75:1f:2f:b2:ae:16:09:10:d4:
         ff:06:ea:09:07:8a:50:a9:b5:27:c2:a8:68:6a:bf:e4:09:30:
         1d:2b:2d:5d:35:6d:46:9f:bf:8f:fb:71:8c:4d:ab:2c:e8:fc:
         f0:59:03:fd:28:ea:38:cf:19:8d:8e:4c:73:fb:ea:05:07:88:
         f6:2b:06:d3:68:47:14:38:f3:48:cb:fa:2b:ba:d5:5f:29:f0:
         c0:48:f9:25:c2:0b:ce:a8:8b:79:3e:35:40:09:01:0e:9a:14:
         4b:20:2f:19:87:7b:ba:66:cf:d8:9d:43:58:b9:6c:b6:62:b2:
         6b:14:65:58:42:ce:f8:b1:a9:b3:b2:de:93:c5:07:33:d3:1a:
         aa:23:8e:a9:4c:ca:c3:a1:72:29:99:b7:21:bd:78:90:61:70:
         ea:d1:64:9c:e6:86:d5:ca:ba:4b:75:ce:71:1d:9d:08:03:e0:
         e4:d8:22:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:15:19 2026 by rpki-client