Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
File:                     vZALuaxgacUTtYLWH9gezNVhpWc.mft (raw, json)
Hash identifier:          kAI//JE6KJhqZj+asMzcqEontXEZge3o3cdh0TPH0VI=
Subject key identifier:   81:77:28:DA:9C:72:6D:EE:97:19:EF:40:03:2E:A1:8A:D7:92:91:FC
Authority key identifier: BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67
Certificate issuer:       /CN=bd900bb9ac6069c513b582d61fd81eccd561a567
Certificate serial:       01A0D7CD362F5D7CDD253475B35A597FC3F5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
Manifest number:          19EF
Signing time:             Fri 25 Sep 2026 09:02:25 +0000
Manifest this update:     Fri 25 Sep 2026 09:02:25 +0000
Manifest next update:     Sat 26 Sep 2026 09:02:25 +0000
Files and hashes:         1: Hj4v62AOdoRZqYCBUDTjMFLo8KI.roa (hash: YWbpGzjtAJu7tqoItoovhEd5x36ZXMAx6yUUYU//amY=)
                          2: vZALuaxgacUTtYLWH9gezNVhpWc.crl (hash: 3ZemqG+a0pfWLwmqTmFkiUZa+wdBRIOJreRL9NGsCu8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:cd:36:2f:5d:7c:dd:25:34:75:b3:5a:59:7f:c3:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd900bb9ac6069c513b582d61fd81eccd561a567
        Validity
            Not Before: Sep 25 09:02:25 2026 GMT
            Not After : Sep 26 09:02:25 2026 GMT
        Subject: CN=817728da9c726dee9719ef40032ea18ad79291fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:61:29:a9:34:e4:20:c7:05:ff:09:6b:af:97:
                    ab:b1:05:94:5b:c4:82:5b:6c:56:84:d6:e4:2d:85:
                    e3:4b:9c:4f:d7:40:b1:4c:83:58:8d:93:42:ca:0b:
                    6f:71:83:80:28:b0:c9:c6:d5:3f:2a:54:12:1f:64:
                    01:22:71:9c:c7:d1:57:df:a6:4d:89:c7:6a:d0:a9:
                    83:29:70:c3:2b:fa:91:9a:95:2b:96:1e:72:9d:87:
                    a2:bf:2f:2f:07:a1:d1:1a:3f:63:f8:0f:31:f3:9e:
                    99:42:71:c1:f5:46:02:3c:c7:a5:c3:bf:fa:5f:db:
                    9d:5e:5f:00:00:7f:56:4f:1e:e1:25:d2:b3:6d:5d:
                    5d:74:fc:9e:a1:6a:1d:ab:84:70:85:f9:f6:cb:0f:
                    0c:7e:75:dc:39:ef:15:8a:28:b6:34:da:ac:dc:2f:
                    ea:84:ab:72:ab:7b:07:a6:f6:5d:32:e4:ad:44:38:
                    45:58:69:8d:61:0e:e9:94:3c:8c:d8:8e:bc:c3:cb:
                    63:a1:09:5b:cb:f2:af:e3:70:84:07:cc:91:91:7a:
                    e0:71:41:53:96:c9:e9:86:61:41:92:23:af:0a:5d:
                    e9:f5:4b:dc:f6:77:f3:4f:99:d4:2e:95:7f:1a:13:
                    bd:12:7d:e5:18:b7:87:52:99:9b:b4:ac:f7:15:d5:
                    cd:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:77:28:DA:9C:72:6D:EE:97:19:EF:40:03:2E:A1:8A:D7:92:91:FC
            X509v3 Authority Key Identifier:
                keyid:BD:90:0B:B9:AC:60:69:C5:13:B5:82:D6:1F:D8:1E:CC:D5:61:A5:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZALuaxgacUTtYLWH9gezNVhpWc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/e3ea5b-d53e-4cd7-bb7b-e1b9f6d357c0/1/vZALuaxgacUTtYLWH9gezNVhpWc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:9a:d9:3c:9f:8e:1e:60:77:c7:f3:27:8a:d5:57:ee:c9:d9:
         bb:97:69:9a:e1:9c:0a:f7:92:95:cd:3b:da:37:92:30:5f:4d:
         99:cb:55:93:c5:96:44:02:d8:f7:2e:4b:1b:93:d5:d8:b2:e9:
         bd:f5:0d:4d:52:cd:35:bd:dc:93:82:26:11:fb:0f:72:e0:da:
         65:bb:b2:a4:17:82:8f:af:e6:18:68:04:3d:ec:84:9c:1f:e7:
         4f:74:3c:3b:85:1c:77:9a:c5:28:9f:9b:e2:c0:b5:54:e5:3a:
         f0:53:ad:a7:6a:ef:a2:c7:37:2f:ea:1e:22:c2:98:9c:25:99:
         5e:cb:ce:4b:40:5b:38:da:3e:a2:e9:03:4f:32:bf:d2:c7:64:
         a4:91:36:fe:7a:ff:fe:d9:d2:64:a8:26:e1:bb:85:32:4f:f3:
         97:fa:4e:c0:95:8b:4d:41:26:83:02:5d:b1:8f:b3:2f:a9:bd:
         d2:6c:4e:71:74:00:07:60:4c:66:fa:10:87:c1:89:37:19:4a:
         da:b9:65:0b:7d:da:b3:6c:17:83:a4:4e:17:53:1c:66:a3:5a:
         eb:26:a1:6f:e6:00:2b:b8:8e:3c:0a:36:ce:14:79:2b:77:ae:
         da:ce:4b:59:09:7c:87:8f:f6:12:f7:b8:5d:2d:2d:b2:fe:37:
         39:ad:07:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:32:13 2026 by rpki-client