Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File:                     VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier:          aTjAUUIyRMCDZnZsOiQ2l52hBa7hguQLs38Iop1Gqn0=
Subject key identifier:   09:41:32:EC:4D:40:0A:6B:21:1C:D4:6F:B9:55:08:08:48:7C:67:D9
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer:       /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial:       01A0BFC2DFB65FFD1C8D6EA6817459EA31EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number:          0C7F
Signing time:             Sun 20 Sep 2026 17:00:14 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:14 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:14 +0000
Files and hashes:         1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
                          2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
                          3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
                          4: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=)
                          5: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
                          6: LW7rb0AaEUjbPH9dnaOyHTBi76E.roa (hash: p1ZkXmO8OLBHzuVbdIzp+e8cKBOvTv26ZXhPyk/iQ9g=)
                          7: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: qYg5h9QZUyDXkm05DZYAgip7kT0fV8OhaJrPr3WDRLE=)
                          8: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
                          9: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c2:df:b6:5f:fd:1c:8d:6e:a6:81:74:59:ea:31:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
        Validity
            Not Before: Sep 20 17:00:14 2026 GMT
            Not After : Sep 21 17:00:14 2026 GMT
        Subject: CN=094132ec4d400a6b211cd46fb9550808487c67d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:40:82:e7:23:0e:94:58:3e:e6:e7:b2:47:
                    7c:72:e9:2d:12:13:d8:48:19:5f:87:c8:02:23:74:
                    57:38:77:a3:1f:d6:3f:1f:ea:50:57:c8:4d:8a:14:
                    c0:70:fb:1e:da:74:c1:a0:e7:05:89:56:89:4f:4b:
                    42:19:79:6f:87:f2:2b:d1:40:80:0d:37:34:87:39:
                    66:b8:34:68:ae:b7:8b:a3:cc:36:16:e3:8b:90:10:
                    fd:8f:24:bd:30:67:6f:31:37:bb:af:c9:5c:a7:17:
                    20:45:41:e7:4a:a8:27:d8:a8:ec:1f:eb:c6:dc:4e:
                    dc:06:f2:66:12:8a:af:a2:34:a5:d5:5f:44:87:c7:
                    d5:31:00:2b:69:54:7f:e7:bd:b0:79:35:92:c1:1f:
                    08:34:7b:e0:e9:56:ca:6f:5a:3b:c6:7e:be:98:8e:
                    12:75:3f:ea:6b:a2:15:52:0a:4b:1a:bb:fc:28:96:
                    ba:66:57:10:f8:bc:d9:8c:48:b4:34:5d:91:53:e1:
                    bc:1e:bd:bf:79:1b:68:8a:d4:71:0c:fe:99:76:2f:
                    61:08:a2:71:ae:2c:3f:2e:89:c5:e8:79:90:cd:81:
                    2a:7e:81:d4:f8:1b:13:65:87:32:27:f8:c3:2d:0c:
                    64:00:2b:e8:35:88:3f:67:16:f5:26:f1:2d:5b:23:
                    89:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:41:32:EC:4D:40:0A:6B:21:1C:D4:6F:B9:55:08:08:48:7C:67:D9
            X509v3 Authority Key Identifier:
                keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:73:91:4b:8a:ee:e7:c8:01:a2:75:0a:10:b9:19:2b:97:07:
         50:46:bc:83:47:64:fb:40:47:61:db:50:d5:b5:2f:7d:c6:62:
         2e:44:73:5e:b3:9b:64:e7:49:98:31:d8:f3:0c:d8:bd:e0:88:
         e9:23:63:fe:d2:9f:24:3b:f4:f7:2d:f2:a6:76:d0:30:39:4f:
         b4:b0:d8:25:f6:6c:ef:b1:90:b8:b0:14:1a:a5:a9:0d:fe:14:
         b2:38:16:a2:b2:21:f6:70:9d:5e:e6:0e:bf:5f:b2:1e:5a:a9:
         24:bb:8f:e0:94:b1:15:84:73:17:24:92:79:d1:2f:b1:f9:52:
         73:f6:da:70:c1:0b:07:49:5c:c7:c0:2f:1a:77:16:fa:2f:03:
         5d:05:34:fa:08:da:aa:9e:14:2b:cf:59:51:0d:fb:f3:56:c8:
         0a:13:cd:73:0f:10:cb:2b:92:dd:ba:46:a7:b9:08:64:1a:09:
         c0:67:38:28:f8:db:46:b1:5e:5e:8d:23:7b:3f:8a:13:ad:b2:
         f3:58:22:9d:5d:2e:df:38:96:ae:4d:ad:be:f5:da:70:68:b8:
         9a:8b:47:e0:27:de:b0:40:51:0d:7f:d1:5b:ea:d5:91:a8:0e:
         f9:38:af:22:04:f1:29:74:af:05:df:e8:71:46:10:e8:35:e9:
         0d:74:1e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:41:20 2026 by rpki-client