Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
File:                     Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft (raw, json)
Hash identifier:          Hpvz8G6T7xsEhf+Rh/SZwPku4PrHl8RQt77P1cWJjrM=
Subject key identifier:   13:F1:8E:AE:DE:BA:F1:0C:AD:44:DA:5D:01:C1:29:5A:DB:21:37:C5
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Certificate issuer:       /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial:       01A0CE247CECD630DFBBB51EC41166A041C3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
Manifest number:          E4
Signing time:             Wed 23 Sep 2026 12:01:32 +0000
Manifest this update:     Wed 23 Sep 2026 12:01:32 +0000
Manifest next update:     Thu 24 Sep 2026 12:01:32 +0000
Files and hashes:         1: IiKdZihxK24qAbY3IlsJBY8DWuI.roa (hash: GiUmS/2trsIX5BrmBaADREO7MrJkpyzXZUgRulZKo18=)
                          2: KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa (hash: LX3Hr454zl2MUCj61HpMXcW0BQ8pIuxmh8gRh4mgIis=)
                          3: Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl (hash: V5bgqh3NubNWLrpQqA/emgeoHSWTXEksGKWJ2jx2G5A=)
                          4: XGylWLMmuf-6cyXPIHTSqm3GCd8.roa (hash: Bd9s12c8P6Pe+DYxSBmdpuoMDBh5umpoBqgkM4LDkJw=)
                          5: aWVkUEp4lm12y5qwWv2adJ66-rs.roa (hash: Hq+MYEUAwJVfh/YoUoYayEoIk7iU3N4ROU0WjO5xyMA=)
                          6: a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa (hash: YQ7WevldUaPUf2luIJT1enFkQ7Ao715lMC2Xh1aTnXU=)
                          7: mX5yBu9SXhlcsrImPSehotm7bas.roa (hash: +AwpNCGeeHcy8ov56jxqSP8MLjuzljj6nR9dFS6V4jM=)
                          8: uTiURM_DMHiv75dNHPrAJFdnAd0.roa (hash: sF0ZyLzuBt8uyr+UBykHairkTID8q9WL1Vh7lTAxp1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 12:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:24:7c:ec:d6:30:df:bb:b5:1e:c4:11:66:a0:41:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
        Validity
            Not Before: Sep 23 12:01:32 2026 GMT
            Not After : Sep 24 12:01:32 2026 GMT
        Subject: CN=13f18eaedebaf10cad44da5d01c1295adb2137c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:7b:f6:55:f8:4d:fe:c7:39:54:c6:a4:06:14:
                    ce:09:d1:d6:05:6b:4a:b4:6d:48:3e:80:e0:a1:5a:
                    86:d8:9c:f4:27:5a:b3:a0:47:9e:cc:6f:e6:42:f9:
                    e8:5a:58:92:81:3f:d8:fe:57:fd:08:0f:82:5f:8d:
                    0b:5a:33:7f:b7:e1:87:f5:b8:8d:c0:2a:d2:10:14:
                    64:68:dc:80:fc:f6:b1:e1:c6:32:31:20:c9:72:a5:
                    63:6f:43:b5:7f:b9:4e:fd:3a:9c:ff:7c:cb:77:06:
                    db:55:8c:50:59:11:e7:fc:d0:e0:e6:0a:71:58:ec:
                    fd:52:8c:4a:a6:1c:40:a3:ef:0a:0f:b0:75:c1:ee:
                    d9:60:eb:7e:b4:04:62:be:ad:35:ea:97:29:e4:01:
                    49:84:e3:c0:a6:29:a6:ff:b0:66:bd:40:48:2e:c0:
                    93:90:5e:fd:c4:aa:45:64:24:2d:81:db:c7:b9:4c:
                    70:b3:1b:1a:d5:e1:6e:15:06:84:10:74:26:39:6a:
                    fe:ea:a0:eb:75:7b:61:1b:a6:35:22:60:5a:c0:65:
                    68:89:59:19:e3:89:7c:eb:dc:92:37:83:a7:71:8e:
                    84:ed:d1:cd:2d:67:53:77:c9:10:f7:1d:9e:05:0c:
                    78:95:5f:69:ad:21:d7:26:fb:72:96:60:ab:e0:b7:
                    4c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F1:8E:AE:DE:BA:F1:0C:AD:44:DA:5D:01:C1:29:5A:DB:21:37:C5
            X509v3 Authority Key Identifier:
                keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:33:c3:7f:95:fe:e8:e3:07:91:72:e3:9e:e2:9a:5f:ad:ef:
         95:2f:be:fd:85:5f:21:40:d8:99:b2:00:cf:6a:46:81:81:ba:
         66:f2:36:30:ad:60:e8:7e:5b:75:57:bd:eb:86:6f:ff:02:d3:
         1d:23:ce:c7:9c:38:48:f1:40:56:95:36:c9:2c:57:e9:63:15:
         9b:66:d5:d8:3f:17:b2:29:44:81:9e:62:7d:e3:b8:32:80:25:
         34:fd:2c:f2:c6:ff:ea:5b:eb:0e:18:e5:22:3f:6c:41:e8:e7:
         4a:e6:a2:1c:6e:cf:5d:9c:6d:cf:6d:5b:99:cc:c7:13:d4:97:
         cd:0c:7c:77:3f:0e:34:3f:05:11:21:59:19:e7:57:f6:7c:aa:
         70:a0:1a:c5:77:0d:bc:05:36:9d:c0:de:ee:79:d5:36:87:9e:
         c7:2c:1a:0f:0d:42:e6:44:75:91:34:e5:ae:1e:b2:b3:5a:99:
         0f:01:2e:ba:f1:8c:89:e1:b2:3c:32:55:42:d2:6d:37:46:1b:
         30:ea:6c:a4:a7:ac:c2:2c:9b:30:38:19:05:3a:45:47:3a:9e:
         f7:dc:35:90:ad:0e:b1:13:d7:b2:ad:71:24:4f:91:69:ab:0d:
         70:cf:77:e8:61:4e:7b:c0:a8:f1:23:d4:a5:ad:f1:3c:ae:83:
         0a:80:9b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 20:40:36 2026 by rpki-client