Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
File:                     rB5-vncjkuz4xhcsJvHGfuPGGIM.mft (raw, json)
Hash identifier:          mXSCip3pP5cz9FKJsuzoSJkrcCWXPjK5Qt/66FkIE5M=
Subject key identifier:   8E:0F:03:BD:85:51:2A:16:7A:F2:53:26:66:82:FF:DC:01:0A:F1:B6
Authority key identifier: AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83
Certificate issuer:       /CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
Certificate serial:       01A0C858629C0929172FFE3C68E2829FF16F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
Manifest number:          0E10
Signing time:             Tue 22 Sep 2026 09:00:30 +0000
Manifest this update:     Tue 22 Sep 2026 09:00:30 +0000
Manifest next update:     Wed 23 Sep 2026 09:00:30 +0000
Files and hashes:         1: mfv_sdF7JkrnlQLBP04nKDAckMY.roa (hash: buDLKj8SbGldH/UZVSAAKpuobU5YXqMLtN+FcDKjF3E=)
                          2: rB5-vncjkuz4xhcsJvHGfuPGGIM.crl (hash: rk1V4iauXYf3LvZE255xoXwO9JcBGnJB4XsgCElC3XE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 09:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:62:9c:09:29:17:2f:fe:3c:68:e2:82:9f:f1:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac1e7ebe772392ecf8c6172c26f1c67ee3c61883
        Validity
            Not Before: Sep 22 09:00:30 2026 GMT
            Not After : Sep 23 09:00:30 2026 GMT
        Subject: CN=8e0f03bd85512a167af253266682ffdc010af1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:2f:d0:fc:67:07:a9:02:4c:42:ea:8e:45:fe:
                    5e:89:b9:5d:65:bc:25:e4:da:bc:4c:26:e3:24:8a:
                    72:0f:8c:cc:18:55:94:78:fd:af:c5:fc:f4:32:8a:
                    64:df:52:25:4e:06:8f:88:7e:49:c1:8a:b5:7d:4f:
                    8a:50:f7:34:85:c3:c6:69:37:e4:a8:54:d8:4e:24:
                    45:94:23:3b:50:85:8e:ef:32:dd:4d:16:7f:d0:87:
                    2c:38:ea:40:db:27:d9:a7:6e:60:3a:64:f8:cc:31:
                    f9:48:08:3e:86:f7:05:e6:09:1b:b7:51:fd:0a:91:
                    33:e6:2d:b3:32:ce:66:d4:35:b8:f3:82:e2:1d:f1:
                    e5:75:7b:65:97:d3:d1:3f:07:79:13:e1:83:5e:75:
                    54:37:6b:55:24:94:32:6c:5b:fc:8e:1a:fd:2e:67:
                    83:e9:cc:8f:35:a8:6d:ad:73:e0:40:67:51:70:7d:
                    8a:c8:63:9a:bc:c0:5d:d0:a4:3c:ad:0f:25:02:cc:
                    51:9e:8e:55:53:e3:a6:3f:9b:1f:f7:d9:7d:b1:9f:
                    d7:23:f7:f0:b7:b2:de:b7:47:ee:d5:48:15:06:aa:
                    cc:90:07:d1:3d:a2:d8:e1:27:c5:19:10:88:de:d1:
                    f1:bd:9a:78:1a:47:4d:30:a8:17:af:f6:c9:8d:93:
                    e7:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0F:03:BD:85:51:2A:16:7A:F2:53:26:66:82:FF:DC:01:0A:F1:B6
            X509v3 Authority Key Identifier:
                keyid:AC:1E:7E:BE:77:23:92:EC:F8:C6:17:2C:26:F1:C6:7E:E3:C6:18:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rB5-vncjkuz4xhcsJvHGfuPGGIM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/63bc6c-3f74-4f77-b69a-a2186f868519/1/rB5-vncjkuz4xhcsJvHGfuPGGIM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:8a:f7:a8:be:f2:40:62:51:dd:4b:1a:a9:9f:2f:78:60:fd:
         f4:36:0f:67:53:b7:fa:93:21:17:fb:12:1a:64:0a:2b:28:44:
         80:73:23:55:b8:6e:82:e4:ac:75:26:be:8f:88:dc:c7:76:ec:
         22:dd:0a:20:18:ab:3f:7a:7e:ff:84:cf:cb:26:98:04:b1:25:
         5d:7a:2a:cb:de:ee:7b:84:2a:61:26:4b:eb:a1:bd:75:b0:fa:
         1e:a2:05:c2:5b:39:b7:e1:aa:92:83:7f:74:3d:26:e2:00:58:
         b8:3d:fe:31:70:74:8c:92:21:ff:14:21:6e:a1:c7:2a:84:6f:
         0b:16:5c:39:f8:a7:b0:59:df:44:47:2c:da:b7:21:e4:97:3f:
         0b:0c:d4:88:47:40:3e:9a:c5:51:04:8a:93:76:c4:20:a0:ef:
         ae:ae:47:28:43:ab:5c:3d:1d:37:48:7a:9e:cc:5d:de:04:ba:
         73:c2:18:12:eb:bd:4f:5f:d9:1b:33:ec:ce:75:31:1a:82:e9:
         da:a9:22:47:ae:41:a5:f9:3b:dc:12:25:46:49:16:e4:ad:8a:
         5d:55:3a:4a:3e:85:4a:15:bc:40:8f:4e:74:ab:9d:48:39:4c:
         55:da:d4:52:98:9b:7e:a9:55:b3:a3:22:b0:e6:31:1e:04:f8:
         26:60:b6:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:53:51 2026 by rpki-client