Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          O4pp4XkW45irwOq0WYWPnqxjMe37nzGev41mHdca/1M=
Subject key identifier:   B1:FD:93:AC:2B:74:F6:03:6B:C6:2B:51:DF:EA:9E:DE:75:E4:3F:A6
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       01A08B68B3CC1BF4802E32DE87C59A9883AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          19D9
Signing time:             Thu 10 Sep 2026 13:01:29 +0000
Manifest this update:     Thu 10 Sep 2026 13:01:29 +0000
Manifest next update:     Fri 11 Sep 2026 13:01:29 +0000
Files and hashes:         1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: lNNJS7s+kv/14Tt3OcZYbJ/I6tiZ2PB0Y0L1ug1cYzc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:b3:cc:1b:f4:80:2e:32:de:87:c5:9a:98:83:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Sep 10 13:01:29 2026 GMT
            Not After : Sep 11 13:01:29 2026 GMT
        Subject: CN=b1fd93ac2b74f6036bc62b51dfea9ede75e43fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:44:19:d0:7b:8f:fc:3f:a8:63:80:8d:16:46:
                    3d:b9:07:44:79:83:13:51:ef:3d:fe:57:0d:81:7d:
                    ee:5c:5e:a2:16:27:05:24:fc:af:9f:fa:21:48:bf:
                    b4:28:7f:d7:97:f5:b4:cf:cc:15:d7:4a:6c:1e:00:
                    89:b4:5e:45:01:88:8f:29:54:37:4d:64:ed:68:bd:
                    93:54:de:b6:ab:56:30:ac:15:33:8f:c7:75:6f:08:
                    29:b7:27:7a:d9:70:4f:e6:ea:1e:33:7a:8c:9e:50:
                    76:05:35:a2:3f:a0:fe:89:89:65:d2:6e:75:62:6b:
                    7e:52:e6:bc:7a:f0:96:45:e0:12:ad:ad:fb:53:17:
                    ae:07:7f:c5:cc:5a:07:37:b1:aa:e8:ed:2f:88:93:
                    a9:97:00:01:3f:ba:05:eb:a5:fd:c3:9a:2c:e8:9f:
                    5b:d1:2a:79:63:51:f4:72:95:9b:92:1d:c2:6a:73:
                    2f:fd:2b:0a:5b:b2:a5:0c:81:b6:b9:6b:8b:cb:f9:
                    8e:dd:91:43:a2:15:57:6d:eb:27:ed:98:cc:71:79:
                    c8:23:eb:c3:33:72:e8:44:04:8a:4c:72:1a:69:f0:
                    ce:7a:4c:a2:4a:4b:34:69:0d:30:a0:a6:a7:3e:75:
                    fd:be:c1:c7:be:7a:4f:04:6b:73:38:5e:c4:f3:33:
                    58:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FD:93:AC:2B:74:F6:03:6B:C6:2B:51:DF:EA:9E:DE:75:E4:3F:A6
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:50:ce:9e:78:b5:c7:25:b6:df:a2:34:25:37:0a:6d:73:99:
         01:f5:09:a3:50:b5:b5:96:97:0e:1c:7f:32:1d:f9:24:f9:0a:
         7b:15:bd:ed:fd:bb:3d:d4:1f:ef:35:19:15:be:2f:d7:41:00:
         72:2c:96:88:2c:d6:a1:e0:81:08:56:29:94:ff:19:8b:34:12:
         e7:e4:fa:28:df:a5:c1:b2:68:7b:d5:6c:40:de:99:67:54:eb:
         88:32:a9:57:32:34:fb:a9:8b:c4:9f:67:89:2e:f1:a5:0b:b9:
         57:55:96:f1:5a:4f:1c:59:1a:4e:7c:01:f7:a9:9c:b8:b7:b2:
         d4:0f:3e:2f:86:f1:19:f9:7f:37:37:cb:82:81:18:d9:ff:c6:
         2e:01:1b:97:d0:be:83:8c:f2:68:c9:8f:95:c0:e2:b7:1a:88:
         6c:f4:8b:66:cc:a5:39:c9:11:3d:eb:8c:40:00:40:75:17:55:
         99:b7:23:16:af:f8:2b:5e:61:50:90:96:21:b3:ce:2e:b0:da:
         05:34:28:90:7b:61:b1:e7:b3:da:a3:7a:0e:14:1d:de:ca:51:
         14:ea:6a:9a:e3:43:9d:a5:68:ad:d3:34:83:34:f7:f2:77:b8:
         94:6d:37:9a:ca:d6:15:22:ed:54:04:85:bd:0d:bf:16:7e:da:
         09:9b:fb:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:11:55 2026 by rpki-client