Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          H3ExzvEznxHIhOLqFWEZkAdzy//uncyh4vQE9KBseRQ=
Subject key identifier:   13:29:2F:B4:79:E2:C8:8E:E3:97:55:91:74:79:FC:C2:62:1A:05:4C
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       01A08A55CDB461D1E55FCA3AE583476747E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          0535
Signing time:             Thu 10 Sep 2026 08:01:14 +0000
Manifest this update:     Thu 10 Sep 2026 08:01:14 +0000
Manifest next update:     Fri 11 Sep 2026 08:01:14 +0000
Files and hashes:         1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: MSd36P9VDKhAdsfLB5Axh1uzGJ6ubKl8Lzz4MW7/SzI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:cd:b4:61:d1:e5:5f:ca:3a:e5:83:47:67:47:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Sep 10 08:01:14 2026 GMT
            Not After : Sep 11 08:01:14 2026 GMT
        Subject: CN=13292fb479e2c88ee39755917479fcc2621a054c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:99:98:0e:e7:13:db:a2:0f:b9:93:85:dd:f0:
                    73:5a:c9:e8:5d:a6:9a:2d:13:8d:c3:38:f2:07:1a:
                    2c:5b:22:e3:a9:a8:4e:27:2e:f3:6b:a8:eb:c1:df:
                    27:57:f7:3d:e8:8f:6b:be:26:b9:41:c2:e9:a0:7a:
                    5d:29:49:f2:82:7a:b8:fb:be:58:42:85:5e:45:f8:
                    97:04:fd:db:0f:dd:74:16:13:e6:03:fe:18:e5:3b:
                    6f:04:0b:08:27:30:e1:16:45:f9:5b:16:92:3c:7a:
                    4f:98:86:f5:4c:b4:b1:36:ad:0b:d4:c3:10:c4:66:
                    ca:0b:38:14:51:00:e7:14:e6:fe:da:8a:ed:77:8a:
                    fb:00:41:a4:cc:ff:8c:96:61:10:a1:d8:22:03:61:
                    12:55:5b:f6:18:5c:7f:7e:d3:ac:9f:8b:7b:bd:8a:
                    ae:40:16:c4:04:e6:81:c9:ff:29:41:ac:7a:99:db:
                    06:35:cb:c6:35:59:41:65:e5:d3:ff:ac:8a:6a:10:
                    2a:e3:eb:ec:c5:c7:10:2e:a6:58:b6:c7:b0:df:36:
                    69:61:5a:64:86:ed:65:a9:24:3b:e5:4d:dc:bf:ae:
                    52:02:3a:b5:15:66:f8:0c:8b:e6:96:4e:b7:36:7d:
                    76:7f:ef:7b:69:26:f5:62:5b:92:47:26:98:6b:4a:
                    67:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:29:2F:B4:79:E2:C8:8E:E3:97:55:91:74:79:FC:C2:62:1A:05:4C
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:1f:fa:35:10:fd:99:6e:5a:3f:17:c7:be:e2:32:de:42:d2:
         4a:52:8e:dc:c4:d2:9b:2b:f8:60:d3:03:a7:68:c8:94:ce:5b:
         a9:98:0c:bd:3e:75:49:37:cc:d9:15:f9:ab:b5:ae:76:42:72:
         85:01:9a:3f:ef:77:2f:0d:ee:9b:a3:ae:3c:66:21:ce:9d:b8:
         02:a0:89:20:58:cc:a7:0e:e5:1b:44:51:17:4a:f5:47:ed:73:
         b4:b0:ed:97:34:13:0b:c8:ee:9e:d9:5f:0a:2a:d5:53:e8:1b:
         a8:68:75:dc:22:32:31:8d:66:d7:ef:4a:4e:81:9c:53:be:bd:
         a3:7d:db:c9:89:91:dd:ef:7e:a9:9d:a4:97:4c:a6:45:1d:44:
         08:7d:bb:f4:7d:e5:76:70:d5:a2:c8:1b:76:24:3e:47:60:79:
         7f:06:7e:4c:4f:9b:5c:3f:9f:7b:63:af:c1:a3:75:a0:93:7e:
         16:36:53:bd:45:ad:34:5b:32:be:23:81:0d:2e:a1:da:2b:f5:
         fb:7c:35:69:52:dc:a9:ea:36:ad:f8:15:d6:8d:85:e0:20:f3:
         c1:fe:4b:c6:48:02:13:c2:03:ea:a0:37:34:87:d1:d2:d2:b4:
         33:e5:79:44:3a:c2:87:65:b6:43:20:bc:9a:58:01:60:44:65:
         df:1a:5e:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:33:10 2026 by rpki-client