Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/e0cc7e-328d-4e3f-9abc-9d6aa3249910/1/VrLkPrQFQMjCdM2z1OpIKd9MES0.mft
File:                     VrLkPrQFQMjCdM2z1OpIKd9MES0.mft (raw, json)
Hash identifier:          DvTW/A89ugwXodE4nZe7TQDbosbP/REd/oeHHzKDKus=
Subject key identifier:   DC:70:CE:78:C4:CF:CD:F1:D6:0D:CB:3A:7E:1E:70:9E:4A:68:DB:AD
Authority key identifier: 56:B2:E4:3E:B4:05:40:C8:C2:74:CD:B3:D4:EA:48:29:DF:4C:11:2D
Certificate issuer:       /CN=56b2e43eb40540c8c274cdb3d4ea4829df4c112d
Certificate serial:       01A103244F7BCE5BF97FF11A79027D232664
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrLkPrQFQMjCdM2z1OpIKd9MES0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/e0cc7e-328d-4e3f-9abc-9d6aa3249910/1/VrLkPrQFQMjCdM2z1OpIKd9MES0.mft
Manifest number:          13
Signing time:             Sat 03 Oct 2026 19:01:13 +0000
Manifest this update:     Sat 03 Oct 2026 19:01:13 +0000
Manifest next update:     Sun 04 Oct 2026 19:01:13 +0000
Files and hashes:         1: DqqVfdgsG3u0-IN97hcgzqSyoKE.asa (hash: h78sb36scXe56eY3Q8zun1XATLxNo5a72a9aEdWKVe0=)
                          2: VrLkPrQFQMjCdM2z1OpIKd9MES0.crl (hash: dMTZS3RnfF1ebPMTQUzrrbhdm89azeIMEHV81Ojp3vw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/e0cc7e-328d-4e3f-9abc-9d6aa3249910/1/VrLkPrQFQMjCdM2z1OpIKd9MES0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/e0cc7e-328d-4e3f-9abc-9d6aa3249910/1/VrLkPrQFQMjCdM2z1OpIKd9MES0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrLkPrQFQMjCdM2z1OpIKd9MES0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 19:01:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:24:4f:7b:ce:5b:f9:7f:f1:1a:79:02:7d:23:26:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b2e43eb40540c8c274cdb3d4ea4829df4c112d
        Validity
            Not Before: Oct  3 19:01:13 2026 GMT
            Not After : Oct  4 19:01:13 2026 GMT
        Subject: CN=dc70ce78c4cfcdf1d60dcb3a7e1e709e4a68dbad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:26:dc:fe:88:17:b8:8b:06:2d:75:d2:5c:8c:
                    39:30:ba:ce:d1:ba:46:3a:69:47:a9:e1:79:f8:6c:
                    d4:bf:ca:00:ea:e9:53:91:24:17:10:2d:f6:60:53:
                    9d:0a:a2:a5:2a:84:9d:de:eb:f2:56:f0:3d:85:97:
                    aa:9c:25:0e:dd:f5:20:5f:88:13:aa:78:34:b6:9c:
                    9d:8d:75:25:87:e9:aa:9c:b7:65:a5:41:92:9a:8f:
                    d2:aa:cd:d4:f2:c5:46:b4:62:74:44:f6:3b:77:e0:
                    6b:30:ac:ba:8d:95:c0:0a:12:8f:65:cd:9c:4d:f3:
                    c2:be:a9:d7:97:7f:32:f6:33:07:ca:ef:8f:9d:67:
                    6c:fa:59:43:9a:96:dc:ae:31:a5:a4:a1:aa:5f:c5:
                    b0:4a:9f:73:a1:1e:b3:97:e6:11:9d:a4:93:50:01:
                    9a:02:49:7e:88:5f:00:6a:f2:4a:ad:7c:1e:8b:bf:
                    21:dc:0b:dd:33:2f:73:d6:58:25:b5:77:73:78:7e:
                    1f:c3:9d:dc:b0:6e:c8:63:c5:1f:de:11:af:ee:a3:
                    c5:1c:e5:16:93:88:7e:ba:a6:47:3e:fd:5c:87:77:
                    35:fd:dc:58:fc:cc:fc:98:79:72:89:5c:fc:06:56:
                    9c:86:ec:39:8e:d1:76:50:12:3c:90:20:7a:d9:9e:
                    b0:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:70:CE:78:C4:CF:CD:F1:D6:0D:CB:3A:7E:1E:70:9E:4A:68:DB:AD
            X509v3 Authority Key Identifier:
                keyid:56:B2:E4:3E:B4:05:40:C8:C2:74:CD:B3:D4:EA:48:29:DF:4C:11:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrLkPrQFQMjCdM2z1OpIKd9MES0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0cc7e-328d-4e3f-9abc-9d6aa3249910/1/VrLkPrQFQMjCdM2z1OpIKd9MES0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/e0cc7e-328d-4e3f-9abc-9d6aa3249910/1/VrLkPrQFQMjCdM2z1OpIKd9MES0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:1c:e8:b8:b2:55:cc:19:d0:d5:c7:87:ac:b2:e1:ac:0e:89:
         98:07:8b:b4:84:b0:d8:59:7b:24:c9:83:eb:cd:95:79:21:2a:
         34:55:ba:bb:71:14:68:ff:11:9f:b3:dd:09:d9:81:be:71:77:
         0f:7a:16:f7:2f:60:dc:da:2e:e4:c7:cd:e3:e4:8e:19:cd:57:
         61:a5:a9:1f:66:a1:85:dc:f9:ec:81:e7:64:3b:10:95:8f:9b:
         68:42:97:cf:85:1c:5f:91:c8:af:3d:3e:9f:a3:ed:9f:2c:37:
         79:55:73:0f:d4:bd:da:63:65:f0:ee:20:43:6d:1d:81:1f:ec:
         bd:8f:35:ac:66:e9:0e:c9:da:ba:a4:2a:f9:3b:c3:e9:3b:83:
         45:8b:1c:8c:57:a3:a4:8b:b3:d8:a4:4c:0b:a3:f2:80:0e:dc:
         39:04:1d:62:6f:f4:dc:e7:16:0b:cd:4c:70:95:e7:86:1b:92:
         a8:17:4b:a8:b1:79:8e:50:b1:b8:eb:e5:0f:b0:6f:94:1b:f0:
         75:b7:ee:b4:fb:84:05:6e:a4:09:9a:28:34:5b:61:2f:42:64:
         07:e2:de:b9:a0:87:bf:c2:07:ea:7c:8a:b0:66:ec:8e:42:7e:
         5c:17:cd:dc:48:41:0a:05:ba:07:2c:66:38:79:92:77:4b:d1:
         d5:47:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 05:40:57 2026 by rpki-client