Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File:                     vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier:          DjTPMdi7B1bBjonFwU4aJV7y82zEFKlwwfuBNB2IAdU=
Subject key identifier:   FA:3A:DD:00:E3:2F:3F:72:29:B2:B2:84:24:5B:6F:36:54:B8:22:66
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer:       /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial:       01A118621CC2D25DF3124F0D5E847A8BE2C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number:          1A93
Signing time:             Wed 07 Oct 2026 22:00:45 +0000
Manifest this update:     Wed 07 Oct 2026 22:00:45 +0000
Manifest next update:     Thu 08 Oct 2026 22:00:45 +0000
Files and hashes:         1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
                          2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
                          3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
                          4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: q++GHK4XSAqcFTjkdW5Rmtt5BwfZeZFd4h3l8tJ3Xu4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 18:47:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:62:1c:c2:d2:5d:f3:12:4f:0d:5e:84:7a:8b:e2:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
        Validity
            Not Before: Oct  7 22:00:45 2026 GMT
            Not After : Oct  8 22:00:45 2026 GMT
        Subject: CN=fa3add00e32f3f7229b2b284245b6f3654b82266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:da:13:0a:2d:e8:b4:0d:c9:a2:f8:38:f9:65:
                    17:3b:94:c2:3d:9a:f7:36:38:ef:a0:ae:42:1c:a2:
                    92:a4:ff:6b:ab:88:e2:f6:d5:9e:e5:0e:4e:79:3e:
                    fe:bb:72:de:06:62:fb:23:89:6a:94:cd:5c:83:49:
                    0f:1e:05:28:07:b1:ea:a2:7a:18:62:6d:78:14:4f:
                    a0:39:88:bc:46:c8:d5:da:f8:bd:87:ed:3f:c4:44:
                    64:f6:7b:44:b5:42:da:36:fd:5b:c5:27:04:c3:71:
                    f2:d6:11:6f:e5:6d:c5:89:ef:17:e1:1d:24:ea:9b:
                    b6:c5:b5:5a:b8:cc:30:66:d8:d2:ae:8d:66:da:f0:
                    ef:f1:db:d3:8f:8c:a6:49:71:bb:ed:cd:5c:2e:ee:
                    3d:bc:c3:88:78:7d:a9:7f:c1:4e:03:fb:0f:29:18:
                    bf:e7:f6:c1:b8:8a:16:0a:1b:a4:c7:40:67:b9:49:
                    f7:f1:ad:05:67:81:95:e1:8f:da:79:2f:f0:2d:a3:
                    67:90:37:89:fc:49:6f:f9:ce:6b:c5:08:54:d7:ed:
                    79:ff:77:0f:f8:87:69:8b:8c:70:d7:1e:91:20:f7:
                    c2:10:d6:a7:02:42:76:d4:97:d6:b6:2d:f8:f0:fa:
                    9f:fc:92:fd:96:11:f0:df:51:d9:da:c6:df:66:b0:
                    44:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:3A:DD:00:E3:2F:3F:72:29:B2:B2:84:24:5B:6F:36:54:B8:22:66
            X509v3 Authority Key Identifier:
                keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:f9:33:73:8d:20:c8:59:b9:bf:e1:2d:c3:d6:5d:fa:d8:
         31:53:d1:d6:f9:89:05:41:17:2c:6d:c6:d6:3c:73:bd:34:ba:
         e3:54:5f:cf:1f:79:d1:46:a6:f4:59:a0:b2:26:b0:7b:7f:e0:
         fb:8e:70:5b:f6:ce:05:d5:09:59:32:9b:f3:cc:1b:62:f1:2c:
         54:07:7c:82:9b:4c:5d:30:cb:f3:ca:a1:c4:fd:71:68:96:22:
         22:43:e4:a7:36:59:db:9b:91:3a:e5:80:dc:c1:64:1d:51:a8:
         e6:33:54:4b:86:1f:b7:5b:94:a0:f6:7f:28:80:c4:82:d8:97:
         29:64:40:1e:91:14:41:63:39:34:6f:b0:80:7b:d2:f0:60:71:
         bb:0c:16:8b:37:24:97:e2:57:db:f7:e5:ff:8a:fe:2d:b0:5e:
         68:80:0c:c9:62:cc:63:c5:79:25:61:38:a7:28:3d:27:40:9c:
         d4:20:26:92:e1:e1:30:e1:3b:0d:d7:69:d8:5a:62:cc:1d:36:
         40:68:79:03:90:1c:c7:d2:cd:6d:e6:5e:89:48:2f:f0:ee:6c:
         a3:8c:5d:b9:07:60:69:25:9d:f7:2d:f6:85:75:8a:f5:12:d8:
         d0:62:4c:fd:c4:f1:ab:3c:6c:80:83:81:73:50:b2:d8:9d:27:
         c9:bb:76:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEYYhzC0l3zEk8NXoR6i+LCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjdhMGEwNDhiNjhlY2NmYTRkNDllYWI0ZjE2ZGM3OTJj
MGQzMTgwHhcNMjYxMDA3MjIwMDQ1WhcNMjYxMDA4MjIwMDQ1WjAzMTEwLwYDVQQD
EyhmYTNhZGQwMGUzMmYzZjcyMjliMmIyODQyNDViNmYzNjU0YjgyMjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdoTCi3otA3Jovg4+WUXO5TCPZr3
NjjvoK5CHKKSpP9rq4ji9tWe5Q5OeT7+u3LeBmL7I4lqlM1cg0kPHgUoB7HqonoY
Ym14FE+gOYi8RsjV2vi9h+0/xERk9ntEtULaNv1bxScEw3Hy1hFv5W3Fie8X4R0k
6pu2xbVauMwwZtjSro1m2vDv8dvTj4ymSXG77c1cLu49vMOIeH2pf8FOA/sPKRi/
5/bBuIoWChukx0BnuUn38a0FZ4GV4Y/aeS/wLaNnkDeJ/Elv+c5rxQhU1+15/3cP
+Idpi4xw1x6RIPfCENanAkJ21JfWti348Pqf/JL9lhHw31HZ2sbfZrBEswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPo63QDjLz9yKbKyhCRbbzZUuCJmMB8GA1UdIwQY
MBaAFL33oKBIto7M+k1J6rTxbceSwNMYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgt
MzUxNjE5MWE5ZDY4LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS9lMTZjYjYtYjQ1NC00OGQ2LWJkYzgtMzUxNjE5MWE5ZDY4
LzEvdmZlZ29FaTJqc3o2VFVucXRQRnR4NUxBMHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhM75M3ON
IMhZub/hLcPWXfrYMVPR1vmJBUEXLG3G1jxzvTS641Rfzx950Uam9Fmgsiawe3/g
+45wW/bOBdUJWTKb88wbYvEsVAd8gptMXTDL88qhxP1xaJYiIkPkpzZZ25uROuWA
3MFkHVGo5jNUS4Yft1uUoPZ/KIDEgtiXKWRAHpEUQWM5NG+wgHvS8GBxuwwWizck
l+JX2/fl/4r+LbBeaIAMyWLMY8V5JWE4pyg9J0Cc1CAmkuHhMOE7Dddp2FpizB02
QGh5A5Acx9LNbeZeiUgv8O5so4xduQdgaSWd9y32hXWK9RLY0GJM/cTxqzxsgIOB
c1Cy2J0nybt2qA==
-----END CERTIFICATE-----
Generated at Thu Oct 8 00:49:18 2026 by rpki-client