Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File:                     VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier:          0nUBWgiECBjBbLojSNA+fDbUUf5Hy4lSKEn/uovJC8M=
Subject key identifier:   0C:A4:EB:65:BE:72:4F:73:8D:A0:D3:AA:91:20:C1:18:D4:26:F2:B4
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer:       /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial:       01A08C7A9F92A00C22CD2F622C29DD6F2EA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number:          1A49
Signing time:             Thu 10 Sep 2026 18:00:41 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:41 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:41 +0000
Files and hashes:         1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: iAnNuwOMCFUnHo6geXl0Tb6RLBgletOBuGnEMW1VeQw=)
                          2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:9f:92:a0:0c:22:cd:2f:62:2c:29:dd:6f:2e:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
        Validity
            Not Before: Sep 10 18:00:41 2026 GMT
            Not After : Sep 11 18:00:41 2026 GMT
        Subject: CN=0ca4eb65be724f738da0d3aa9120c118d426f2b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ce:38:73:92:d5:17:13:c8:66:10:0a:e6:f9:
                    2d:4c:47:a1:59:0f:67:53:59:ce:8c:9c:e0:63:57:
                    37:ac:f6:fa:22:df:19:d0:c6:87:80:b2:d9:a8:48:
                    46:05:9e:f2:f8:39:75:20:dc:c9:d2:0f:c8:a1:e7:
                    c0:79:74:68:c7:4e:be:87:d0:8a:c3:ee:c2:1b:ce:
                    bd:67:25:9f:9f:79:3e:94:df:8f:c7:c2:18:8e:2c:
                    08:f7:2b:25:ba:df:c7:52:9e:b8:f0:2c:2c:94:3b:
                    f6:e6:da:89:e7:87:df:13:74:22:68:9b:a2:c6:20:
                    75:29:d6:b5:6e:66:c3:f6:04:e0:e3:5c:57:f7:df:
                    7a:d1:16:9e:87:ba:0b:c8:53:d0:01:35:b4:96:8c:
                    b6:44:3d:ed:ef:18:da:e2:e9:3e:13:dd:e2:57:77:
                    5b:98:f9:38:f5:c8:3f:88:ef:03:8c:f0:d1:3a:c6:
                    da:89:4c:28:3c:ca:81:a8:22:20:f3:6e:ab:03:9c:
                    63:4d:61:75:1c:3c:a8:6a:81:46:81:89:3b:d1:f2:
                    e3:a8:22:f2:7f:34:84:73:ae:46:46:e3:82:a9:30:
                    ff:ab:7a:a4:e7:e5:b0:7f:86:0f:1b:91:42:d5:1e:
                    87:0e:1b:2f:03:e2:45:26:ea:3d:93:2a:25:9b:12:
                    d2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A4:EB:65:BE:72:4F:73:8D:A0:D3:AA:91:20:C1:18:D4:26:F2:B4
            X509v3 Authority Key Identifier:
                keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:c8:31:b5:3e:70:c3:4f:00:93:c0:50:22:c0:6d:bf:20:8b:
         07:f9:fc:1c:3a:09:e8:12:c7:46:3b:2a:64:fb:8c:36:68:ce:
         f7:2c:8f:f5:84:bc:50:95:e5:22:36:79:fd:03:6f:fc:f1:87:
         78:69:3f:4d:8c:2d:97:2f:b6:59:e6:77:80:4d:8c:f9:46:2a:
         7d:e2:df:dd:a0:7f:84:be:5b:71:cc:18:b6:72:27:f0:7f:2a:
         dd:b1:c8:9c:9b:bf:51:6b:6f:50:32:f4:75:18:06:c0:29:e3:
         4b:8a:36:09:ab:54:35:cd:17:85:f3:49:54:ca:1c:f9:85:b2:
         8f:01:91:04:47:2d:23:a8:2d:c5:f0:5e:f1:25:67:49:3b:c8:
         a6:ee:df:bc:cf:fe:2f:0e:83:c3:f8:b1:1d:a8:87:47:6d:d8:
         68:0c:6c:c9:bf:0e:ee:7f:42:cb:a1:63:8d:2a:0d:82:54:5c:
         e2:e8:59:df:ad:22:cc:e9:28:a5:4f:91:16:49:ec:07:e4:54:
         03:ab:bb:30:66:1f:54:c2:f6:0a:59:41:e0:85:49:09:1f:91:
         57:66:d4:86:7c:98:6e:b0:97:e0:ca:fa:a2:ba:fe:46:aa:6b:
         2c:2f:f8:42:5e:75:8c:92:07:61:42:d2:00:b1:fa:6c:b4:5d:
         3f:07:7f:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:01:43 2026 by rpki-client