Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File:                     vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier:          BoIc6/XPcskLMAdo468ZSfNlzY+w8oSRhQk89p4pz5s=
Subject key identifier:   CC:3B:AD:17:63:34:B1:F0:5C:CB:B4:9A:C4:7E:A7:DA:0B:A7:5F:7F
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer:       /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial:       01A142A8390815B32ADB5564863AC0CC8783
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number:          06A1
Signing time:             Fri 16 Oct 2026 03:01:23 +0000
Manifest this update:     Fri 16 Oct 2026 03:01:23 +0000
Manifest next update:     Sat 17 Oct 2026 03:01:23 +0000
Files and hashes:         1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
                          2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: Tti082o87xTIe6FNYIWs+aRn0n80FKOWjXdwkjc+1D4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 03:01:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:42:a8:39:08:15:b3:2a:db:55:64:86:3a:c0:cc:87:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
        Validity
            Not Before: Oct 16 03:01:23 2026 GMT
            Not After : Oct 17 03:01:23 2026 GMT
        Subject: CN=cc3bad176334b1f05ccbb49ac47ea7da0ba75f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:d6:ae:7a:37:b5:4a:95:7a:c5:51:b4:3d:5b:
                    55:12:55:c5:38:79:64:de:01:d8:69:34:75:35:b0:
                    6f:0d:65:02:5b:83:bb:ad:6e:9a:18:aa:c5:64:c3:
                    86:7e:7e:ec:f7:d2:99:d1:32:90:33:2f:42:1a:fb:
                    12:8a:cb:25:b4:4e:ac:86:fd:61:68:d2:aa:73:30:
                    f4:31:96:e3:45:c6:d6:3b:73:d9:79:75:fd:7b:17:
                    72:53:38:66:16:9e:10:7e:37:d8:f3:05:14:39:ed:
                    06:b3:29:f5:97:67:73:97:a6:09:0c:4c:9e:22:ee:
                    30:f4:e3:fd:68:f8:fd:f0:ea:f2:7c:90:bd:a2:ce:
                    aa:d7:2c:0c:37:5c:ce:0d:7e:da:1b:73:4a:1f:bb:
                    2a:fd:e1:f8:7e:7a:45:4e:e7:c7:cc:e7:70:b8:02:
                    f3:86:ba:b5:0e:5f:3a:e0:01:41:a7:63:8b:fd:e5:
                    15:88:73:91:ba:00:18:ad:d9:8c:28:ab:bf:37:9c:
                    03:8e:3e:be:1e:d7:10:ec:f0:d6:5c:c4:47:32:db:
                    9d:23:5f:fb:aa:33:9c:96:32:77:58:ff:cc:b6:40:
                    b1:e8:44:43:01:0f:cb:77:33:71:66:ec:03:05:c0:
                    ff:b2:d3:a7:cf:0f:b2:76:06:34:d4:89:39:44:7b:
                    06:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:3B:AD:17:63:34:B1:F0:5C:CB:B4:9A:C4:7E:A7:DA:0B:A7:5F:7F
            X509v3 Authority Key Identifier:
                keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:fc:20:33:79:6d:5d:10:92:aa:af:ab:c3:6c:e9:d1:8a:ad:
         91:21:68:26:17:51:ec:f4:10:a1:e3:3b:b8:b9:94:c1:e0:8d:
         da:19:64:ec:ad:8a:62:0d:c1:8c:c1:79:42:04:49:f0:65:f9:
         01:04:c0:1f:02:f0:d8:af:db:09:90:9e:c0:36:38:92:95:3b:
         f4:24:c5:68:70:96:87:56:29:cc:98:d8:bb:9f:8f:74:6b:e7:
         e3:28:86:d0:6f:53:e0:3e:44:61:72:c5:fe:6d:c4:b3:d8:d4:
         ab:b5:c9:d6:b7:41:0a:7f:c7:04:3f:54:52:3d:42:2a:be:a6:
         42:c6:7d:b9:3f:d1:2b:f6:bf:f1:29:80:f6:a8:93:fa:72:bb:
         91:2a:0c:5c:4f:80:20:fd:1b:02:7a:32:58:23:be:fb:9c:d1:
         4b:91:19:de:09:83:3d:f4:c7:d6:96:86:94:4e:10:50:e4:ed:
         3e:7d:45:6b:ff:75:07:92:1e:c3:41:0d:eb:a3:eb:23:a8:38:
         f5:74:03:46:98:4f:c7:d5:c4:d8:96:2b:5f:e3:6e:d9:cd:81:
         b0:d9:8a:12:16:61:93:24:00:1b:e6:50:f6:c6:3f:88:e7:09:
         54:63:94:86:a5:14:94:36:ea:49:30:6b:04:cc:1c:51:f0:0d:
         6b:2a:2c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 14:47:20 2026 by rpki-client