Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
File:                     VrSloWGzuboO6uwqBFYBeGYzlzk.mft (raw, json)
Hash identifier:          5m0n0DcK3W6f9WIjxJprTiLuTvrd6M9esMYvQhoJ0Rw=
Subject key identifier:   39:E8:29:8A:12:95:3E:81:37:AE:9A:5A:31:2D:4A:31:B8:CB:EB:30
Authority key identifier: 56:B4:A5:A1:61:B3:B9:BA:0E:EA:EC:2A:04:56:01:78:66:33:97:39
Certificate issuer:       /CN=56b4a5a161b3b9ba0eeaec2a0456017866339739
Certificate serial:       01A134B513ECDD64C40A5698D92FEC4F5F80
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
Manifest number:          F4
Signing time:             Tue 13 Oct 2026 10:00:44 +0000
Manifest this update:     Tue 13 Oct 2026 10:00:44 +0000
Manifest next update:     Wed 14 Oct 2026 10:00:44 +0000
Files and hashes:         1: 1-RnbccGnKU5-85enbKhy1GUdNWY.asa (hash: ajAhHP1aNabiZiqh7tPsRoRbxoy3xnUCzO6ypU4W+4o=)
                          2: VrSloWGzuboO6uwqBFYBeGYzlzk.crl (hash: X2WbZ2wXxMuwXfWZQbW/YF10kdiDqjN3RXbXZo61rqI=)
                          3: vsgn5QJjV5nunN_PCpNGwgV6a9o.roa (hash: wLO8tqv8K/6aZXIfixuUDJ/NV/2S2GgETxQc9LoyLCo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 10:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:34:b5:13:ec:dd:64:c4:0a:56:98:d9:2f:ec:4f:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4a5a161b3b9ba0eeaec2a0456017866339739
        Validity
            Not Before: Oct 13 10:00:44 2026 GMT
            Not After : Oct 14 10:00:44 2026 GMT
        Subject: CN=39e8298a12953e8137ae9a5a312d4a31b8cbeb30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:65:9e:d0:fa:53:7d:3c:c3:4c:42:5e:4a:b5:
                    a0:84:ad:7d:34:10:aa:07:fc:44:89:ad:d5:46:f8:
                    93:88:9e:b1:64:74:85:7a:a3:f4:98:23:bd:de:db:
                    46:15:3b:c3:4e:ce:f8:5f:a4:65:51:ce:5a:22:64:
                    cf:82:0f:e4:d4:65:20:6b:08:30:99:53:c4:23:8e:
                    7f:8c:5b:89:c3:8a:dc:7d:0c:75:f6:1d:e9:55:fb:
                    dd:24:22:4f:1e:16:f6:8c:75:df:2b:f2:60:fa:1c:
                    70:4c:94:a0:03:06:60:28:0d:10:cb:44:9c:a0:fd:
                    2f:48:e7:4e:1d:a6:99:79:a7:8c:44:3f:a6:fd:ee:
                    08:1e:be:bc:cd:b9:50:6b:a9:23:9d:c2:99:8d:85:
                    75:c4:5a:a1:35:be:cc:b6:bd:c2:db:b8:cc:c0:bd:
                    e7:5d:fe:79:ac:a0:d5:33:ae:58:e5:da:a6:8d:50:
                    10:e4:03:37:06:c6:f2:a2:68:f6:c3:78:66:80:ed:
                    ad:ad:a0:2a:05:b3:f0:bd:e5:24:46:a8:7d:85:41:
                    43:17:d3:1a:7c:ea:74:bd:82:3b:fe:96:7b:63:a5:
                    da:6e:06:9a:2e:83:18:04:7e:b6:95:48:44:73:45:
                    e7:31:36:0e:04:82:01:1a:a5:ff:99:26:4a:f4:f7:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:E8:29:8A:12:95:3E:81:37:AE:9A:5A:31:2D:4A:31:B8:CB:EB:30
            X509v3 Authority Key Identifier:
                keyid:56:B4:A5:A1:61:B3:B9:BA:0E:EA:EC:2A:04:56:01:78:66:33:97:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrSloWGzuboO6uwqBFYBeGYzlzk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/49/3c64c4-1b18-4bde-9132-f6d26672e950/1/VrSloWGzuboO6uwqBFYBeGYzlzk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:3d:02:58:e2:6c:bf:0d:da:19:05:b6:d4:d4:4f:22:75:90:
         50:f0:db:e0:c7:08:ea:d0:70:5a:99:b0:db:02:48:bc:cd:f9:
         aa:a5:00:ca:fa:b7:d8:f7:87:79:9a:67:a2:2f:aa:6f:ad:00:
         ba:f0:f7:ea:2f:ee:9d:4b:0a:f9:ae:e6:19:ec:b4:48:5b:eb:
         df:32:16:b8:3f:f2:98:20:9a:b9:e4:6f:ae:27:77:e9:c6:31:
         0b:1d:a7:9f:55:46:de:27:3c:22:09:af:6e:b9:ca:ea:61:57:
         7e:c1:38:52:56:76:55:11:88:23:74:e3:94:99:13:2d:59:d0:
         04:92:6e:e1:81:27:c4:89:1b:b6:34:4c:22:65:d5:23:cb:42:
         96:ab:eb:25:0d:c7:83:26:c9:fc:a2:56:ac:9a:b3:1f:af:9e:
         0b:fe:75:c5:a7:88:4a:c5:d1:71:5c:3f:5f:f8:9f:86:97:94:
         15:d9:f4:4b:2c:bb:37:37:4c:cd:61:79:fa:a2:5e:81:c2:73:
         27:35:97:0a:64:8e:df:44:eb:d6:02:e6:0a:b9:48:ad:ec:cd:
         d6:a9:d4:2d:80:7a:0e:bc:28:d9:e2:25:9a:4e:77:85:87:d0:
         91:e8:d3:28:30:cc:02:9e:f8:29:41:db:43:81:0e:19:a7:1f:
         dd:0e:a1:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 18:07:26 2026 by rpki-client