Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File:                     VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier:          ak/aNw9LQrku1Wdm+QrZkBM1KAfSocvIrV2ToCJreYs=
Subject key identifier:   2B:2D:E1:F3:8E:EA:16:72:C6:B4:2E:9A:A9:85:D8:C6:6F:9A:4D:D5
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer:       /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial:       01A08C7AC61B4BB3E446EFC378DA28FDDC9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number:          05DE
Signing time:             Thu 10 Sep 2026 18:00:51 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:51 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:51 +0000
Files and hashes:         1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: MxmTT15CYYNpRtuM8oaGUnpKe2ZTo86R0DIrGVIPRdg=)
                          2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:c6:1b:4b:b3:e4:46:ef:c3:78:da:28:fd:dc:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
        Validity
            Not Before: Sep 10 18:00:51 2026 GMT
            Not After : Sep 11 18:00:51 2026 GMT
        Subject: CN=2b2de1f38eea1672c6b42e9aa985d8c66f9a4dd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:08:81:6e:36:27:67:a5:fa:38:1c:29:4c:17:
                    93:3f:7c:a7:03:73:dc:5b:6f:f5:a5:f1:3b:8d:26:
                    fb:01:52:2e:2d:cb:f8:b1:a6:b1:8a:9a:e5:da:02:
                    00:89:bc:48:ef:d3:19:07:a5:63:57:65:50:8a:64:
                    11:1b:95:eb:13:d3:4b:a6:52:1f:51:6a:e5:85:3e:
                    c2:06:3c:fc:b4:58:2e:f3:e5:f9:c5:50:9b:93:ce:
                    30:2d:61:5d:0e:7a:2f:a1:44:71:ac:8f:95:e7:df:
                    04:4f:ea:b5:10:dc:f1:16:8c:10:12:dd:70:9e:61:
                    ce:af:7e:2d:b6:2b:e4:d9:8e:85:d5:ac:9e:b3:8f:
                    cf:c1:6e:21:ae:46:fa:9c:42:3b:fd:57:2e:48:4f:
                    1f:cd:a6:f2:98:1d:22:71:b3:12:ff:08:9d:30:05:
                    b8:64:53:19:d1:17:3e:d8:8e:bb:06:b6:6d:0a:39:
                    5b:7c:b8:f2:37:10:d6:da:ed:e7:73:fc:44:12:19:
                    d9:95:ec:5a:3a:ea:40:e1:01:6e:9d:6b:0e:be:b6:
                    c5:36:20:29:9c:6c:80:87:da:df:3e:74:f2:14:52:
                    99:82:fa:fc:8d:a7:1d:74:07:44:6a:e7:b2:9f:a3:
                    90:8a:dd:71:53:15:13:08:64:bc:fa:0e:40:0e:0e:
                    53:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:2D:E1:F3:8E:EA:16:72:C6:B4:2E:9A:A9:85:D8:C6:6F:9A:4D:D5
            X509v3 Authority Key Identifier:
                keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:26:4b:a2:f6:9c:cb:49:b4:60:24:7c:21:96:ee:11:45:
         9b:f2:0f:89:2e:f7:59:fa:9a:0f:ba:eb:bf:af:30:a3:54:61:
         eb:60:91:51:d0:c2:21:6f:46:dd:24:90:18:61:c0:24:e2:1c:
         5f:87:ac:36:64:1f:7a:27:13:de:63:b1:a6:cf:fd:d4:76:26:
         e1:03:ec:b3:7c:1d:3d:ca:ff:6b:f3:c5:da:37:dc:e3:05:24:
         67:ec:44:30:fd:d2:fb:84:0e:23:61:c5:25:64:89:89:53:23:
         d4:83:4b:a5:5f:e3:fe:ad:aa:8a:58:d5:43:b2:d7:24:d7:b8:
         50:bc:2b:50:b4:89:3d:21:69:09:53:71:50:08:d3:e1:be:fd:
         51:83:5d:56:51:6d:fd:95:e9:22:ec:d8:6f:79:2d:2b:62:ce:
         c8:fc:1c:6a:50:b3:bc:19:8e:2a:f1:ee:89:91:dd:5d:fb:38:
         1e:72:6a:8a:1a:01:25:73:d5:32:79:87:6c:b4:b8:37:ca:7e:
         ed:cd:71:e3:12:e4:63:8a:11:68:b0:64:d4:cd:0f:e3:0d:15:
         37:bd:c1:6d:02:12:0a:4f:11:ab:0a:b7:59:59:03:45:97:89:
         0f:2b:ff:e1:99:b9:f9:00:88:68:65:76:f0:47:80:f3:3a:67:
         1a:27:72:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:24:55 2026 by rpki-client