Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File:                     VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier:          FZcxUP4B5xEfKjmwyhKKNow8SgBO2aJcZtE+oShvm+k=
Subject key identifier:   C9:95:A7:25:AD:2A:98:C9:23:AB:12:82:E1:9D:3B:4B:BC:5F:19:5C
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer:       /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial:       01A003CB98B6CBBAE930FC17E9F49091A1AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number:          13F6
Signing time:             Sat 15 Aug 2026 05:01:09 +0000
Manifest this update:     Sat 15 Aug 2026 05:01:09 +0000
Manifest next update:     Sun 16 Aug 2026 05:01:09 +0000
Files and hashes:         1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: HLnShkEx6iclkR4hlp6d+ozialbPT143Mf389qAEnHc=)
                          2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:cb:98:b6:cb:ba:e9:30:fc:17:e9:f4:90:91:a1:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
        Validity
            Not Before: Aug 15 05:01:09 2026 GMT
            Not After : Aug 16 05:01:09 2026 GMT
        Subject: CN=c995a725ad2a98c923ab1282e19d3b4bbc5f195c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:9e:23:b9:91:a1:98:83:1e:85:16:d7:12:38:
                    ea:97:92:2e:5d:40:0d:d9:5a:0f:d2:72:64:92:ef:
                    cb:7a:bf:04:40:c3:48:b2:f5:61:41:3f:45:f1:e3:
                    ec:ed:53:14:21:09:5b:09:da:d3:4b:07:3d:48:e0:
                    bc:a2:bd:5a:b9:10:63:d5:e5:9b:89:c0:12:34:21:
                    0d:4f:3c:da:f4:a1:55:7a:ec:64:4a:35:87:96:4f:
                    d3:9e:60:fe:71:62:0b:d1:e8:1a:2f:26:22:af:d4:
                    59:8d:63:61:9f:8c:97:05:36:af:6d:b2:a6:ee:3b:
                    a1:b3:1a:59:40:df:c6:39:d7:fa:43:e1:ec:8b:d5:
                    60:dd:ab:70:a0:6c:2a:f3:d1:55:3f:79:8f:99:b9:
                    62:a0:5c:5d:b6:79:15:60:87:32:c8:be:0f:24:ee:
                    10:19:ae:1c:a4:47:34:45:5f:ac:f0:fa:c8:be:40:
                    1c:13:db:57:33:26:1b:04:31:2e:29:91:aa:d2:8f:
                    3d:60:94:c9:13:62:f0:17:bc:f9:ba:38:ef:b6:3d:
                    90:17:29:c5:b0:b5:71:50:af:67:06:b2:03:a9:b0:
                    2c:cd:6b:2b:3a:19:c5:59:20:e4:c2:d7:c7:ec:65:
                    f6:d7:e1:ed:ed:66:1e:ca:ea:00:1f:1f:75:64:15:
                    13:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:95:A7:25:AD:2A:98:C9:23:AB:12:82:E1:9D:3B:4B:BC:5F:19:5C
            X509v3 Authority Key Identifier:
                keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:bc:52:a8:7d:de:c7:cd:4a:e8:0b:be:f9:65:a1:84:1a:8e:
         71:80:26:c3:26:c2:35:eb:3f:68:77:55:33:62:44:02:63:f1:
         56:e7:cd:c1:55:64:41:76:b5:f7:25:bb:f2:a5:34:8e:d1:8b:
         10:e3:4f:f2:51:90:fe:ec:c4:4a:9a:c2:2d:56:cd:5c:98:6f:
         7f:37:61:bf:11:28:14:55:ab:5f:99:04:4a:e5:92:cf:b7:cc:
         86:64:6a:02:3d:ef:46:56:99:1c:a7:29:9e:ff:a8:3c:1e:f7:
         d1:21:36:57:9b:a0:1c:a6:d0:82:d0:0c:01:21:20:f1:01:a3:
         fb:25:4b:4a:6f:de:36:52:3b:c4:7f:c4:01:a6:93:ca:47:07:
         56:b1:b0:ee:f3:cf:af:91:02:4e:4e:59:30:23:be:b5:fc:98:
         fa:47:4d:20:3b:57:41:bc:2a:29:9d:1e:78:83:60:c8:cf:0f:
         c8:d0:2c:d2:88:82:a7:97:c9:49:21:78:8b:dd:09:91:d9:64:
         74:90:67:68:eb:2d:bb:16:b4:54:8e:e6:33:45:95:8c:f0:be:
         8b:8d:27:0c:31:bb:f4:be:94:09:79:b1:2b:c3:77:be:8a:bb:
         e3:3b:fc:ff:4a:44:e5:fb:d6:66:75:e4:2f:8e:56:bb:eb:be:
         21:4e:b7:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADy5i2y7rpMPwX6fSQkaGvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1
MTVkOTkwHhcNMjYwODE1MDUwMTA5WhcNMjYwODE2MDUwMTA5WjAzMTEwLwYDVQQD
EyhjOTk1YTcyNWFkMmE5OGM5MjNhYjEyODJlMTlkM2I0YmJjNWYxOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr54juZGhmIMehRbXEjjql5IuXUAN
2VoP0nJkku/Ler8EQMNIsvVhQT9F8ePs7VMUIQlbCdrTSwc9SOC8or1auRBj1eWb
icASNCENTzza9KFVeuxkSjWHlk/TnmD+cWIL0egaLyYir9RZjWNhn4yXBTavbbKm
7juhsxpZQN/GOdf6Q+Hsi9Vg3atwoGwq89FVP3mPmblioFxdtnkVYIcyyL4PJO4Q
Ga4cpEc0RV+s8PrIvkAcE9tXMyYbBDEuKZGq0o89YJTJE2LwF7z5ujjvtj2QFynF
sLVxUK9nBrIDqbAszWsrOhnFWSDkwtfH7GX21+Ht7WYeyuoAHx91ZBUTuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMmVpyWtKpjJI6sSguGdO0u8XxlcMB8GA1UdIwQY
MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt
Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh
LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZrxSqH3e
x81K6Au++WWhhBqOcYAmwybCNes/aHdVM2JEAmPxVufNwVVkQXa19yW78qU0jtGL
EONP8lGQ/uzESprCLVbNXJhvfzdhvxEoFFWrX5kESuWSz7fMhmRqAj3vRlaZHKcp
nv+oPB730SE2V5ugHKbQgtAMASEg8QGj+yVLSm/eNlI7xH/EAaaTykcHVrGw7vPP
r5ECTk5ZMCO+tfyY+kdNIDtXQbwqKZ0eeINgyM8PyNAs0oiCp5fJSSF4i90Jkdlk
dJBnaOstuxa0VI7mM0WVjPC+i40nDDG79L6UCXmxK8N3voq74zv8/0pE5fvWZnXk
L45Wu+u+IU63lA==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:33:56 2026 by rpki-client