Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File:                     vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier:          zWqdZfyWZWFTg+oOfzf1wxZEH5EixwhcLxAhiCID7OI=
Subject key identifier:   35:A0:F3:30:F6:0F:6B:64:F9:10:15:84:30:ED:6F:5A:BA:E0:44:2A
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer:       /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial:       01A16CED032AEDDD2E92E564C65E9CA11406
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number:          0493
Signing time:             Sat 24 Oct 2026 08:00:34 +0000
Manifest this update:     Sat 24 Oct 2026 08:00:34 +0000
Manifest next update:     Sun 25 Oct 2026 08:00:34 +0000
Files and hashes:         1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: G6sqeCYRr8am5M7rXeH9liLagpQrFC1IfLLQActkmsM=)
                          2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 05:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6c:ed:03:2a:ed:dd:2e:92:e5:64:c6:5e:9c:a1:14:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
        Validity
            Not Before: Oct 24 08:00:34 2026 GMT
            Not After : Oct 25 08:00:34 2026 GMT
        Subject: CN=35a0f330f60f6b64f910158430ed6f5abae0442a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:54:f4:e5:19:50:00:38:7b:03:3c:e6:70:62:
                    16:c7:d6:8e:26:10:91:db:eb:a1:95:57:df:ee:3f:
                    b6:51:f7:b8:5d:e5:b2:0d:f7:ca:90:80:ac:b9:ba:
                    44:34:b7:3a:8e:8d:82:ec:00:38:30:0a:4c:b1:37:
                    86:72:4a:c0:26:6a:f1:d5:b3:5d:1b:69:46:00:fd:
                    67:97:56:66:4b:30:52:9c:0c:0d:39:82:44:f2:f1:
                    b6:27:a6:a9:ed:85:15:2d:60:cd:cd:ae:0e:c9:c1:
                    ac:86:2c:97:d6:85:ff:28:4c:0a:af:f2:ea:e5:7d:
                    64:55:5e:b0:6b:b2:40:d7:ef:19:86:ec:de:9a:15:
                    5a:14:f3:c1:3e:11:16:4c:30:0e:e1:29:ca:08:8a:
                    ab:cd:5a:a6:58:c2:3c:04:c6:0f:d8:5a:f3:92:31:
                    5a:c2:ef:73:be:1c:63:04:08:e0:58:a5:a7:a1:19:
                    6f:c4:6c:a3:76:31:07:30:20:e8:ae:82:2d:66:68:
                    e7:71:77:4e:e4:be:64:00:7e:66:12:dc:04:e5:97:
                    e0:e4:22:d6:9c:ba:b6:79:2d:86:9c:3d:87:a7:ae:
                    44:fa:47:9a:57:8b:aa:03:23:be:33:4f:de:68:c9:
                    38:e8:57:eb:49:f2:c1:c1:14:57:a3:a6:ba:21:22:
                    7b:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A0:F3:30:F6:0F:6B:64:F9:10:15:84:30:ED:6F:5A:BA:E0:44:2A
            X509v3 Authority Key Identifier:
                keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a2:93:da:84:47:dd:be:25:55:ec:97:81:7f:3a:af:e0:bf:
         88:9f:fa:01:84:bc:0e:b4:ff:6e:ba:c9:af:c6:3b:be:52:35:
         3c:e9:d3:2d:4c:05:7a:49:08:ad:25:e9:70:89:da:b7:fd:25:
         8a:c0:f3:82:4c:22:cf:db:f0:86:51:58:74:fd:e7:28:4b:57:
         3b:3d:97:01:aa:63:b9:ed:5e:de:89:68:09:2d:8b:29:88:2d:
         e8:fa:39:7e:67:f0:ca:15:e5:3f:16:be:e8:94:0f:57:63:87:
         23:97:39:52:6a:ea:6a:e2:af:72:bd:f9:b1:cc:e5:67:96:06:
         64:e4:cc:3d:2a:7f:36:92:7f:fe:28:84:7c:d2:a8:fc:b8:51:
         fa:30:ba:5f:ce:97:3f:0f:d7:88:73:e8:31:10:ab:90:90:bf:
         2c:8e:f2:2d:92:3f:1b:d3:44:20:ac:2c:05:c5:6d:0f:76:22:
         7b:8c:f0:a6:3b:af:d9:b8:3c:ab:82:9e:4d:8a:9e:70:63:77:
         4e:2b:0d:61:dc:c7:e4:06:c7:50:bb:85:47:69:13:93:82:bc:
         de:cf:e4:31:9e:e0:57:5c:d2:6d:d4:55:b1:32:ef:06:81:2e:
         04:54:61:92:c5:52:ac:3a:b2:c2:33:2c:cc:23:d7:07:09:77:
         d9:8d:2e:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 14:39:40 2026 by rpki-client