Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          VlwCI+SZPLGpfF3GF5cXj1cFPlfdUIuSEeP2egQgzt8=
Subject key identifier:   E4:0C:30:AF:67:DC:FD:E7:8B:A6:68:F5:0F:C4:DB:2F:DA:BF:D8:A6
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       01A17B166F257FA8E3426254957D57358655
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          1A55
Signing time:             Tue 27 Oct 2026 02:00:30 +0000
Manifest this update:     Tue 27 Oct 2026 02:00:30 +0000
Manifest next update:     Wed 28 Oct 2026 02:00:30 +0000
Files and hashes:         1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: anLeLadiR8l48hnDTr5pneeFHV98ksr0+DAyS33fzMg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 02:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:16:6f:25:7f:a8:e3:42:62:54:95:7d:57:35:86:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: Oct 27 02:00:30 2026 GMT
            Not After : Oct 28 02:00:30 2026 GMT
        Subject: CN=e40c30af67dcfde78ba668f50fc4db2fdabfd8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:dd:e0:93:ed:f5:40:8f:3f:8a:08:c1:a2:44:
                    dc:40:8f:cf:11:73:85:c0:dd:15:3e:c7:46:42:d2:
                    62:9a:4a:05:7b:bf:26:95:e0:95:c2:66:18:f2:22:
                    fb:ae:4d:64:b3:a8:5a:59:26:16:7d:4d:24:ac:ae:
                    8f:fa:14:11:e1:00:98:33:fa:da:d6:d8:fd:f4:65:
                    80:66:96:d8:1f:6b:b2:c7:da:ea:36:23:9e:37:dc:
                    95:bb:b2:fd:bd:1c:1e:0b:d2:50:3b:50:9d:7a:b9:
                    b6:9c:6d:c9:1a:a8:f3:55:f6:3c:3e:b1:b4:3f:a2:
                    fe:2a:3d:83:c4:77:46:a7:7c:55:82:3d:e9:19:9a:
                    27:17:cb:4d:8c:16:c9:f9:17:cd:c1:9a:75:5a:e7:
                    9d:00:08:f9:90:b6:9c:2a:8b:cc:ce:44:04:72:e8:
                    f2:ba:e9:8a:48:0a:f1:22:c7:5b:c1:dc:cf:25:9a:
                    9b:95:18:02:e5:5c:e8:98:7f:9c:32:d0:15:1d:33:
                    14:7c:d8:5b:7d:f2:81:e2:f4:ac:aa:32:6e:37:62:
                    4e:e9:2b:5f:73:ac:89:78:1e:e8:76:fa:52:6c:ae:
                    aa:99:39:a9:e6:65:68:21:4f:2d:90:a2:a3:d0:0e:
                    aa:a9:98:35:1c:0d:f6:2b:54:b2:8b:d6:3c:ff:1e:
                    de:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:0C:30:AF:67:DC:FD:E7:8B:A6:68:F5:0F:C4:DB:2F:DA:BF:D8:A6
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:0a:50:8b:2f:1c:36:5d:b1:b5:5e:f3:e9:f1:e6:7b:32:34:
         8a:99:e3:a9:f0:64:a4:ed:4c:bf:65:74:d8:e5:70:c8:b6:57:
         c1:8e:5f:c7:5e:aa:35:18:ef:bc:55:f9:c6:67:01:4a:79:31:
         ea:a0:ca:06:a5:5c:75:78:df:dc:9b:ae:b1:b5:e7:46:42:80:
         cc:02:fb:43:19:22:fd:d6:9b:cf:59:5c:b1:a8:3d:61:00:78:
         b6:81:35:54:98:78:17:3f:e8:36:ad:b3:b7:cc:38:74:f0:34:
         a2:13:cd:13:a2:73:40:10:ff:27:d3:ac:59:76:5d:bd:1f:3b:
         2c:54:74:43:1e:bc:86:b2:26:27:f9:26:da:cf:7a:d2:32:ea:
         e7:c7:0e:82:71:1c:8a:0d:da:84:3d:81:ab:2e:58:b7:c6:38:
         78:92:4d:85:b1:d0:77:75:10:98:78:d2:75:c9:fd:43:41:fd:
         57:74:69:28:9b:e0:75:51:2a:a5:28:12:7f:a7:91:fc:84:a6:
         9f:d7:f5:47:3e:d7:27:ed:0d:ea:29:f6:47:49:d4:26:87:c2:
         48:5e:9d:39:03:4c:37:45:a4:ee:71:a2:dc:3d:2f:71:6b:fd:
         89:5a:42:b7:7d:22:aa:5d:7d:f6:14:3e:85:69:70:50:71:e6:
         68:5e:55:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 09:23:19 2026 by rpki-client