Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
File:                     vPPYLGBpUlW7VE_xoawy2w-xFuU.mft (raw, json)
Hash identifier:          Et/vnuOtN2b8TEhbqb2W5pN/bF8npvqycaY0nrzZ4wI=
Subject key identifier:   99:A5:6D:0B:80:86:A8:2B:B5:24:67:C1:83:7E:58:B2:E8:0C:2E:27
Authority key identifier: BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5
Certificate issuer:       /CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
Certificate serial:       01A17AA893E52C7F27624C00DD47277D2FE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
Manifest number:          0448
Signing time:             Tue 27 Oct 2026 00:00:30 +0000
Manifest this update:     Tue 27 Oct 2026 00:00:30 +0000
Manifest next update:     Wed 28 Oct 2026 00:00:30 +0000
Files and hashes:         1: vPPYLGBpUlW7VE_xoawy2w-xFuU.crl (hash: XvVhC0+PeuLMZBzJJpW7biwdg7dTzAosZc0qXdEk+f8=)
                          2: vw2ntvLesz6s464z3Zxlqxg_Jfg.roa (hash: jJvGLsLP1bSLpBaz6ycodyIwzcBAdVDfBxgVTq271mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 20:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7a:a8:93:e5:2c:7f:27:62:4c:00:dd:47:27:7d:2f:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
        Validity
            Not Before: Oct 27 00:00:30 2026 GMT
            Not After : Oct 28 00:00:30 2026 GMT
        Subject: CN=99a56d0b8086a82bb52467c1837e58b2e80c2e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:6b:a7:2e:cf:12:d0:64:c1:72:11:09:f9:
                    63:b0:be:4e:81:32:e2:d3:ba:2f:65:03:26:97:9b:
                    04:76:15:4e:1e:44:2b:64:4a:7a:e8:a5:c7:c2:ce:
                    cf:e6:7d:46:50:68:3d:f9:f2:5d:35:63:19:97:2a:
                    f4:21:44:87:ae:f1:54:d3:35:63:ab:e8:62:7d:e7:
                    7a:49:ab:ad:4e:38:6e:0b:1b:ba:ca:df:ca:5c:f0:
                    73:81:6b:84:8d:b2:57:3c:84:98:e8:3f:78:8e:a8:
                    ed:a5:63:25:ee:53:dd:6e:61:91:c4:b5:7a:4c:c2:
                    38:2d:74:57:c3:b2:b1:aa:2a:9b:3d:ae:1e:f7:3f:
                    c6:92:23:cb:b6:e3:fb:c0:2a:b2:26:ee:f2:c0:91:
                    10:40:63:96:12:56:04:f8:2b:62:07:2d:37:ac:25:
                    fa:4c:cb:ed:8a:93:27:d5:06:99:89:b2:e6:72:a5:
                    ed:84:bc:78:cb:37:34:ef:64:5c:a7:96:3e:c0:55:
                    35:53:94:e2:aa:c7:f2:d2:cc:26:e5:0f:61:60:72:
                    56:e3:45:25:88:f8:04:34:3a:11:df:b5:ae:62:ae:
                    bd:fc:a7:2a:10:5a:d1:a1:ab:e8:9b:c3:a3:17:06:
                    54:e7:ba:c1:f6:85:ce:cb:31:97:3e:f1:94:77:51:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A5:6D:0B:80:86:A8:2B:B5:24:67:C1:83:7E:58:B2:E8:0C:2E:27
            X509v3 Authority Key Identifier:
                keyid:BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:9d:30:81:7c:ea:0e:ce:eb:68:b2:8d:e8:61:03:fa:56:66:
         2f:cf:c9:fd:b4:be:f0:bc:30:72:6e:05:90:9c:3b:ad:d5:1f:
         a5:e2:28:c4:c0:27:c6:8a:6f:c7:13:d3:7d:2b:c0:3f:7c:59:
         18:ff:9b:ea:ea:29:05:b9:20:c9:a1:e7:03:49:db:84:73:63:
         77:71:c0:8e:49:5c:be:85:dc:4f:16:ee:41:2a:90:b6:5d:04:
         17:a6:cf:f2:56:38:8f:90:0e:04:a3:3f:91:b4:84:5d:72:cc:
         7c:f1:5a:1f:2f:7b:9c:50:09:49:b7:96:2d:17:e9:d6:ad:a5:
         9e:e5:b3:a1:36:5e:0d:b5:57:d9:aa:71:94:57:3b:08:85:90:
         4b:58:7a:09:b1:37:5c:3d:b6:ce:50:83:30:56:2a:89:e4:f3:
         07:7f:c2:cf:08:fe:ea:41:42:72:26:26:77:77:e8:c9:ec:89:
         29:c3:96:87:2b:78:88:aa:fe:2d:b2:5c:2b:27:09:a1:0c:0b:
         f4:29:01:14:61:91:5a:1c:e1:de:19:1f:40:68:92:a1:3f:17:
         70:b3:be:25:31:4b:95:85:14:a3:af:bf:67:05:a4:ca:0d:83:
         60:6c:65:12:11:b9:ac:5c:ce:03:76:65:4b:36:83:c8:ff:82:
         b1:ec:cc:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:59:40 2026 by rpki-client