Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
File:                     Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft (raw, json)
Hash identifier:          j6Hob9L8K5xEGZak1auiE3KJ9Vus3HSRW3qjRahLcnI=
Subject key identifier:   18:0F:1B:FF:50:1E:9E:C3:10:6C:F1:D1:3E:49:40:13:35:FC:62:41
Authority key identifier: 56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB
Certificate issuer:       /CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
Certificate serial:       01A18563E21950C4BBB6F5F339C08065A99F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
Manifest number:          BC
Signing time:             Thu 29 Oct 2026 02:01:17 +0000
Manifest this update:     Thu 29 Oct 2026 02:01:17 +0000
Manifest next update:     Fri 30 Oct 2026 02:01:17 +0000
Files and hashes:         1: 1ip8fjzOcrfIt7VhM4hKeIFL-gg.roa (hash: x6BAzNpNpkWkay1RbF1WheGdHSR/NN8khVO2J2kHcRM=)
                          2: Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl (hash: nnoIHh4Lsc4nioHgvQJZFBpWX1NAcdmI0sL1oXQ0BiU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 29 Oct 2026 23:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:85:63:e2:19:50:c4:bb:b6:f5:f3:39:c0:80:65:a9:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
        Validity
            Not Before: Oct 29 02:01:17 2026 GMT
            Not After : Oct 30 02:01:17 2026 GMT
        Subject: CN=180f1bff501e9ec3106cf1d13e49401335fc6241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:bc:34:8c:42:81:92:0c:cd:43:f4:12:67:e7:
                    1e:26:58:e8:bc:dd:b3:0c:a7:41:22:4b:c3:7e:b2:
                    31:3f:c3:32:fa:26:cb:f4:e4:a0:90:b7:af:95:0c:
                    c3:05:1a:76:e9:23:f2:ef:58:74:78:9d:80:ed:f2:
                    2f:89:7a:d4:ae:46:6d:8c:d4:a8:6d:21:95:38:b3:
                    4f:bc:35:3c:45:0b:6a:fc:3d:d4:b9:09:9c:77:76:
                    fb:71:82:f0:fb:ed:2e:d3:ea:63:19:40:3e:5a:f5:
                    34:1e:7e:82:84:5d:90:1c:7d:ff:ba:f6:75:3a:26:
                    2b:d3:2b:a5:bf:ea:36:ec:0b:c7:01:a0:12:2d:5c:
                    c4:b7:dd:f9:19:d9:39:2d:f7:99:51:2e:af:0e:6c:
                    31:7b:6a:e8:94:0b:ab:3a:db:da:58:82:08:b0:ab:
                    be:ac:8e:cb:ba:bb:55:17:89:5b:a1:bc:eb:f6:d6:
                    05:93:a7:fe:fc:e7:3a:d4:1d:ce:fc:be:5e:1c:86:
                    b2:ea:89:4d:a2:21:ab:2f:1b:04:33:df:d1:96:a1:
                    bb:8d:5d:2d:0f:0e:19:ff:55:5f:8e:59:ff:0b:e7:
                    65:34:86:ca:66:e7:83:a4:05:3d:fd:6c:67:c8:36:
                    43:17:c2:55:97:88:c6:2f:8b:8d:b5:04:a0:44:ad:
                    86:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:0F:1B:FF:50:1E:9E:C3:10:6C:F1:D1:3E:49:40:13:35:FC:62:41
            X509v3 Authority Key Identifier:
                keyid:56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:c9:25:66:a2:f1:45:0c:ad:c6:c4:30:0f:3b:bb:cf:ce:ed:
         94:2f:e4:76:14:84:65:b6:4e:14:2c:d3:46:26:c1:6a:3b:ff:
         1e:1e:0a:83:aa:02:77:de:1c:d5:3b:89:14:15:10:c6:48:3b:
         ff:17:13:ac:17:91:ac:2e:b3:88:c9:32:c1:9e:e5:76:f6:2f:
         75:aa:df:bb:e9:55:20:6d:da:47:79:9b:0f:4c:81:d7:27:0d:
         58:06:4e:6d:06:cf:e5:0e:73:6d:ab:45:cc:76:81:1b:41:7e:
         c3:6a:82:9e:83:23:0d:15:bc:d9:13:03:38:5c:3d:87:a0:14:
         f7:70:d7:10:a6:6a:ea:6f:37:b7:f4:7e:42:71:55:7a:0d:c5:
         2e:1c:8d:e2:17:8d:09:f4:ef:41:11:92:af:35:24:14:24:6a:
         13:d0:f1:a5:f1:35:5d:73:7a:a2:58:31:18:17:07:d6:7c:ce:
         2e:eb:98:c5:77:5d:a5:de:a0:74:76:eb:8d:b3:f8:8c:ac:d8:
         d7:45:d8:98:37:48:9d:29:3c:98:51:72:f1:a0:9b:47:3c:ab:
         c3:06:30:f3:df:a0:d1:db:b0:3a:6d:e6:77:db:bd:a2:e8:13:
         97:f0:15:9d:de:8c:5f:64:7a:99:66:5c:be:ef:cf:4f:e7:1e:
         4c:f0:d6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 05:50:07 2026 by rpki-client