Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
File:                     VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft (raw, json)
Hash identifier:          hJL7f4egFX2dRp4aHyXNwBIY90OtNfWVcf7fDZfIQU8=
Subject key identifier:   D3:9B:79:B5:B1:79:B5:01:12:91:66:94:AF:30:1F:26:8C:CF:3C:CF
Authority key identifier: 55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72
Certificate issuer:       /CN=55d5dc9e220112a27c152bc32389038974ae4572
Certificate serial:       01A163462782600A9E3AC16944F42F98663B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
Manifest number:          17D1
Signing time:             Thu 22 Oct 2026 11:01:44 +0000
Manifest this update:     Thu 22 Oct 2026 11:01:44 +0000
Manifest next update:     Fri 23 Oct 2026 11:01:44 +0000
Files and hashes:         1: MNjnhXm-X8Hr0m1FHNhPNeqizN4.roa (hash: raAdAgwgOSAOE32N6oyH/Cjh2N1jq2esG0G8eaE+sBg=)
                          2: VGfbO2AoEkVgiEe7eol8Fa0FJHI.roa (hash: Gg/sfmzaxHzq46KeR5IMMhXbjJpGims7dj0ED45jROU=)
                          3: VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl (hash: dBFkwJgSUjlwUs5TwmPHB9C7aE+9mzw/E/hPKjrbiEg=)
                          4: ZTjij_xarY3uSsETPrHbCQMjDbc.roa (hash: xPTovrvehpwr+F/o3Md/DIUCvNOGAiWZfmbE0SFBPKU=)
                          5: kADVg105h_GWzfxThtyA_fhTqC0.roa (hash: LC09wEDqsrJf0AUeaUkaZqlAVX+H70zFJW/aF5Y55P4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 08:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:63:46:27:82:60:0a:9e:3a:c1:69:44:f4:2f:98:66:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55d5dc9e220112a27c152bc32389038974ae4572
        Validity
            Not Before: Oct 22 11:01:44 2026 GMT
            Not After : Oct 23 11:01:44 2026 GMT
        Subject: CN=d39b79b5b179b50112916694af301f268ccf3ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:34:41:b2:d2:19:83:8d:2c:41:65:59:16:3d:
                    2e:b7:08:85:fe:7c:74:7e:2a:c1:54:1b:7a:3a:d7:
                    57:dc:4f:96:82:48:b9:37:67:3e:0e:7b:cb:78:d7:
                    29:f7:9f:6b:67:15:2a:0b:53:c2:7a:52:ce:01:ee:
                    3b:a9:b0:b1:2d:6f:d8:13:2e:fa:90:94:3b:2f:4d:
                    cf:41:0e:ff:ba:e1:3b:1c:d4:4f:57:61:f2:95:cf:
                    98:ab:b2:a8:8b:b8:41:b9:0d:8b:ae:96:8a:5a:0b:
                    fe:3b:4b:7d:17:4b:3f:39:fb:c6:5d:b0:85:04:91:
                    b0:02:f0:a0:4b:66:71:6e:7a:e2:ad:64:89:91:71:
                    15:65:f9:51:12:33:71:20:68:5d:f8:9c:33:7a:bb:
                    34:0f:bd:76:86:34:10:96:82:1a:5c:de:9b:38:be:
                    62:b3:73:66:7a:3d:99:b6:f0:39:a9:52:19:9d:fe:
                    bf:bf:5a:62:93:b4:24:23:9f:c0:35:50:24:a8:0c:
                    cb:53:f1:01:9d:9b:d5:64:3c:2a:0c:c3:7f:da:63:
                    0e:86:fd:15:da:bd:81:8d:d4:be:67:00:8e:58:08:
                    17:0e:6f:48:d8:4a:4f:06:0c:38:6b:31:d9:d2:aa:
                    00:15:a6:eb:3f:27:99:8a:1d:9d:fd:42:b4:c6:bd:
                    f1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:79:B5:B1:79:B5:01:12:91:66:94:AF:30:1F:26:8C:CF:3C:CF
            X509v3 Authority Key Identifier:
                keyid:55:D5:DC:9E:22:01:12:A2:7C:15:2B:C3:23:89:03:89:74:AE:45:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VdXcniIBEqJ8FSvDI4kDiXSuRXI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/d8ed41-71f6-4bb7-a3ee-a0bb140a596e/1/VdXcniIBEqJ8FSvDI4kDiXSuRXI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:40:af:cb:0f:ba:98:85:a9:ff:f0:d3:73:8c:46:5f:7d:0a:
         ff:b9:64:74:12:42:d4:2e:13:6b:05:e7:98:55:54:bb:9e:36:
         14:0f:09:a7:3b:2e:61:18:f3:e9:55:e0:b7:96:bd:d8:10:17:
         80:f9:bc:cd:5b:7d:1a:b7:2c:00:7e:e0:db:1e:3e:f6:a9:99:
         2b:d7:cd:d2:17:f5:f2:27:89:8f:35:ee:21:54:7d:c7:f3:15:
         e4:41:09:4d:f8:5e:bf:de:96:1c:bb:13:99:2c:d4:bf:73:ad:
         41:08:e2:a6:7c:b9:df:cb:4c:d3:46:15:d1:85:75:8d:4d:ee:
         9c:e9:c8:ac:03:b5:83:5c:24:fa:e0:ea:9d:95:82:a8:9f:6e:
         70:64:bc:a6:ca:f6:54:5a:d8:90:1d:4b:91:6b:f7:76:61:34:
         76:36:dd:06:eb:1a:e4:c3:d8:e0:ed:5c:c4:73:ae:ea:45:73:
         10:e3:fd:2d:e5:2a:32:5b:f2:ad:0a:cd:36:0a:78:53:6a:29:
         a4:cf:ae:c5:36:93:71:18:0f:cd:f9:4f:3d:47:d3:9f:6e:4f:
         94:35:6e:0f:72:c1:73:0a:b5:40:1e:0f:62:fc:e3:5a:fb:a4:
         33:4c:32:02:09:d9:b9:93:b2:da:dc:20:d8:b7:5e:a4:4d:7b:
         8c:0e:83:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:20:37 2026 by rpki-client