Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File:                     92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier:          YxNDbsJQSNp7mhe26GQTSWIbkIMEeR0j+RlA2uVNJT8=
Subject key identifier:   03:FF:44:D6:BE:30:4F:EF:06:31:42:BF:1F:B9:79:5E:FE:98:6A:03
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer:       /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial:       01A13E9466035B8909C5E130586CFAF13B03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number:          12BC
Signing time:             Thu 15 Oct 2026 08:01:15 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:15 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:15 +0000
Files and hashes:         1: 3RUzNJxN8N-FLHx-HBIM3ssFpQs.roa (hash: SC6R0zqJ1csv36Fng7Scp1JucKAec+aLRs2P091gAAQ=)
                          2: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: gY8AXv+/8tUXGi1MTAuU31oLCtISH86NxA1qzDBeBUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:94:66:03:5b:89:09:c5:e1:30:58:6c:fa:f1:3b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
        Validity
            Not Before: Oct 15 08:01:15 2026 GMT
            Not After : Oct 16 08:01:15 2026 GMT
        Subject: CN=03ff44d6be304fef063142bf1fb9795efe986a03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4c:b1:25:bd:82:a2:17:e8:2d:f4:7a:26:c0:
                    a1:2e:23:a6:88:b9:69:9a:33:e7:61:e9:e9:8a:b3:
                    66:d8:7b:f6:b8:15:88:79:3c:e2:60:36:41:fc:61:
                    a0:4d:65:d9:ce:09:18:71:22:aa:81:41:e5:a2:df:
                    ea:dc:5a:1d:d0:6e:25:10:e9:70:97:cd:cf:52:44:
                    dc:6b:7a:08:a3:fe:40:30:65:ec:ca:00:c9:2d:5c:
                    9d:68:7d:71:d4:9c:f6:f8:54:33:ac:44:62:75:f9:
                    a0:df:00:ef:56:2c:92:44:39:f7:ea:c4:f6:eb:53:
                    ad:06:31:fe:00:d4:a8:e0:f0:e6:04:2c:03:d7:48:
                    f6:b3:c0:5b:f8:90:db:4d:22:1d:a9:e8:6b:b5:b4:
                    3d:3a:d8:e5:97:e8:a9:25:77:90:7b:c5:c0:9f:9c:
                    ce:4e:c2:c3:53:64:b1:af:e1:ba:79:f6:54:03:d5:
                    66:95:08:d2:cd:71:17:34:e0:c4:40:f4:dc:7b:08:
                    2f:93:b5:5c:d5:c5:54:15:00:69:86:33:bb:73:e7:
                    a3:a4:66:3a:49:ef:2f:d9:f6:7c:c4:3a:64:6a:1d:
                    2e:54:4e:fa:80:5d:7d:63:16:cd:83:19:aa:6a:e5:
                    10:21:df:4d:dc:3e:2a:f7:65:64:a8:33:c9:41:7d:
                    b7:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FF:44:D6:BE:30:4F:EF:06:31:42:BF:1F:B9:79:5E:FE:98:6A:03
            X509v3 Authority Key Identifier:
                keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:73:15:f5:f2:7f:67:59:8c:f2:34:4e:3f:4a:54:37:91:f3:
         9d:11:46:44:39:ff:dd:98:ee:ad:29:21:2b:a7:46:6d:b4:95:
         ea:c7:e9:4f:e6:9d:54:a4:34:46:2b:04:05:33:60:42:92:fb:
         97:d5:53:45:28:e0:98:ec:19:b0:d9:43:b1:06:fa:d4:73:41:
         74:d9:76:6d:86:ac:41:b5:31:9d:10:84:f7:2e:26:21:7a:2f:
         83:c5:8c:26:3d:e2:f0:cf:21:d8:4c:8b:5d:08:a8:da:3d:39:
         e9:35:72:b1:d4:85:d8:87:19:78:5f:95:4e:99:83:7a:f9:53:
         64:dd:8b:27:f1:48:d8:9a:ba:f8:64:32:64:c0:04:3d:ef:cf:
         e5:c3:83:1e:3a:3c:69:ce:c5:99:81:e4:00:ff:c1:a9:81:4a:
         15:d7:de:c7:8e:9e:0f:84:06:03:e7:11:77:76:c0:30:b3:1d:
         9e:71:91:4c:cf:5e:ef:38:fb:f8:b2:e7:43:15:5b:1b:a3:08:
         a8:91:db:e0:4a:51:ba:c7:6b:44:d9:57:f1:9b:8e:94:b3:31:
         04:78:b4:b7:1b:52:de:5b:eb:90:40:26:3b:e8:04:0c:d2:e7:
         50:7a:f9:dd:a9:9e:85:99:bb:27:fe:23:58:0a:e2:73:96:14:
         19:7e:28:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 12:20:46 2026 by rpki-client