Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
File:                     0VoQmMXIU1yXWPEo2KCC33z4UQs.mft (raw, json)
Hash identifier:          LNR6xHYBfT+bJJ3bOtrY0ghB4bIBB4KLvVr54I/QmmQ=
Subject key identifier:   52:32:DC:C2:4D:51:AB:A0:66:0C:A9:6C:FD:C1:B2:31:72:B1:E4:3A
Authority key identifier: D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B
Certificate issuer:       /CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
Certificate serial:       01A13D811CF63682915234961CC609A115ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
Manifest number:          0D5D
Signing time:             Thu 15 Oct 2026 03:00:34 +0000
Manifest this update:     Thu 15 Oct 2026 03:00:34 +0000
Manifest next update:     Fri 16 Oct 2026 03:00:34 +0000
Files and hashes:         1: 0VoQmMXIU1yXWPEo2KCC33z4UQs.crl (hash: 2XWJlmZQxY7gwWE0F2fYlArtzstweue8sZsvmM1qukc=)
                          2: wivMN35KuEgnCPJ_N1vF1kAwlHQ.roa (hash: TSOrmsI98t/QypJ+zbHvGanluRz5oq6NnUNRBbmcaMw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 03:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:81:1c:f6:36:82:91:52:34:96:1c:c6:09:a1:15:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15a1098c5c8535c9758f128d8a082df7cf8510b
        Validity
            Not Before: Oct 15 03:00:34 2026 GMT
            Not After : Oct 16 03:00:34 2026 GMT
        Subject: CN=5232dcc24d51aba0660ca96cfdc1b23172b1e43a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ac:f5:76:57:e1:0c:c1:20:14:ae:82:81:30:
                    0f:57:a1:7a:f0:4b:12:91:a6:e5:72:2c:c2:47:3c:
                    f3:85:04:f3:ba:a8:c5:b1:3c:f4:ba:f6:eb:a2:d5:
                    0b:0c:eb:a4:a3:41:69:a6:09:80:ff:c5:e6:b5:b3:
                    f8:63:c1:ed:c6:a0:0f:da:b4:20:32:60:a8:70:55:
                    ce:5e:94:90:e1:4c:28:e2:54:c6:ec:74:f4:01:11:
                    ea:e5:e9:a5:4e:51:e7:04:b3:3e:30:e8:eb:e0:e7:
                    58:63:36:87:85:39:80:85:bf:6b:49:c0:32:12:ec:
                    36:7b:09:c6:7c:fe:8f:39:8d:04:68:79:76:1a:1d:
                    33:2f:49:38:8c:9f:f6:09:e4:0e:c4:f6:60:af:26:
                    6f:33:38:bf:e9:39:0b:7a:39:c6:f0:49:88:cf:f6:
                    c4:da:ce:43:dc:40:48:9b:08:ee:0a:28:ea:f6:50:
                    cc:5a:28:0e:5c:53:48:ce:1c:2f:25:eb:d5:c4:7d:
                    da:7e:c6:64:b0:ba:a3:34:c4:80:c7:f0:2e:57:e2:
                    de:92:4c:f3:c1:ea:b5:f0:18:93:fe:c7:91:ff:f8:
                    15:46:96:52:a2:5c:84:3a:6a:bd:b8:05:fe:d0:29:
                    35:f3:fd:94:9e:23:db:43:24:e5:de:7e:72:a6:08:
                    d5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:DC:C2:4D:51:AB:A0:66:0C:A9:6C:FD:C1:B2:31:72:B1:E4:3A
            X509v3 Authority Key Identifier:
                keyid:D1:5A:10:98:C5:C8:53:5C:97:58:F1:28:D8:A0:82:DF:7C:F8:51:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VoQmMXIU1yXWPEo2KCC33z4UQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/6c4021-0b67-4485-b823-0bddc80711ae/1/0VoQmMXIU1yXWPEo2KCC33z4UQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:b3:2f:66:0e:4f:b3:9f:67:cf:5b:9a:94:43:4b:4a:a9:27:
         5d:be:29:a4:17:11:16:e7:06:ab:21:c7:16:70:24:57:42:01:
         d8:49:f7:1d:59:68:79:5f:a7:5e:af:5c:86:57:a5:8c:7c:2a:
         05:9c:89:32:94:62:12:68:ad:62:43:61:70:dc:01:07:8e:39:
         1d:07:a5:75:fc:dd:af:f0:80:15:a4:42:3a:20:89:18:8e:63:
         95:6d:79:95:b1:70:fa:cb:d5:e4:5c:e7:39:0b:c8:3c:63:09:
         7d:0e:da:16:4b:d9:cc:bb:bf:13:3d:9a:1d:ed:d9:b6:f6:00:
         82:da:bf:03:db:95:6c:8d:0f:1e:6e:ad:76:61:df:49:cc:86:
         27:ce:62:bf:ea:3a:96:06:b6:db:e1:0b:d6:f5:98:a9:29:7d:
         ee:6b:93:34:1e:10:b6:54:44:ca:61:75:8a:d0:3e:cf:2d:0d:
         ce:ec:b1:26:31:f8:c6:5f:c0:0e:68:3c:56:0b:df:a5:9a:27:
         93:a4:e2:c1:98:24:1b:43:a3:13:05:d3:db:80:c6:3a:d2:2f:
         87:d6:89:ca:8b:e0:7a:c8:27:e0:eb:bf:1a:35:1c:63:c8:7e:
         8d:a1:2b:5e:2a:de:e5:3a:71:b6:d7:50:85:07:7c:e8:24:ae:
         0e:ee:ed:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:22:11 2026 by rpki-client