Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File:                     vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier:          kkY4dOPscO6Mv09Rp6dZdiOAKGHGAR8GTQJsqKqD+mQ=
Subject key identifier:   8F:51:D0:C9:35:97:0E:EE:E7:79:07:AB:B0:D6:6C:B1:BB:3A:40:7F
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer:       /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial:       01A002EFE4416AE837BBB63F663BD37D6D07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number:          1A09
Signing time:             Sat 15 Aug 2026 01:01:10 +0000
Manifest this update:     Sat 15 Aug 2026 01:01:10 +0000
Manifest next update:     Sun 16 Aug 2026 01:01:10 +0000
Files and hashes:         1: 2Vs8KUJ3ARsfzl5aenkyGCSy_lo.roa (hash: 8dxvcB3TSqVgvjogy5IQYglbYDvwwLxpsQ+qsiWMSlQ=)
                          2: 8YICkcy5MxdkFP4Ulv27x-Ip2YA.roa (hash: FjVwt2RS+W3bJxzVk95vARiv6Ttn05j7+22iJ3Ku7Y8=)
                          3: rGOh0aBSaJUcTjStlHDAvBi9GYw.roa (hash: 8mVUWl2qPU5MUsEWDFtGCEbrM6SO1p6D449zgLNKtAU=)
                          4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: TS3MJS2ytZ7Zk/Qok/ZNxL0jJ2yrbqWNZVm8e7e1aME=)
                          5: wC3BpEB8qdaKpa6CpGZXp4T9slk.roa (hash: IXG8fhcHEZ3Xyts0Msy3p2RYoLeCdjHeJU1oF2Pw3VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 01:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:ef:e4:41:6a:e8:37:bb:b6:3f:66:3b:d3:7d:6d:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
        Validity
            Not Before: Aug 15 01:01:10 2026 GMT
            Not After : Aug 16 01:01:10 2026 GMT
        Subject: CN=8f51d0c935970eeee77907abb0d66cb1bb3a407f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:24:86:49:74:31:d4:b4:d7:d3:cf:17:b0:e6:
                    26:20:68:83:ae:d6:c8:a1:96:6a:9f:e9:19:d6:fe:
                    ef:ba:13:ab:2e:14:cc:04:b8:86:7b:5f:dd:da:11:
                    43:0c:d1:bf:4b:4b:9f:81:f4:1f:9e:6c:93:4f:a5:
                    66:cd:1d:63:22:b9:21:b1:9f:72:9b:bf:ed:58:5a:
                    bd:51:65:91:bb:0f:ea:d5:14:9a:87:ed:e5:4b:7c:
                    a9:d9:40:6d:0f:75:43:8a:c0:8c:33:01:07:df:d2:
                    91:27:ff:1a:b9:05:03:b6:a9:0c:11:6f:ef:c9:f2:
                    38:6d:a2:1e:79:76:d8:4b:ba:de:8b:79:b6:c3:af:
                    ad:b3:ca:0e:7f:d4:dc:df:8a:81:8f:39:e0:d3:eb:
                    35:b6:39:95:e1:79:cd:3e:4a:01:3a:fd:6a:a2:51:
                    ae:9b:f8:9e:23:66:40:39:77:01:31:eb:bb:9c:7e:
                    85:97:1d:9a:8e:a3:81:55:5b:c5:ab:53:1b:3e:7b:
                    2f:2d:f6:41:b0:0d:d5:72:e6:2b:7d:74:11:a7:9c:
                    de:62:2c:77:ac:92:af:c9:88:41:7d:99:b4:08:ad:
                    16:39:ed:6b:83:90:97:ff:14:da:2b:33:1e:c9:4b:
                    bb:1b:5e:d9:49:fd:01:a9:9b:03:32:00:23:b8:1e:
                    5d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:51:D0:C9:35:97:0E:EE:E7:79:07:AB:B0:D6:6C:B1:BB:3A:40:7F
            X509v3 Authority Key Identifier:
                keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:c9:55:57:0f:25:76:bf:6a:5f:54:74:9d:c3:d1:df:57:63:
         5c:5a:65:9e:e2:81:a1:9f:5f:6c:ea:f6:0c:2e:66:19:1e:0c:
         45:1d:1b:13:67:82:e5:55:4d:c0:0b:f4:6d:35:f8:51:f5:3c:
         c7:c9:d1:99:ca:e7:25:2a:3c:0c:2c:22:54:53:f3:88:a3:4b:
         29:7e:ac:c4:3c:81:ba:98:2b:21:8a:38:8a:82:fb:2d:ea:07:
         e7:1f:58:5f:8c:10:be:c6:66:f8:a0:9f:9c:31:86:96:d7:9c:
         92:28:2e:4e:11:42:50:e9:70:ed:82:e2:59:15:29:d4:04:2f:
         00:70:75:eb:d8:c5:73:4d:03:a3:10:5a:09:d4:63:2e:8d:6e:
         65:00:64:f6:4d:f9:2d:1f:cf:6b:4d:22:52:14:fd:20:17:ea:
         ef:6e:5c:1b:09:3d:2e:d8:1b:e8:39:aa:e9:34:b3:05:c0:48:
         77:57:68:88:a5:4a:ef:73:fe:cc:0a:3b:7a:36:6f:72:e8:10:
         8f:1d:8f:8a:6b:27:e1:3c:06:4b:35:bf:90:c1:3c:d3:32:8e:
         4d:f1:41:16:ba:ee:89:24:a2:c6:76:69:7a:b5:41:bd:00:32:
         05:c2:c3:f8:21:6a:ab:74:f1:6b:7f:d6:8a:f6:50:81:9a:95:
         3a:c3:58:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:40:47 2026 by rpki-client