Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
File:                     VsEHoT1YB7eS96VXsvutWPlEoZ8.mft (raw, json)
Hash identifier:          AhkDG4hsFDvFPN6cz7X427aahSUbktje8/cd3t43tqw=
Subject key identifier:   57:12:62:2F:14:CD:A0:D3:89:90:EF:D9:BA:8B:14:F9:0D:A1:DC:03
Authority key identifier: 56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F
Certificate issuer:       /CN=56c107a13d5807b792f7a557b2fbad58f944a19f
Certificate serial:       01A17BBB60DAFBCD17654D930DB7DBC8697B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
Manifest number:          12EF
Signing time:             Tue 27 Oct 2026 05:00:39 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:39 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:39 +0000
Files and hashes:         1: VsEHoT1YB7eS96VXsvutWPlEoZ8.crl (hash: HOq1HJ18cktq5uUKemJpN+EpXvtOFjvEplZ3vFhJeWw=)
                          2: qwRgsQyWceddvM_GZ0mcBzGmfsw.roa (hash: u5m7OeUQAJztt6tYqPBa102kwAghmU7lU7GBR2CQZGI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:60:da:fb:cd:17:65:4d:93:0d:b7:db:c8:69:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c107a13d5807b792f7a557b2fbad58f944a19f
        Validity
            Not Before: Oct 27 05:00:39 2026 GMT
            Not After : Oct 28 05:00:39 2026 GMT
        Subject: CN=5712622f14cda0d38990efd9ba8b14f90da1dc03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:e4:7d:80:8c:09:86:86:2c:19:47:64:8e:bb:
                    6a:98:d8:1b:f1:de:52:39:67:6d:1f:d2:3b:21:7a:
                    4f:9d:ad:e8:df:44:90:69:b9:b6:90:20:6c:f7:d4:
                    76:72:f4:32:28:45:b4:ea:4a:47:8a:a3:d7:57:a5:
                    73:ef:40:aa:c6:a3:07:0d:40:4a:95:b6:9b:b8:51:
                    20:f6:3c:48:13:70:d3:25:34:f0:67:b5:9a:0c:37:
                    1a:33:50:7a:53:90:12:0b:25:10:d2:87:de:49:e1:
                    55:7e:65:c8:f0:2e:fa:34:3a:1f:c6:92:83:3e:34:
                    78:bf:23:32:32:fa:2d:43:20:a4:dc:c0:43:e7:49:
                    ae:1c:c0:db:69:57:ea:01:e8:cf:b0:f5:9b:45:04:
                    8e:ef:d7:4a:e7:7b:44:8e:f1:13:e8:5c:65:32:6a:
                    0c:62:76:eb:98:44:fd:0e:fd:c1:dc:b0:23:13:c0:
                    ee:39:77:05:4f:09:b7:c8:19:0b:d2:51:b0:6d:76:
                    a0:06:9a:62:0d:04:61:17:55:25:34:8c:bb:91:a8:
                    57:f7:49:54:5f:33:61:08:1e:c7:df:be:da:b1:13:
                    ac:db:ee:09:76:f6:12:d6:d6:2f:92:22:26:d6:de:
                    de:ec:9c:8d:44:2b:3a:c2:b1:1e:2b:f0:2b:b2:74:
                    25:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:62:2F:14:CD:A0:D3:89:90:EF:D9:BA:8B:14:F9:0D:A1:DC:03
            X509v3 Authority Key Identifier:
                keyid:56:C1:07:A1:3D:58:07:B7:92:F7:A5:57:B2:FB:AD:58:F9:44:A1:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsEHoT1YB7eS96VXsvutWPlEoZ8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/01a0a1-94af-4a3d-a05e-f30e17454e4b/1/VsEHoT1YB7eS96VXsvutWPlEoZ8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         db:77:d6:e7:f6:f2:90:c7:ae:e2:41:c9:fd:5c:62:23:b0:2e:
         59:11:04:09:7e:de:72:28:35:68:05:0f:16:41:45:f5:3a:38:
         32:e0:0f:81:35:7a:f8:2e:28:48:2e:6c:e1:92:6f:59:3e:ff:
         f6:1f:6d:77:8b:a7:e3:8f:11:88:92:98:64:0c:e0:02:3f:64:
         44:ee:de:cd:ac:a6:c2:91:29:42:7c:fc:d3:ae:8b:38:bc:81:
         a2:14:f2:fb:01:3f:13:87:6e:8c:3a:18:4f:bb:47:5a:6f:a7:
         ba:08:ed:ab:05:07:1a:b8:34:99:50:aa:73:c6:20:d4:4d:a3:
         07:0e:42:31:d1:a2:fe:5c:ae:49:6d:72:f9:37:15:5b:d2:f1:
         64:fa:e5:a4:5c:9d:a0:df:30:62:ce:e4:44:c7:14:16:3b:a4:
         f0:b6:ab:48:72:77:eb:5d:b0:da:a3:4d:ef:83:33:e2:21:18:
         3f:27:5e:91:fb:cb:29:55:c6:17:cb:f6:fa:f8:02:8f:84:df:
         22:4b:13:fa:18:c2:51:13:66:8f:b1:aa:8b:19:40:c4:a8:f8:
         37:aa:2e:48:b4:94:76:f1:80:db:4b:9a:59:4c:38:32:66:8c:
         3d:a5:42:0a:63:a0:02:f5:33:f1:73:5e:90:73:9a:99:67:e2:
         c0:8f:ab:36
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7u2Da+80XZU2TDbfbyGl7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YzEwN2ExM2Q1ODA3Yjc5MmY3YTU1N2IyZmJhZDU4Zjk0
NGExOWYwHhcNMjYxMDI3MDUwMDM5WhcNMjYxMDI4MDUwMDM5WjAzMTEwLwYDVQQD
Eyg1NzEyNjIyZjE0Y2RhMGQzODk5MGVmZDliYThiMTRmOTBkYTFkYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquR9gIwJhoYsGUdkjrtqmNgb8d5S
OWdtH9I7IXpPna3o30SQabm2kCBs99R2cvQyKEW06kpHiqPXV6Vz70CqxqMHDUBK
lbabuFEg9jxIE3DTJTTwZ7WaDDcaM1B6U5ASCyUQ0ofeSeFVfmXI8C76NDofxpKD
PjR4vyMyMvotQyCk3MBD50muHMDbaVfqAejPsPWbRQSO79dK53tEjvET6FxlMmoM
YnbrmET9Dv3B3LAjE8DuOXcFTwm3yBkL0lGwbXagBppiDQRhF1UlNIy7kahX90lU
XzNhCB7H377asROs2+4JdvYS1tYvkiIm1t7e7JyNRCs6wrEeK/ArsnQl8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcSYi8UzaDTiZDv2bqLFPkNodwDMB8GA1UdIwQY
MBaAFFbBB6E9WAe3kvelV7L7rVj5RKGfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUt
ZjMwZTE3NDU0ZTRiLzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wMWEwYTEtOTRhZi00YTNkLWEwNWUtZjMwZTE3NDU0ZTRi
LzEvVnNFSG9UMVlCN2VTOTZWWHN2dXRXUGxFb1o4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA23fW5/by
kMeu4kHJ/VxiI7AuWREECX7ecig1aAUPFkFF9To4MuAPgTV6+C4oSC5s4ZJvWT7/
9h9td4un448RiJKYZAzgAj9kRO7ezaymwpEpQnz8066LOLyBohTy+wE/E4dujDoY
T7tHWm+nugjtqwUHGrg0mVCqc8Yg1E2jBw5CMdGi/lyuSW1y+TcVW9LxZPrlpFyd
oN8wYs7kRMcUFjuk8LarSHJ3612w2qNN74Mz4iEYPydekfvLKVXGF8v2+vgCj4Tf
IksT+hjCURNmj7GqixlAxKj4N6ouSLSUdvGA20uaWUw4MmaMPaVCCmOgAvUz8XNe
kHOamWfiwI+rNg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 15:14:50 2026 by rpki-client