Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
File:                     VrTLQmw_QCVQIcng1H3IMBequxM.mft (raw, json)
Hash identifier:          eBd+Kt378F770Rcj8bCMXA0XvdvpDrbyfe17rC9nyuw=
Subject key identifier:   64:FE:A7:C1:74:40:39:91:EC:D4:0B:49:58:9C:AB:FC:0B:EC:8A:DA
Authority key identifier: 56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13
Certificate issuer:       /CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
Certificate serial:       01A10549D6031D4582D540DEC45167B6D0A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
Manifest number:          47
Signing time:             Sun 04 Oct 2026 05:01:27 +0000
Manifest this update:     Sun 04 Oct 2026 05:01:27 +0000
Manifest next update:     Mon 05 Oct 2026 05:01:27 +0000
Files and hashes:         1: VrTLQmw_QCVQIcng1H3IMBequxM.crl (hash: t57iZcI/j7NN6yPN/3OsTGn1b8hnev3lbOpUdG6ujNk=)
                          2: cbod8T-kZlikRq3LeFGefidEURA.roa (hash: aSy5zxb/U6h4osrQnmgMwfZXWE/lcFtOIfKr5xh6JnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:49:d6:03:1d:45:82:d5:40:de:c4:51:67:b6:d0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
        Validity
            Not Before: Oct  4 05:01:27 2026 GMT
            Not After : Oct  5 05:01:27 2026 GMT
        Subject: CN=64fea7c174403991ecd40b49589cabfc0bec8ada
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:26:fd:3d:58:be:19:32:8a:dd:62:51:46:20:
                    6d:b6:96:a2:14:ab:4d:81:ce:b6:2a:65:06:65:2b:
                    c7:b3:31:36:89:2b:72:3f:e3:e1:78:34:8c:3f:64:
                    cc:4f:27:42:4d:86:22:af:b5:a0:b7:7c:7d:78:ef:
                    47:d0:ce:55:84:94:a5:c1:e8:ae:d7:f5:8c:b5:6b:
                    60:40:55:27:2b:a7:e1:52:17:33:49:9b:8b:01:40:
                    dd:ae:0c:da:14:21:42:dd:c5:a3:50:50:ed:bd:bc:
                    16:aa:dc:aa:ce:93:8a:69:09:9b:97:d7:de:00:ac:
                    b6:8e:fc:89:95:c8:92:56:f1:38:1d:a9:f2:95:7a:
                    bf:c3:b8:ef:4b:20:54:b2:69:fe:ad:6f:42:86:83:
                    85:20:8b:0c:15:b4:fc:1c:2c:1c:2e:de:25:6d:ee:
                    e3:50:19:dc:cf:1b:a0:6e:1d:c5:cc:93:c5:b2:8a:
                    e5:56:39:f8:3f:fa:85:c4:8a:ae:2d:cc:6b:2a:2d:
                    3b:ae:e0:43:7a:bd:4e:24:17:03:c3:0d:0e:cc:20:
                    77:3c:38:1c:01:43:72:7d:b3:a1:cb:94:32:41:fc:
                    9c:b4:07:8c:7d:6b:c2:8a:48:88:0a:86:a9:bf:88:
                    d4:c4:c3:82:e8:21:74:a2:9a:91:68:69:f0:1e:4a:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FE:A7:C1:74:40:39:91:EC:D4:0B:49:58:9C:AB:FC:0B:EC:8A:DA
            X509v3 Authority Key Identifier:
                keyid:56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:9e:24:83:3c:96:56:18:7e:9e:02:49:7c:cc:99:82:f0:18:
         cd:32:95:d3:87:02:a7:26:4e:20:bd:a3:d7:a3:81:a9:49:ac:
         55:aa:60:a5:f0:ca:ce:76:16:10:db:90:09:9e:c4:13:ec:a0:
         02:cd:07:11:16:82:64:78:f1:64:f9:e6:ae:43:37:01:8b:db:
         b9:c5:84:20:1b:d1:ab:0a:17:cd:2b:bc:a8:e9:aa:41:bb:4c:
         ae:eb:56:e9:f3:1b:cf:f6:1e:38:8d:9a:78:df:25:a5:9a:bd:
         64:dd:24:0f:89:09:dd:f0:08:e8:6b:dd:94:be:72:fa:02:10:
         7d:d3:4a:53:aa:b9:e5:c7:ba:e2:db:c8:19:18:8b:2c:c8:d6:
         6f:42:26:e9:f0:55:8b:9d:d6:1c:e6:d6:94:05:59:27:39:bb:
         55:d8:ed:38:a6:56:24:08:3a:92:0f:15:f5:bf:de:61:f4:1c:
         5a:15:30:28:78:1f:b8:14:a5:a4:a6:4b:20:c4:d6:9b:26:84:
         27:a2:bd:91:e5:0f:35:52:d2:02:aa:75:c2:ea:ba:4d:ac:eb:
         19:5e:61:ee:6b:ae:6e:dd:79:38:7f:5a:2a:10:b8:0b:b5:ff:
         20:fc:6a:6b:48:1e:87:e6:2a:3c:2c:55:9a:d9:f0:b6:8f:2e:
         24:a5:3f:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 10:20:03 2026 by rpki-client