Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File:                     vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier:          nzMKvtP9iBnA5YJtFeAnYk8+1XXtSlTVZIooPgAEb7k=
Subject key identifier:   CC:29:E5:78:4F:E9:B5:5A:FF:3F:6D:36:9E:35:66:A8:F2:83:05:49
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer:       /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial:       01A0B61B11E7C243C52FEAFFF18847C5F6C6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number:          1AC2
Signing time:             Fri 18 Sep 2026 20:00:22 +0000
Manifest this update:     Fri 18 Sep 2026 20:00:22 +0000
Manifest next update:     Sat 19 Sep 2026 20:00:22 +0000
Files and hashes:         1: 8TA7t7HrUBV_MAyX5n-91LJHqkY.roa (hash: /S+gSBwTzcXM3LZzCzX/nuyybzqrF+WlaDQm17WzHkw=)
                          2: 9l2oclfmlLyGg_cZ5DedOdHOx8s.asa (hash: EriSD3YQgyQhumusVxuYLUf/vOtHLIHDjRPcfxqNXsw=)
                          3: LkIQdTCDAyRkTL--fns1mcSje7M.asa (hash: 7eizC5wFY7b2dkwAA5Tl7GOcBdql3G3vRPprad1SEao=)
                          4: QDmIW26JPLiCQPg0QkWFjA_yXvQ.roa (hash: lNF+nwAKLXvKgpTrABWuuKjeHqZ2vPmIOlH0x80veow=)
                          5: qxoyNmMUKUfyFkVyuAGZAM4YuT8.roa (hash: 32HDKvNSzbAK7fB6zWT8id6Yo7qRMY5K04pfmrZY4Ms=)
                          6: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: u8I8dYF6OfDKBuwOzz70Qvzc4efBWDXUxFBOVLYl6b4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 16:24:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b6:1b:11:e7:c2:43:c5:2f:ea:ff:f1:88:47:c5:f6:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
        Validity
            Not Before: Sep 18 20:00:22 2026 GMT
            Not After : Sep 19 20:00:22 2026 GMT
        Subject: CN=cc29e5784fe9b55aff3f6d369e3566a8f2830549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a9:5f:79:c5:ba:4c:56:4c:2c:0c:ad:69:09:
                    61:12:d9:b5:25:bd:16:64:e9:18:25:04:93:b1:39:
                    40:ad:8f:cd:8f:db:c8:c3:0e:36:66:ad:92:46:bb:
                    fa:5f:a9:03:f7:d6:b1:89:42:40:ce:fa:b7:3e:72:
                    4f:2c:63:8f:37:61:e7:4d:00:8a:f0:a6:0b:58:79:
                    10:ae:1b:b6:d2:9a:15:26:b5:6c:09:08:b8:51:73:
                    09:9a:ff:83:44:e8:b4:33:4e:bc:a7:b8:7d:e4:00:
                    11:4b:3c:eb:3b:1e:28:13:bd:ee:c4:00:74:85:cc:
                    40:71:7c:e0:9a:59:89:e5:b9:78:25:8c:8f:5b:56:
                    e1:6f:aa:1f:94:89:0d:2b:d8:b1:25:5c:e4:ea:ab:
                    e8:c5:69:80:e4:58:62:e9:fc:31:6a:1a:5b:20:16:
                    7b:7d:08:96:58:92:f1:ad:7a:32:a3:52:5e:4a:74:
                    ea:38:6b:b2:f6:66:0d:01:77:43:e7:d2:5a:e2:61:
                    40:5f:a6:c2:8d:01:92:43:97:21:6c:a9:ae:09:4f:
                    f3:b8:2d:dc:27:81:cb:47:64:b4:39:b0:28:c5:14:
                    4b:f6:de:b1:66:fa:73:ed:09:d0:b4:48:40:6b:53:
                    a9:bc:60:62:bd:4c:5b:f0:49:02:ab:cf:82:32:b4:
                    fb:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:29:E5:78:4F:E9:B5:5A:FF:3F:6D:36:9E:35:66:A8:F2:83:05:49
            X509v3 Authority Key Identifier:
                keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:72:bc:d9:64:89:3b:47:ef:b2:71:e6:26:b4:0d:fd:44:e3:
         27:5d:5b:3c:3f:e1:0b:89:3c:26:f8:4e:8d:4d:7f:0e:33:ff:
         52:04:a7:47:ac:96:ca:7e:8a:fb:fb:99:7a:e3:b3:aa:58:ad:
         4c:ab:77:13:2e:d5:2e:0d:78:06:f3:12:b6:82:24:87:5f:fa:
         f9:bb:91:e4:9c:5f:b1:c5:3e:1d:4b:4f:d4:17:ba:39:86:60:
         78:a8:ff:f0:49:77:13:07:06:49:a7:9c:e9:3c:bb:91:c2:6f:
         58:a8:4e:9b:4b:f2:ad:6f:21:95:fb:b3:19:9b:45:03:4d:73:
         25:ee:b5:e3:37:e3:b1:b8:ee:dc:e4:e4:9a:b1:3e:65:60:43:
         e3:24:3d:2a:2f:4f:4f:b6:90:b0:cb:7b:dd:46:62:eb:c8:73:
         65:49:a1:5b:76:20:44:b4:af:f1:13:a7:31:16:9b:1e:5c:b4:
         5f:a9:1b:4a:0e:e7:5b:7e:b6:72:aa:21:f7:95:57:83:9b:01:
         53:00:76:c8:52:6d:be:0e:8f:a3:f1:6e:c5:b6:ee:14:b0:e2:
         00:b5:bf:03:bc:e7:81:86:e4:97:1f:a0:43:c1:f5:65:e8:94:
         85:0c:fc:79:2f:8e:b9:75:4d:90:14:c2:c2:30:83:31:f8:d7:
         17:dd:ea:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 00:12:29 2026 by rpki-client