Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File:                     1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier:          pfzCkzYK2NL4yIbsqteD9IdgnWtK58rzB4KFALt09H8=
Subject key identifier:   CF:F9:61:67:0A:5A:10:04:E3:7F:55:E5:02:5E:23:3B:20:63:93:68
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer:       /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial:       01A08C7A8B2C52667B33C9A8BF6A7F2432F8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number:          0E00
Signing time:             Thu 10 Sep 2026 18:00:36 +0000
Manifest this update:     Thu 10 Sep 2026 18:00:36 +0000
Manifest next update:     Fri 11 Sep 2026 18:00:36 +0000
Files and hashes:         1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: 0jOCMJfnWR5tpQvffIpJVg1/0ZCdnvyK74wnKd2+z34=)
                          2: WOVURcgrOmo7CFBcFUmHZlO20Y8.roa (hash: wePf8ahRzSpTcfeEJN249YcPQyh2uGg5TQezwCJoWwo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:7a:8b:2c:52:66:7b:33:c9:a8:bf:6a:7f:24:32:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
        Validity
            Not Before: Sep 10 18:00:36 2026 GMT
            Not After : Sep 11 18:00:36 2026 GMT
        Subject: CN=cff961670a5a1004e37f55e5025e233b20639368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:08:1d:fc:c3:20:fe:33:ca:8e:75:d1:ab:24:
                    d0:1e:57:cc:a3:4f:1c:04:da:90:46:ad:f0:f7:49:
                    d5:e5:5a:47:52:34:d7:88:da:91:77:0e:ad:12:fb:
                    c1:3d:22:6f:b4:31:6e:3e:b6:be:3c:6b:ab:39:a9:
                    78:34:d3:cf:20:e4:43:22:b5:c7:2a:a9:d1:7a:2d:
                    a4:d6:e1:7b:62:eb:1b:9d:97:7d:c4:13:cd:9e:e0:
                    08:bf:c5:0b:31:e2:db:94:15:28:2f:77:78:18:73:
                    f8:3c:69:a0:c1:f6:af:52:1b:ca:5a:fd:9f:43:bc:
                    8f:aa:b9:fd:cf:69:50:0f:b7:ad:5a:cf:f0:a1:cd:
                    de:3f:64:f1:f6:50:b1:a4:da:c4:19:78:6e:f4:59:
                    ec:d0:b4:19:39:05:42:f0:41:01:30:9b:a9:11:15:
                    c4:4e:96:37:59:8c:18:d6:75:0f:8f:63:4d:39:c8:
                    c9:4d:35:81:81:47:4d:30:ff:d2:b4:76:ce:43:26:
                    26:21:ad:d2:d8:b2:79:70:c8:c2:dd:1e:15:b2:1b:
                    36:df:b5:a1:2f:db:8f:56:4b:67:3c:18:a9:b9:8c:
                    49:3b:54:8a:2a:92:ab:e1:fb:b8:5a:5b:0e:bf:52:
                    ab:12:11:25:ea:56:ec:02:c4:d2:56:7b:2e:9f:01:
                    b0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:F9:61:67:0A:5A:10:04:E3:7F:55:E5:02:5E:23:3B:20:63:93:68
            X509v3 Authority Key Identifier:
                keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:24:83:b1:8f:a5:d7:10:af:2a:ed:4c:f4:44:e7:72:02:0c:
         f9:80:f7:b1:fd:82:34:70:8d:a9:75:08:94:e3:05:e0:df:92:
         93:b6:95:2b:64:1c:48:77:3b:9f:19:9b:f7:e7:dc:26:2c:29:
         f3:0a:08:bb:d8:2e:79:8d:ce:2b:02:a2:39:47:6e:55:2b:2a:
         c4:85:7e:e3:34:42:ce:4a:f3:5e:d4:d5:4f:f3:07:bb:67:bf:
         92:13:49:7b:33:f8:d2:6b:13:37:5a:35:6d:65:81:21:38:dd:
         fb:f0:10:34:5f:7b:ec:3a:88:9a:73:f3:fa:b3:d4:e8:9b:95:
         70:94:b5:10:38:6a:a1:90:57:1d:1f:3d:66:8f:bc:36:75:68:
         6d:47:12:ff:c8:4e:da:56:09:40:88:01:33:02:68:8a:bd:45:
         72:f6:8f:7f:91:68:3d:ba:f2:2a:1e:c8:ca:08:5b:a3:bb:6d:
         b8:b1:8a:ce:53:a1:83:f6:7f:e0:02:eb:50:d2:bd:b2:92:d3:
         f2:37:84:79:fd:97:e2:99:01:12:44:3e:59:fc:20:30:15:3a:
         b9:3f:63:56:09:0c:36:a5:8d:21:1b:85:d4:fb:e3:12:c0:37:
         9c:50:ae:a1:dd:a0:48:6d:bd:c7:ca:40:c8:d4:db:24:c7:ef:
         d4:20:05:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 19:56:04 2026 by rpki-client