Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          Jt282GmlJDhFDtSeZuUcGXNG3WysnmkZD/C9WFaM8kQ=
Subject key identifier:   20:C7:A7:3C:9B:8E:80:72:12:8F:1E:6C:BF:BC:D7:F2:35:00:25:3C
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       01A0F97CB5C6DA200A4139162772882AB19A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1A12
Signing time:             Thu 01 Oct 2026 22:01:34 +0000
Manifest this update:     Thu 01 Oct 2026 22:01:34 +0000
Manifest next update:     Fri 02 Oct 2026 22:01:34 +0000
Files and hashes:         1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: VJwq64DVGxtdPMm44cjxXskE/HyOYu+wkcqkWn64TZE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 02 Oct 2026 16:22:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f9:7c:b5:c6:da:20:0a:41:39:16:27:72:88:2a:b1:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Oct  1 22:01:34 2026 GMT
            Not After : Oct  2 22:01:34 2026 GMT
        Subject: CN=20c7a73c9b8e8072128f1e6cbfbcd7f23500253c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:21:ef:39:c1:c0:4d:92:fa:f8:54:fc:9a:
                    f5:f2:81:af:90:1c:ff:fb:a0:29:a7:2e:41:c8:e6:
                    bf:de:bf:9c:5d:04:6a:b4:3c:2c:e6:26:12:e1:ad:
                    b5:f4:56:45:43:a6:8a:2f:4d:34:22:68:f9:6c:e0:
                    da:d8:e9:33:70:19:9d:79:c9:f6:ef:a5:bb:65:51:
                    85:71:e6:15:1f:68:a7:68:84:e3:6a:12:d5:88:e4:
                    f1:a9:6f:ec:06:56:29:ec:48:84:30:c9:8b:66:c3:
                    bf:32:03:fe:1a:48:4c:6b:3f:e1:bb:3c:d9:8a:f7:
                    ee:92:3a:72:36:a9:06:7c:78:a1:a6:e8:fd:54:f0:
                    6d:f3:3f:4c:70:9d:d4:c4:3e:24:b2:bb:da:d0:2b:
                    3c:86:91:29:61:73:0a:40:26:8d:9b:2f:9b:25:57:
                    63:44:94:c6:67:cd:6e:ba:00:84:17:f7:e6:74:44:
                    f9:5c:4f:cf:fa:04:2d:60:d9:c1:de:91:cf:34:e1:
                    46:b5:62:de:cd:4c:99:2c:77:9b:a0:e8:7c:56:99:
                    9d:3d:d0:0d:97:74:eb:bf:2f:43:e4:5a:ab:a7:f8:
                    e0:16:6a:13:ec:a6:89:2f:33:a9:f3:25:fb:03:91:
                    d2:25:08:0e:ff:38:b0:77:aa:b7:07:34:ae:1b:c5:
                    29:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C7:A7:3C:9B:8E:80:72:12:8F:1E:6C:BF:BC:D7:F2:35:00:25:3C
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:79:19:ad:1b:3f:5a:13:8a:bc:f5:54:bc:d1:6f:d4:17:22:
         f9:a4:8e:3e:bc:0e:c7:37:53:51:b9:ad:38:f0:ba:be:b2:52:
         53:c1:79:93:20:fe:b9:2e:d9:53:02:bc:eb:ea:da:6a:e5:ab:
         b4:17:57:e3:23:33:91:1a:5f:6f:b6:bb:0a:57:ee:b3:0e:a5:
         e7:49:d7:bf:8a:95:90:52:42:7a:66:ae:f0:a2:42:d6:74:bb:
         ce:6c:8e:88:39:32:1f:bf:ac:e4:0e:6a:28:6c:4b:81:1c:26:
         af:f2:f2:5e:8f:84:99:86:52:54:66:2d:c8:94:07:d3:8d:e3:
         99:3e:8d:68:92:25:ee:67:b7:a1:85:97:9f:f9:56:48:21:d9:
         45:07:e2:43:ce:3d:23:a8:a2:2b:13:30:cb:97:ce:73:9b:3c:
         86:d4:1a:49:84:51:c6:0b:68:09:d8:51:a4:76:fd:0e:e9:e1:
         43:dd:bf:d7:ae:87:46:20:3d:88:d9:09:9b:07:82:31:33:9a:
         52:e6:fb:7f:29:31:1f:f6:ee:e3:73:4a:48:08:c7:0e:cf:90:
         84:73:10:21:c4:a0:df:e2:22:6b:1d:c0:5a:f0:b0:1e:a9:94:
         c0:63:ba:01:8f:d4:a2:be:c5:5e:c1:24:3f:2f:39:b6:25:45:
         23:a5:10:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 08:31:39 2026 by rpki-client