Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          ihDYD8lI2meqWVDftfhokqlxA+F1JDVNdA6CflYqmoM=
Subject key identifier:   81:38:B1:35:1E:44:0B:47:30:84:D9:4A:44:E3:5A:A4:8C:AF:FD:0A
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       01A0D8725068ACD3FC396E3F38BA73CB5698
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          1087
Signing time:             Fri 25 Sep 2026 12:02:45 +0000
Manifest this update:     Fri 25 Sep 2026 12:02:45 +0000
Manifest next update:     Sat 26 Sep 2026 12:02:45 +0000
Files and hashes:         1: 6QCuJE4Z9tBspjN9V1gBytZoNUE.roa (hash: MEiA6gsd/MEAEpgdK+FF9ws85S7cLUNxRFwqXLY1XZ4=)
                          2: YXyKSQA62yKkb7oIprfQWpNYq5k.roa (hash: 2S/w+1qpceETf27eC9DVFe1O3Yuo2aVT1QqWaFNm3nw=)
                          3: fR8Sj7qPvSsegrc5cvXE_3c58VA.roa (hash: valE9KfmP8wJDIQ+h1QKYZFv8JH48MGyAU5h4M83KlM=)
                          4: h2fFhltE1j4W1TzV3SImbYKEr0o.roa (hash: X5kjZcwd4ieoyDROQzqJxZ1Df7FtqvD2AkJ0544uHm8=)
                          5: hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa (hash: 86deeND43J6o/LVaKUcKau2VOr6OHvLSqsJsfXpJwdk=)
                          6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: vSayOwgcNOgRRsLHu5biwxq61ZAudPPtOqkZwhGHZew=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:72:50:68:ac:d3:fc:39:6e:3f:38:ba:73:cb:56:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Sep 25 12:02:45 2026 GMT
            Not After : Sep 26 12:02:45 2026 GMT
        Subject: CN=8138b1351e440b473084d94a44e35aa48caffd0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b7:de:ae:f7:ca:84:f9:9a:45:ab:21:2f:2a:
                    9b:fb:92:f9:dc:99:4f:e0:33:70:a8:07:d7:73:13:
                    7c:1b:6c:70:3a:32:95:95:f6:4d:e0:c0:7b:9a:1a:
                    1e:a8:85:b3:93:52:4a:7d:17:e6:dd:37:68:29:47:
                    95:c0:12:79:3a:7f:a3:6c:3c:cd:19:e8:41:47:29:
                    28:f5:0c:60:0a:68:c0:79:69:97:43:74:b5:67:8d:
                    b9:ac:2f:ea:3d:55:bd:ce:5b:6f:fd:72:19:3a:5a:
                    b7:73:69:28:cf:a5:df:0b:f4:bc:3c:78:b9:8d:fb:
                    36:29:b2:19:22:03:93:2b:0f:05:9e:c8:b5:17:3c:
                    4e:9a:f0:ee:a5:3a:20:b3:b8:50:c6:65:d7:33:e0:
                    d4:d1:6c:fe:c9:4a:9f:fb:96:4c:c0:6d:34:42:3e:
                    72:49:6e:53:19:80:a5:b5:47:33:77:1a:0b:b6:aa:
                    c8:0a:2f:2c:94:73:f8:7c:e1:9f:ad:c6:50:7d:63:
                    d8:bd:e8:91:7c:b2:44:80:21:ac:66:15:20:e0:af:
                    01:0d:02:73:77:2c:14:23:fb:e8:35:86:85:ac:35:
                    ee:fe:f3:17:77:f7:15:30:8d:cf:b7:98:db:af:e4:
                    fb:81:66:98:13:98:f0:36:7a:8d:60:f4:19:0c:a5:
                    83:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:38:B1:35:1E:44:0B:47:30:84:D9:4A:44:E3:5A:A4:8C:AF:FD:0A
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:60:53:ca:39:21:8f:f5:68:a9:bd:56:27:94:1a:07:d7:
         e6:41:ce:33:5c:d2:3c:52:00:93:da:67:8a:8d:90:1a:a9:13:
         1b:44:59:ab:16:a9:db:30:5f:fc:26:4d:2d:14:1d:19:f5:c6:
         3b:d5:f5:a6:f6:a2:9c:ac:ef:54:84:2d:e2:db:dc:2a:36:5b:
         5d:e6:15:65:c0:39:a9:a3:04:b2:0b:81:16:7c:d8:4b:37:7c:
         ce:a0:7e:47:6b:a0:90:4e:a5:26:4b:44:8c:82:21:27:67:6b:
         9a:8e:3e:d8:29:f1:85:f6:a7:49:7d:2c:50:e7:2e:90:3e:20:
         cf:e6:a2:61:fd:e2:ef:96:20:09:ef:6f:66:15:e9:f1:38:08:
         fe:c6:47:28:5c:d6:74:ab:1c:b0:3b:ca:20:20:26:2e:ff:55:
         d6:bb:39:88:b2:18:7f:66:97:de:19:20:91:7b:1c:98:64:4b:
         e7:a0:96:2c:1f:78:f6:cb:6b:ac:1c:0a:67:1b:3f:d3:10:d1:
         c4:e1:6f:99:61:f4:e9:43:a2:90:a4:eb:47:2b:7d:84:b1:93:
         ac:9c:92:a3:cf:08:79:9c:b7:9c:6f:e8:a7:67:ec:12:30:c3:
         06:04:b5:9d:d7:88:d1:b4:0b:b3:00:7f:0c:8a:47:91:d2:5a:
         cf:b7:34:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 15:30:41 2026 by rpki-client