Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File:                     vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier:          FYdqmvtkQDGK7Yubq7SUQKMi8+ZxD7tFF/9Qucckejo=
Subject key identifier:   CD:4D:4D:C7:EF:D7:C1:6E:C4:AB:D8:42:DC:E1:F5:02:B0:F3:90:4F
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer:       /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial:       01A12466B7D70C7F1B69EACCDCC55B5ECA55
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number:          1A99
Signing time:             Sat 10 Oct 2026 06:01:13 +0000
Manifest this update:     Sat 10 Oct 2026 06:01:13 +0000
Manifest next update:     Sun 11 Oct 2026 06:01:13 +0000
Files and hashes:         1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
                          2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: f7BqwlJ8X9r/AhtmeBndLIxOyZKt4/uwSVZp1/jCSS4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:66:b7:d7:0c:7f:1b:69:ea:cc:dc:c5:5b:5e:ca:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
        Validity
            Not Before: Oct 10 06:01:13 2026 GMT
            Not After : Oct 11 06:01:13 2026 GMT
        Subject: CN=cd4d4dc7efd7c16ec4abd842dce1f502b0f3904f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:a8:54:df:e8:c4:ed:08:e1:55:04:6c:9d:56:
                    89:62:47:ee:92:71:87:35:76:a3:32:36:02:99:7d:
                    d7:75:bd:07:3a:4d:6c:1f:71:ab:71:3e:d6:66:38:
                    fc:08:59:8a:43:95:4c:a0:f4:14:3a:c0:ae:21:48:
                    2a:44:27:5e:8d:b3:e1:29:6b:c2:45:ea:af:4a:48:
                    91:c4:fe:ae:11:cc:25:08:61:86:50:a8:4c:3a:bc:
                    18:e2:66:9f:89:8b:f8:27:4b:1a:e2:d2:18:eb:2f:
                    91:19:ea:f9:5b:70:a1:ee:90:cb:63:b0:62:df:6b:
                    1c:69:95:55:9b:56:6d:04:b9:37:37:b3:4c:a4:87:
                    dd:d1:b5:cb:9c:8b:7c:c0:59:64:0e:c9:80:5e:fa:
                    fc:66:bf:2d:9c:a1:a1:be:6d:f5:24:f0:e9:30:a2:
                    2c:bd:05:18:31:2d:05:33:f9:00:15:a3:b3:e8:72:
                    e1:3e:a7:b4:5e:2c:21:e6:f6:76:55:6a:30:68:36:
                    11:66:6b:e8:e8:21:78:66:1a:ba:41:c3:41:0f:fe:
                    b6:14:99:47:d7:f1:52:95:a1:c3:11:da:a1:de:e4:
                    9a:fb:be:80:a6:88:e1:d4:33:22:5c:f0:15:08:00:
                    1c:3d:f1:81:46:5b:fc:61:15:2a:9f:9a:3e:2f:04:
                    e3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:4D:4D:C7:EF:D7:C1:6E:C4:AB:D8:42:DC:E1:F5:02:B0:F3:90:4F
            X509v3 Authority Key Identifier:
                keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:47:94:1a:66:1f:7c:64:13:49:dd:97:61:71:9a:c1:38:99:
         e0:46:88:c0:1c:87:49:ca:4b:61:91:41:c6:6b:16:e3:81:4b:
         d4:28:26:f4:e5:53:ec:08:80:0c:e8:8d:34:0e:79:3c:4b:01:
         d0:c2:00:c5:ec:9c:f8:45:54:1d:b9:a7:e1:55:47:9a:57:c2:
         00:4e:20:b4:c7:4e:f2:24:ca:d9:ea:89:d8:15:da:c6:0a:77:
         a6:11:fe:50:81:24:ae:50:08:77:8f:9e:57:ff:0e:4e:26:94:
         3f:5d:57:3a:fd:06:80:bb:3a:71:ac:43:fe:86:e1:3e:2f:11:
         37:fb:a4:53:6d:ad:51:c6:65:71:fb:3d:a3:1e:86:74:fd:82:
         e8:6f:82:62:fe:76:ce:a5:7f:5c:0c:c7:40:2c:0c:df:e4:8c:
         eb:88:5c:35:c5:23:81:a5:b5:53:ca:bf:ed:45:7f:37:70:b6:
         01:f6:d2:a3:6c:66:35:af:a5:e1:3a:10:f7:74:e0:30:25:9c:
         4e:9f:67:c0:47:e4:40:61:a0:28:4c:f0:60:20:24:69:3d:ed:
         17:e3:5e:58:36:0c:2a:5c:29:de:2b:17:d7:d3:6d:ba:4d:e9:
         98:75:2c:df:c7:75:d1:6d:58:4b:69:8b:45:e6:6c:37:78:33:
         ec:c7:2f:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:42:14 2026 by rpki-client