Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft
File:                     VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft (raw, json)
Hash identifier:          eAAj81KH6iIyejiaExeN5a9ThaVZAj8pFuzT5GtpjhA=
Subject key identifier:   0D:15:9F:4E:2B:DA:FA:C8:C3:8A:87:A0:90:EE:BD:55:1F:6A:A4:CA
Authority key identifier: 54:F8:4E:89:7F:64:59:AD:50:A7:FA:3D:B6:35:94:B0:17:62:BD:83
Certificate issuer:       /CN=54f84e897f6459ad50a7fa3db63594b01762bd83
Certificate serial:       01A135C7F6594370C2934E3880F3F82E4430
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft
Manifest number:          3A
Signing time:             Tue 13 Oct 2026 15:00:59 +0000
Manifest this update:     Tue 13 Oct 2026 15:00:59 +0000
Manifest next update:     Wed 14 Oct 2026 15:00:59 +0000
Files and hashes:         1: 9wiD7VD7Zc2lJtQM2lYp8HD0UQM.roa (hash: 3yefDG+ZCz70NwSPM2SIptMk8Td5Qs5y2VfYxiQR/N4=)
                          2: VPhOiX9kWa1Qp_o9tjWUsBdivYM.crl (hash: UI03dVuuvELouhm2XRmrvPB3cHUzQR+vCno141myi+8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 15:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:35:c7:f6:59:43:70:c2:93:4e:38:80:f3:f8:2e:44:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54f84e897f6459ad50a7fa3db63594b01762bd83
        Validity
            Not Before: Oct 13 15:00:59 2026 GMT
            Not After : Oct 14 15:00:59 2026 GMT
        Subject: CN=0d159f4e2bdafac8c38a87a090eebd551f6aa4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:cb:76:eb:79:0b:df:1e:c3:b4:1e:c9:95:ed:
                    48:c0:a6:0c:21:e1:73:46:ab:23:8e:71:ff:10:f1:
                    86:f5:51:98:47:75:ca:34:51:79:02:c9:04:26:22:
                    54:2a:e3:37:9e:b8:64:b9:39:17:30:fe:28:cb:7a:
                    12:1e:34:cb:38:48:56:b4:b8:83:d1:16:d4:fd:48:
                    dc:cb:82:76:b0:3a:dd:1a:5a:87:44:5a:32:72:a5:
                    e1:51:0e:42:5a:aa:ee:1b:e7:7b:33:98:79:4b:79:
                    45:1f:56:91:f9:e7:be:e5:b0:87:be:af:a6:1a:c9:
                    bc:5a:4b:5a:28:77:df:fd:41:ea:65:01:1c:b5:e6:
                    e5:16:91:75:81:df:49:86:d7:82:54:78:cf:cb:6d:
                    21:56:45:0e:bb:c1:ff:55:c2:6c:c0:d7:68:f2:49:
                    35:d8:cd:0d:b7:4e:e1:39:8a:6c:13:d6:89:bb:1f:
                    d8:d6:5b:e1:7c:a5:b4:c2:3b:23:81:6f:c0:72:e1:
                    6b:71:74:6f:75:de:bf:21:78:e3:d8:d8:b3:7a:41:
                    6f:65:f9:e0:89:8b:e2:20:f0:b2:8d:98:be:a8:e9:
                    8c:32:ed:5f:66:2c:d9:7a:7a:b9:a8:69:20:93:a4:
                    18:3c:1f:f5:57:0d:9d:d9:ed:5f:a5:ab:fd:16:fe:
                    10:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:15:9F:4E:2B:DA:FA:C8:C3:8A:87:A0:90:EE:BD:55:1F:6A:A4:CA
            X509v3 Authority Key Identifier:
                keyid:54:F8:4E:89:7F:64:59:AD:50:A7:FA:3D:B6:35:94:B0:17:62:BD:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPhOiX9kWa1Qp_o9tjWUsBdivYM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/011f8f-5ce1-4574-a8f9-9a8f0552649b/1/VPhOiX9kWa1Qp_o9tjWUsBdivYM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b9:96:96:09:c8:10:36:ab:99:88:4d:b1:d6:63:99:a3:44:
         25:5a:67:d0:14:75:03:4f:f0:dd:fc:ec:56:8c:6d:e8:5e:f1:
         06:93:07:3b:81:a3:11:42:96:0d:50:95:a0:78:34:bc:a4:1c:
         85:39:b2:f0:18:b4:63:74:c6:2d:83:c4:65:5f:74:d9:cd:bc:
         cd:c9:78:04:7b:e4:c4:f9:cb:3e:58:3a:67:7b:71:e8:5f:68:
         43:9e:07:48:6d:43:99:3a:c7:86:ee:45:81:44:ce:16:9c:f0:
         e8:d4:a9:1c:02:f4:ff:35:74:2c:1e:86:e1:72:f0:b3:de:ce:
         4e:de:8a:5f:f7:8d:2b:a1:6f:d5:56:72:9c:d0:38:8f:db:a5:
         9f:8e:df:a1:e7:97:97:6e:f7:4a:c8:09:1f:e3:b8:d1:a0:27:
         dc:6a:b3:8c:43:21:e2:f3:7d:72:de:10:a6:1a:66:ac:59:a7:
         7b:38:55:70:4f:0b:6a:5b:52:3a:32:70:bb:c4:3a:c1:c9:19:
         5a:99:7a:03:e0:00:7f:e3:5a:0e:76:cc:66:e4:5d:cb:f5:09:
         8a:4b:7d:e2:d3:59:03:fc:cf:76:a2:32:89:b6:23:e0:d0:ec:
         60:e0:a1:90:2d:ca:5d:49:62:0f:14:28:fc:ae:5d:cd:2b:f7:
         9d:2e:d8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:58:23 2026 by rpki-client