Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File:                     vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier:          JtMF6lb9rTZQxD2wX43yEOAkGdTXzYzsJN1t1NLX13c=
Subject key identifier:   CB:CC:32:16:A9:72:0B:80:89:D2:0E:FF:0B:20:A1:32:E5:64:AF:1E
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer:       /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial:       01A0D94CA670055FD1B4AD5D9DFDD08B40E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number:          0DA5
Signing time:             Fri 25 Sep 2026 16:01:14 +0000
Manifest this update:     Fri 25 Sep 2026 16:01:14 +0000
Manifest next update:     Sat 26 Sep 2026 16:01:14 +0000
Files and hashes:         1: dk1G9hz2trfq5CaaUBMe9RcS93I.roa (hash: lH6gfT8/HMNpYY4aojCo2W76iGRxmIa0HJsfcgDAePE=)
                          2: qhONGSd5IFYRbbwCnUUSYxuM4Dg.asa (hash: BCb8sB5GLTFmhhkMyQdRLvCPQMUaxGs/b1hsVb1eovk=)
                          3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: Vv+GxAQVMjhGgWX4H/vj6Y+7BwTmApTDyDbYTHaSRzU=)
                          4: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (hash: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 16:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:4c:a6:70:05:5f:d1:b4:ad:5d:9d:fd:d0:8b:40:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
        Validity
            Not Before: Sep 25 16:01:14 2026 GMT
            Not After : Sep 26 16:01:14 2026 GMT
        Subject: CN=cbcc3216a9720b8089d20eff0b20a132e564af1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:d5:58:51:32:7d:18:ad:e0:eb:f5:2d:db:
                    c3:6e:82:0b:b4:2b:e6:e4:65:84:a0:72:f1:4a:0c:
                    98:33:46:10:b8:19:b1:19:be:1b:ec:d1:a8:cf:0f:
                    f6:cc:3b:98:63:12:ba:b2:8e:49:76:02:b1:2d:3a:
                    51:9e:92:ed:37:43:36:39:bf:6c:b2:4a:74:b8:85:
                    fc:18:37:e3:24:cc:b5:ff:09:f1:4b:59:28:1f:e4:
                    a5:e4:3d:71:2d:92:20:c9:94:0b:ee:c0:67:00:76:
                    e5:d2:ec:69:aa:0e:84:c2:86:49:c2:c3:8c:a8:64:
                    9f:7a:99:15:70:ac:47:e0:33:26:6e:87:50:6c:a8:
                    45:02:22:5c:c7:31:6d:ca:b9:c7:84:93:0a:5b:63:
                    cc:88:22:69:9b:b5:82:d8:4e:a8:00:07:7d:b8:a9:
                    39:0d:25:c3:18:54:ec:33:1c:35:0c:b1:a9:46:07:
                    65:87:0f:72:ee:2b:6f:14:80:b9:9c:1d:8c:b6:74:
                    79:26:8b:0c:3e:10:b6:69:96:87:d4:76:62:f6:05:
                    06:4c:23:6b:a6:b2:ec:78:58:12:02:80:88:04:88:
                    37:42:ae:9f:43:83:10:04:73:e4:b7:72:6d:65:51:
                    c6:c0:6a:5b:dd:2a:4f:06:3a:a6:e4:d0:9a:79:ac:
                    e1:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:32:16:A9:72:0B:80:89:D2:0E:FF:0B:20:A1:32:E5:64:AF:1E
            X509v3 Authority Key Identifier:
                keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:90:88:fe:a7:8f:df:1a:ed:7b:05:88:c7:f9:44:a8:cd:a0:
         c0:19:99:93:9a:61:c6:ba:96:58:ef:8b:c4:df:ca:97:dd:64:
         c7:57:ee:c8:d4:48:2e:8b:92:27:24:df:40:b8:9e:cc:ec:db:
         74:53:80:ac:dc:0e:79:19:d5:e7:a6:63:80:e0:7e:9d:2b:e6:
         b0:56:8b:f4:c3:3e:59:aa:0e:0c:38:1a:88:60:ef:b8:9c:18:
         2b:34:79:d9:6d:5a:09:dc:73:96:30:27:eb:00:3d:6a:95:e2:
         e5:f4:40:90:8e:72:33:54:54:3e:49:9b:63:b7:87:ef:cf:64:
         f4:9d:5e:51:8c:38:32:32:59:32:c3:21:c4:19:fd:d8:e4:c4:
         f5:bb:68:65:e9:3e:69:73:55:ef:55:1f:48:9e:64:ff:17:ad:
         c4:f0:7a:2a:0f:28:61:20:f2:7e:2a:bc:d3:3b:1b:8d:aa:b4:
         b9:95:72:8b:8a:4a:ed:f8:20:b4:a1:b7:05:c8:dc:f4:29:cc:
         fc:5f:9d:e2:4f:c2:b4:15:26:43:bb:f0:44:fb:e5:fb:4e:ee:
         06:9c:4d:47:f1:ab:6e:4a:58:32:02:23:5b:99:a8:3a:8d:f0:
         ba:d6:fb:55:bf:95:eb:1d:29:29:1c:07:22:fd:3b:68:bb:2e:
         79:22:e0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:59:56 2026 by rpki-client