Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
File:                     veY2_1I-Xzc0In8zxEwuUP-NHuI.mft (raw, json)
Hash identifier:          3LIUKf53M8j/XjyaPZDUoyxK9W3nhFfXQvjbFWwpEpE=
Subject key identifier:   52:BE:4F:F4:A7:9D:F6:FE:EB:A3:59:26:95:BF:C3:24:AC:CC:62:10
Authority key identifier: BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2
Certificate issuer:       /CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
Certificate serial:       01A0DA5FD085B28097DFA3DAFC210CF8782A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
Manifest number:          0E0F
Signing time:             Fri 25 Sep 2026 21:01:47 +0000
Manifest this update:     Fri 25 Sep 2026 21:01:47 +0000
Manifest next update:     Sat 26 Sep 2026 21:01:47 +0000
Files and hashes:         1: 40PEkc-tm16gXqeqAbwomk4v-Yk.roa (hash: kAK1M/TYnJhlmuxrKwwSccKl4wPc1ihYIyT7lVRZWKM=)
                          2: FeRSaI58Ev-Ln_omefqDS1wpOcE.roa (hash: VtwF2AwRtjXtkXBam50V21xolPQHIDHrw5e0KXt9pQE=)
                          3: _rHEyFhBMkve8XY-2u_0M5SvUEY.roa (hash: 3MBR6pVJ71rnlILr1LVMBWKjPMEZiQ66W90KvCwSbpo=)
                          4: uAaaAwkHh37Yh7QiaeM24N_2cQ8.roa (hash: YODqMDn+FW1RXiU9YTO7+/jhAjNogHVA29ZzT3M5hD8=)
                          5: veY2_1I-Xzc0In8zxEwuUP-NHuI.crl (hash: 3zcVmg5eUd3J/RIVMCILJbklCe64oV+A+wzygryeElY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:5f:d0:85:b2:80:97:df:a3:da:fc:21:0c:f8:78:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bde636ff523e5f3734227f33c44c2e50ff8d1ee2
        Validity
            Not Before: Sep 25 21:01:47 2026 GMT
            Not After : Sep 26 21:01:47 2026 GMT
        Subject: CN=52be4ff4a79df6feeba3592695bfc324accc6210
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:94:73:25:1b:98:b5:74:ad:56:ef:22:5e:a7:
                    b6:3d:74:af:de:13:7c:17:30:96:50:1f:49:41:6c:
                    da:55:38:2a:ab:65:e8:92:36:18:e9:d7:60:d2:c3:
                    35:83:1a:1b:ad:90:50:cd:19:92:07:b3:ba:84:27:
                    ec:76:83:aa:4c:37:8b:84:6e:ac:b7:25:15:39:e4:
                    86:51:47:50:53:cc:89:9a:61:d9:4f:94:47:93:82:
                    18:09:44:9b:c3:ac:d4:65:fd:1a:6c:1f:3a:6d:ad:
                    63:f6:24:6c:d1:4b:21:6e:09:80:3b:08:8f:33:71:
                    6f:41:48:86:71:b6:fc:09:bf:ce:79:2f:ee:f8:07:
                    37:bb:39:b3:f0:37:73:f0:ec:3e:6f:2d:59:e4:53:
                    45:9d:2d:c0:08:75:19:a7:b3:42:c9:39:33:f1:2a:
                    f5:93:ce:47:ca:bc:a9:7e:0f:66:09:81:96:bf:1d:
                    76:b1:90:21:34:80:d7:2e:97:03:e1:8f:24:ae:ce:
                    3b:49:fb:02:9f:fc:96:15:0e:e8:07:d4:6f:41:46:
                    dc:33:cf:1b:33:d7:b4:72:5f:5b:7e:0c:ee:48:9a:
                    18:64:05:76:a1:a7:97:d7:15:a9:17:fe:42:5f:1c:
                    a9:b1:c8:b2:61:c8:1b:1d:1b:7c:1a:e9:5c:d3:5a:
                    ac:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:4F:F4:A7:9D:F6:FE:EB:A3:59:26:95:BF:C3:24:AC:CC:62:10
            X509v3 Authority Key Identifier:
                keyid:BD:E6:36:FF:52:3E:5F:37:34:22:7F:33:C4:4C:2E:50:FF:8D:1E:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/veY2_1I-Xzc0In8zxEwuUP-NHuI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/0c4392-2754-4e33-a02f-7bfb4381ab54/1/veY2_1I-Xzc0In8zxEwuUP-NHuI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:f8:18:88:22:63:6b:a9:d4:60:33:e9:a1:40:4f:dc:83:45:
         22:2d:b5:5a:2e:e0:b7:23:47:10:a7:77:49:01:7b:c9:c5:c9:
         30:96:3a:23:b2:7e:ad:99:0f:00:30:df:d0:1e:4d:bd:32:83:
         1d:3d:17:0f:d5:ff:66:c5:a5:1a:cb:ea:2e:9b:60:09:c2:d5:
         27:60:4b:df:d3:ca:24:37:f3:88:4f:f5:cb:0d:14:43:46:be:
         c7:8f:3d:e2:be:fd:96:56:15:9d:ef:a7:21:cd:a8:16:70:3a:
         c6:0e:19:28:68:11:d1:86:f6:93:14:f8:1c:32:a3:a5:6e:8d:
         04:1a:c6:3d:ef:4d:f5:c2:9b:61:b0:12:ca:6a:0c:48:a1:ae:
         aa:05:10:a8:94:77:66:62:13:84:16:3e:56:b6:a2:59:79:4d:
         9d:99:47:a5:43:fa:72:47:59:83:e0:75:d3:80:7c:09:25:91:
         66:86:70:ee:93:cf:1f:5d:f9:95:f3:c3:3b:1b:ae:df:54:4f:
         9b:79:52:a8:d5:68:0f:20:aa:8e:85:71:fa:9f:e5:55:90:75:
         c6:da:f0:27:87:6a:cd:ed:d3:1f:81:b6:a4:c8:b9:69:6a:24:
         86:1d:cd:43:a9:74:a9:7b:25:2a:fc:af:f2:1e:75:a3:57:1f:
         23:92:80:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:08:27 2026 by rpki-client