Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File:                     vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier:          AFmFvyzDArBsXbYY1zepVvSEB7qxbbTQDupcXXwCsPY=
Subject key identifier:   9C:2D:68:9C:9A:52:C6:D3:AF:64:83:70:1C:05:E3:1B:72:6E:FB:92
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer:       /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial:       01A12DA0799EFE5D07A877C6E18E1A1B00FB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number:          0551
Signing time:             Mon 12 Oct 2026 01:00:53 +0000
Manifest this update:     Mon 12 Oct 2026 01:00:53 +0000
Manifest next update:     Tue 13 Oct 2026 01:00:53 +0000
Files and hashes:         1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: dUjCVfGPE1GmrOxoIUnEy04J13dN6kHjvJ7DHspbx4Y=)
                          2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 23:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:a0:79:9e:fe:5d:07:a8:77:c6:e1:8e:1a:1b:00:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
        Validity
            Not Before: Oct 12 01:00:53 2026 GMT
            Not After : Oct 13 01:00:53 2026 GMT
        Subject: CN=9c2d689c9a52c6d3af6483701c05e31b726efb92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:b3:55:58:d6:cc:53:06:53:72:cc:f2:02:
                    04:cc:1b:22:8e:b7:de:7e:73:4a:90:52:f1:c9:ff:
                    0a:8f:4f:a2:ad:18:c6:71:07:bd:87:08:2e:5e:68:
                    de:7b:08:82:43:5b:47:2b:68:b5:e7:5a:4e:97:a2:
                    0a:1b:3b:8c:4d:6f:2d:9e:d0:89:d1:58:90:5a:29:
                    fb:ea:49:c5:83:62:b1:6a:78:80:68:cd:c2:8d:c4:
                    05:50:5e:b3:2c:3c:ee:d2:11:e6:8a:36:39:42:ef:
                    49:fb:d5:25:8b:29:1f:51:86:1c:18:cf:1e:f5:a1:
                    44:8f:64:99:e0:c5:82:60:2c:99:9e:5a:58:23:30:
                    9a:22:ee:e7:8c:5d:d5:94:ab:9e:dc:ee:f0:a5:7e:
                    20:09:8a:b0:65:70:05:10:5b:3d:2f:ce:64:22:0c:
                    f7:38:2a:10:cb:19:0c:b8:38:c8:52:d1:28:7d:28:
                    f0:c4:9c:44:ca:ff:91:79:09:7a:d0:49:cf:6c:83:
                    ae:eb:8c:78:ee:16:f7:19:1e:3b:ac:30:67:2d:9b:
                    66:80:de:5d:55:29:51:1a:06:96:34:55:fd:2f:28:
                    16:28:44:40:bf:f2:70:17:81:36:21:30:bb:75:6b:
                    1a:3e:23:56:bb:79:16:d5:fc:83:98:77:ff:de:38:
                    c4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:2D:68:9C:9A:52:C6:D3:AF:64:83:70:1C:05:E3:1B:72:6E:FB:92
            X509v3 Authority Key Identifier:
                keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:b1:89:ed:52:c7:c5:d1:a4:b0:8f:68:35:e1:25:0e:b8:76:
         8a:91:c7:10:3e:08:fa:48:40:9f:5c:a0:67:9c:a3:21:3d:62:
         54:76:23:09:ef:a0:a0:df:5d:7c:c3:68:4a:e1:0a:ac:5b:57:
         2a:48:18:64:5d:db:bf:8b:ec:f4:7e:fd:bc:07:0e:8d:02:0d:
         58:d5:c5:2c:40:6e:f0:97:33:95:ab:22:12:ff:72:01:c4:20:
         3b:38:0a:62:78:b4:a3:08:0e:4f:1e:3a:4e:58:9d:3e:bf:05:
         f7:0a:97:36:f2:77:fd:e4:ea:ff:d0:33:5a:f5:8d:18:a4:71:
         2f:b2:ba:3f:d9:12:ce:fe:af:85:80:cd:4e:3b:b2:3b:f7:fc:
         cf:87:20:bb:2a:2f:7c:fd:5a:09:b8:28:05:42:c2:56:61:19:
         84:35:26:bf:48:92:b0:9d:8d:76:ab:6e:92:05:6c:f1:e6:2a:
         b7:f6:7c:ea:a5:fb:d7:85:74:f4:14:8e:6f:1b:97:cf:d4:66:
         c5:39:ca:9f:93:4f:63:a4:d5:4e:6f:00:c5:45:11:5e:cc:f9:
         24:40:70:3c:c1:44:35:06:80:59:e1:70:ee:2d:0a:63:ea:ce:
         1d:32:f6:46:ae:61:db:60:4c:0a:9c:a5:0e:1b:9a:74:b6:5f:
         0c:f6:20:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 07:33:09 2026 by rpki-client