Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
File:                     Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft (raw, json)
Hash identifier:          dm+RafcycHUw62beM8jR9OUJ+v8pwriuiIbm3UuZKLA=
Subject key identifier:   CD:7C:F4:E6:13:D4:25:33:8A:DE:D2:97:52:05:6F:85:2D:A5:D0:FA
Authority key identifier: 56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB
Certificate issuer:       /CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
Certificate serial:       01A0CFDB3716AA62F0BC0AF856F881FC20EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
Manifest number:          5E
Signing time:             Wed 23 Sep 2026 20:00:45 +0000
Manifest this update:     Wed 23 Sep 2026 20:00:45 +0000
Manifest next update:     Thu 24 Sep 2026 20:00:45 +0000
Files and hashes:         1: 1ip8fjzOcrfIt7VhM4hKeIFL-gg.roa (hash: x6BAzNpNpkWkay1RbF1WheGdHSR/NN8khVO2J2kHcRM=)
                          2: Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl (hash: 9yT0Oj6bYBdkuTvTqAOSTOnMpgRAmyFcqhn8gHKSBuE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:db:37:16:aa:62:f0:bc:0a:f8:56:f8:81:fc:20:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
        Validity
            Not Before: Sep 23 20:00:45 2026 GMT
            Not After : Sep 24 20:00:45 2026 GMT
        Subject: CN=cd7cf4e613d425338aded29752056f852da5d0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:94:f5:d1:ac:db:fc:86:f1:5c:ff:16:c3:3c:
                    66:dd:42:00:4e:d5:83:60:7a:42:ce:04:c9:49:6a:
                    40:19:bb:83:b2:6f:56:38:df:f6:1c:26:e7:b7:83:
                    ff:5d:e4:7b:f8:2c:90:ac:0e:2d:84:6b:b2:2c:80:
                    3a:2f:4c:21:0f:a8:64:86:9e:dc:5d:5c:9f:e5:a3:
                    fb:7b:3b:fd:59:ff:a7:1f:d3:6d:46:48:5d:15:f3:
                    92:6c:c2:65:8b:39:5f:69:3e:31:12:b0:a2:25:bb:
                    de:f2:0d:02:4a:09:19:fe:21:56:3c:e7:d3:ea:f9:
                    dc:75:81:b0:59:16:52:27:65:bf:d9:06:6f:6a:82:
                    fa:ce:90:98:fd:f5:99:49:82:56:1d:37:2d:6d:ec:
                    c4:b0:4b:7e:65:35:25:f8:21:f9:ba:c9:ce:c4:9b:
                    bb:31:db:e0:29:dc:33:97:5d:ed:6c:22:69:08:b1:
                    b9:b9:32:83:81:bf:be:cc:71:c8:da:64:eb:87:a1:
                    79:26:8f:6d:c2:3d:51:16:46:cd:5c:e8:70:65:02:
                    4f:0d:5c:c8:4a:7c:0f:75:fd:a8:a0:d9:85:02:ef:
                    9f:3c:7c:8c:fc:94:4e:e9:4a:63:0b:b2:cf:59:66:
                    58:2f:73:2a:af:d9:54:31:23:ed:b2:da:5c:d1:ce:
                    b6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:7C:F4:E6:13:D4:25:33:8A:DE:D2:97:52:05:6F:85:2D:A5:D0:FA
            X509v3 Authority Key Identifier:
                keyid:56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:4f:8a:5b:c9:55:ad:07:cc:f4:89:75:fd:cc:39:95:6d:fa:
         a4:67:e7:46:2b:91:df:db:07:c5:e5:5b:69:22:45:41:73:f5:
         34:44:b8:5b:d6:65:3e:ed:42:d1:d1:c1:a9:08:39:b4:b3:3d:
         a5:e0:0b:05:79:a1:1f:5a:e6:23:44:c8:21:ea:19:30:3a:2e:
         c8:cb:e2:0c:26:71:6b:bc:13:0b:6f:50:77:e6:e8:89:aa:34:
         30:07:76:08:c3:b7:94:3c:eb:59:16:6d:2a:40:0c:dc:70:db:
         04:7b:f6:49:e3:8d:b8:ca:e0:bb:2f:94:a4:c8:84:b8:ab:84:
         08:2a:25:a3:a8:57:74:ef:5d:de:f6:4d:34:e9:d1:3d:b6:7c:
         fe:22:18:1e:7d:f6:f3:7c:f1:68:c8:d0:89:cc:3f:a5:30:6e:
         b3:80:a4:06:2c:c2:01:41:cc:65:9f:ff:9b:84:29:cc:b9:c7:
         4c:0d:db:33:bd:fe:6f:29:ac:e5:72:24:25:86:dd:36:3e:41:
         c5:66:2e:f9:d6:1a:22:e5:74:5c:95:f5:38:17:74:d1:c0:de:
         37:19:fa:aa:d9:e1:9e:ca:43:eb:1c:92:ad:b2:93:d6:25:f6:
         b5:8a:31:f0:46:87:cd:af:81:df:2d:31:ad:39:94:52:60:7f:
         44:77:48:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:19:57 2026 by rpki-client