Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
File:                     V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft (raw, json)
Hash identifier:          4VYM/XEbv0byDbXhRm0eRF3io3/G9sxj12ZVWvP07x8=
Subject key identifier:   B6:24:51:FE:02:88:B5:44:2B:53:52:E6:4B:F2:6B:FE:34:52:AF:1B
Authority key identifier: 57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34
Certificate issuer:       /CN=57db143c17fb051944426a79f24334c25cdbc234
Certificate serial:       01A12B443AF05E76D5D6E888A6A0817B7656
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
Manifest number:          0570
Signing time:             Sun 11 Oct 2026 14:00:54 +0000
Manifest this update:     Sun 11 Oct 2026 14:00:54 +0000
Manifest next update:     Mon 12 Oct 2026 14:00:54 +0000
Files and hashes:         1: T5e0TgseHoV5T0D1V0ELGlI9FBc.roa (hash: Q9H/hI7Y9VsQ4ugMF8ryTSl2yPuCfHdqE0UId9QIWbI=)
                          2: V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl (hash: EmvWqjQ9VKDzDyYFSP+fOoEjdLaI0j1+iZGxbM4ooOU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 14:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2b:44:3a:f0:5e:76:d5:d6:e8:88:a6:a0:81:7b:76:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57db143c17fb051944426a79f24334c25cdbc234
        Validity
            Not Before: Oct 11 14:00:54 2026 GMT
            Not After : Oct 12 14:00:54 2026 GMT
        Subject: CN=b62451fe0288b5442b5352e64bf26bfe3452af1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9c:75:ea:57:dd:f1:ea:7e:3a:57:4e:68:81:
                    d3:d8:02:59:45:ff:6b:dc:af:ee:d7:3b:a2:97:89:
                    eb:11:cc:64:d7:a8:0a:cf:fb:db:c9:3a:6d:6b:2e:
                    31:90:bd:d9:d3:2f:3b:f1:24:57:f3:0c:b3:68:f5:
                    c7:8e:f4:55:df:0b:3b:9c:97:e9:1d:05:f1:1b:9c:
                    33:ab:85:d8:39:88:05:70:19:ce:6b:d1:3d:4e:ba:
                    34:bf:2e:75:b8:9c:f7:47:7b:85:34:61:f8:7a:82:
                    e7:f3:2d:69:19:8b:8b:f9:ee:f5:55:28:37:9d:bf:
                    af:a0:d3:5e:ce:a7:a4:ff:10:b9:48:79:f0:41:8f:
                    1b:2b:18:d8:f1:8c:c5:6e:39:1a:8b:10:28:67:e5:
                    c6:23:08:86:ba:8f:cb:8e:9e:17:f1:46:74:79:08:
                    0f:f3:dd:af:01:a2:ad:22:58:91:0f:56:c0:57:66:
                    47:8d:de:55:26:a9:72:f9:71:0e:c3:f1:a7:17:9d:
                    83:7b:06:f6:af:f0:82:29:11:67:46:cb:5a:e1:bd:
                    e1:42:0b:7f:a8:87:98:6f:ff:89:8b:a5:03:e3:c1:
                    9a:3f:fd:c1:50:a1:ae:e3:14:23:c4:7a:29:fe:cf:
                    b9:06:07:5a:6b:4e:fe:e1:45:d7:be:50:7b:d7:c1:
                    20:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:24:51:FE:02:88:B5:44:2B:53:52:E6:4B:F2:6B:FE:34:52:AF:1B
            X509v3 Authority Key Identifier:
                keyid:57:DB:14:3C:17:FB:05:19:44:42:6A:79:F2:43:34:C2:5C:DB:C2:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9sUPBf7BRlEQmp58kM0wlzbwjQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/901380-f821-443a-9bf2-bda4f8eb1ad9/1/V9sUPBf7BRlEQmp58kM0wlzbwjQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:ea:d7:eb:d9:8a:6a:27:fd:4a:af:21:02:d4:f4:65:1e:4a:
         d9:e4:4e:af:34:e4:73:6d:7a:2f:c5:63:69:18:05:f4:63:56:
         ac:1a:4b:c9:d3:a9:21:05:a8:d9:b7:db:6e:e7:bb:b0:28:ad:
         d6:d2:80:53:16:ed:8f:e7:5a:5f:87:dd:d8:61:43:25:28:24:
         18:7a:d4:22:20:a8:66:cd:d6:ef:b8:9b:9b:4e:cd:85:9c:4c:
         09:a5:e9:3d:4b:8a:84:dc:3a:69:bc:4a:7d:d1:35:0c:7c:9b:
         fc:86:ed:51:ab:05:df:2e:ea:f9:19:ce:b6:6b:9b:72:9d:d1:
         dd:f3:85:e4:2a:c6:26:f8:c5:3f:4e:f8:53:6f:1a:4d:0f:8b:
         a0:38:6b:52:72:4f:c5:ab:13:4d:93:54:8f:3a:e3:25:fb:75:
         04:bd:39:fc:e8:18:66:55:82:6f:6d:f8:9a:98:9d:4f:e1:09:
         fe:d9:14:09:f2:13:9b:6d:15:c2:96:27:8f:44:e3:8f:7e:68:
         a9:a1:e7:5b:60:4a:c1:a0:c2:e2:54:f1:b1:94:25:f5:d2:94:
         71:5b:a8:a8:e2:f5:61:e6:71:db:e1:78:bd:f1:08:2f:95:af:
         73:40:8b:e9:15:05:d3:65:c8:3d:15:b7:b1:5e:6d:e5:5d:63:
         f2:a2:dd:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 21:03:41 2026 by rpki-client