Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
File:                     vx1f6v05F0clv-S--RvSfHsvb5E.mft (raw, json)
Hash identifier:          pbP/QJchNVsFGtn5HUJbuFy/ad3hunPdPG3oaszYBjA=
Subject key identifier:   56:03:6B:FD:D1:E1:7C:B6:7D:46:2D:00:39:63:3F:6C:EB:FD:A0:04
Authority key identifier: BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91
Certificate issuer:       /CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
Certificate serial:       01A0D19310691CCD6E083B88F2543328B981
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
Manifest number:          1AA1
Signing time:             Thu 24 Sep 2026 04:01:11 +0000
Manifest this update:     Thu 24 Sep 2026 04:01:11 +0000
Manifest next update:     Fri 25 Sep 2026 04:01:11 +0000
Files and hashes:         1: HBbTZ3Q7BOwj640I0jYSUAVw3qo.roa (hash: o7T4Dh22yBlZp7Egs8uQK5dq+Y2Bk/ktQFDv0GOBtkk=)
                          2: dZqs8E7LyKHkfB4jh2GOoyNo76Y.roa (hash: zgo7CuU8bSN45o0HLMgfnKvZADdH4eXVAz8vL+7KLKo=)
                          3: hXZFZHr0XCODM9k9s07wdTNy4yg.roa (hash: HArJOYQvvBua4EDeDhYlhjafQPJqoF9wxDTtx9q/aEo=)
                          4: vx1f6v05F0clv-S--RvSfHsvb5E.crl (hash: vXObsoBC55TLNIn3fGy+jwgrQGUqNMacm3c/ONYh9Vo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:93:10:69:1c:cd:6e:08:3b:88:f2:54:33:28:b9:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf1d5feafd39174725bfe4bef91bd27c7b2f6f91
        Validity
            Not Before: Sep 24 04:01:11 2026 GMT
            Not After : Sep 25 04:01:11 2026 GMT
        Subject: CN=56036bfdd1e17cb67d462d0039633f6cebfda004
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:53:f9:ac:2c:0d:76:13:62:09:74:ca:59:97:
                    00:d3:29:71:3a:f1:3d:16:c0:15:7c:82:cb:84:68:
                    39:b6:13:33:79:40:d9:66:00:73:3a:68:64:f4:2a:
                    a8:bb:e7:38:be:f9:c5:86:6e:b4:bd:60:6c:e7:6c:
                    80:f0:ee:05:a3:a7:e3:49:12:13:09:53:72:e3:4a:
                    ac:ad:d5:84:46:32:28:99:70:88:40:23:11:fa:1b:
                    50:9c:ed:61:f3:1c:07:63:2d:8c:60:e0:32:1f:d2:
                    5e:4a:85:f0:e1:20:09:e2:c7:83:78:64:58:61:79:
                    56:93:3d:32:fd:a7:4d:3b:92:49:c7:d3:a2:12:e9:
                    dd:91:f9:bb:10:ff:57:f3:0d:67:91:9c:50:c9:b8:
                    f9:5e:02:e3:a0:46:06:ac:fa:97:56:59:8d:d6:27:
                    3c:e4:31:9d:0b:8e:58:28:1d:cd:ef:d9:fa:5b:cb:
                    98:7e:d5:76:15:3e:28:de:d1:23:88:ba:44:ea:d7:
                    7e:b4:a0:50:ae:09:7b:4b:cd:f5:a3:f5:a3:47:a1:
                    fb:81:62:ee:08:46:3f:44:5e:ae:f3:d5:d3:c4:fe:
                    ab:d4:9b:19:5c:ba:74:d7:90:c7:3f:53:8f:fd:5e:
                    c9:f7:71:06:35:86:9d:f9:21:15:79:06:a7:f4:80:
                    98:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:03:6B:FD:D1:E1:7C:B6:7D:46:2D:00:39:63:3F:6C:EB:FD:A0:04
            X509v3 Authority Key Identifier:
                keyid:BF:1D:5F:EA:FD:39:17:47:25:BF:E4:BE:F9:1B:D2:7C:7B:2F:6F:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1f6v05F0clv-S--RvSfHsvb5E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/6065d2-103e-4ab7-bfb3-1a8c842afe2a/1/vx1f6v05F0clv-S--RvSfHsvb5E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:40:44:e0:9d:a5:51:ac:11:55:bb:f7:b3:e4:14:49:79:db:
         48:03:af:d2:7d:54:e6:a3:09:c8:0e:3e:af:51:eb:2c:c2:77:
         ae:e6:e7:c7:52:95:a6:88:81:89:ee:89:38:ed:74:ba:df:d2:
         13:73:56:ab:34:41:9e:32:bf:6a:ea:5e:76:b0:47:12:60:74:
         b2:e8:d8:4a:20:9a:5a:0e:57:c0:b4:6f:b5:7c:d7:e1:91:0e:
         ae:d2:79:52:4f:ef:97:20:ec:1b:7f:f2:06:98:70:c4:b1:11:
         c5:b3:26:f3:ff:f5:cc:b3:1c:e2:d3:6c:3e:8e:5c:a1:56:5a:
         4f:31:f4:51:81:94:0e:7e:d7:dc:b2:55:0d:df:fc:58:d4:db:
         82:09:4f:42:e6:e2:b3:61:32:6a:fd:1a:1b:85:ff:26:21:3c:
         ae:01:ea:63:cc:fc:ac:4e:3e:1c:9b:f1:9c:ed:7d:a7:de:3c:
         45:27:6a:55:19:c2:1e:4c:8b:7a:eb:76:86:d9:09:e8:29:c0:
         59:f3:57:06:bb:58:b5:16:f1:6d:86:75:7e:a0:2c:c6:bb:09:
         99:70:24:10:87:b7:5f:f2:f9:81:1f:e1:35:d5:38:d6:92:c1:
         4d:ab:1b:0b:ad:95:ef:31:89:b0:31:c2:a9:56:6b:c9:f9:f0:
         ee:4d:1e:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:38:30 2026 by rpki-client