Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
File:                     vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft (raw, json)
Hash identifier:          ipNqrHDXsWfSzJJsE6dvN+6LY2eODkys+mwswvDpQJo=
Subject key identifier:   C3:11:7E:39:A1:D3:01:A6:56:66:A6:55:56:91:4B:39:97:F1:F9:C0
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Certificate issuer:       /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial:       01A0D011B018BF5824AE36BD84C752BCB1F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:00:15 +0000
Manifest this update:     Wed 23 Sep 2026 21:00:15 +0000
Manifest next update:     Thu 24 Sep 2026 21:00:15 +0000
Files and hashes:         1: HDFBj63zZKtSC6Jw4UiShUElLMM.roa (hash: dM6soWydRdWA9tO0ayG6aaBJ/bKBsqmgot+omBKKzgI=)
                          2: MV9jYxZc4Pt5SR7yy233XyCWLl0.roa (hash: CCSfxKCBfU96JZOkhVpKkTvEVxdzHUgSCznNnbc32HM=)
                          3: QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa (hash: hnbKkDbftBuvAa8vwX3rQQSx/8OuOGXHnpFHQ2CyWKo=)
                          4: WpnuLvnippB8tVyEsrRUR3ewk_U.roa (hash: BHza+2duMNR9nIMzQqoFfpCBTh9mkWoaMy7myW/tl3E=)
                          5: dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa (hash: wDNh4iJtkmG2Tv4fXnbCCR59EatzQ/W+vho/keWCSrQ=)
                          6: vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl (hash: wcJ0C+tPmxoEVsIFLNftaHpg8WCWWFYhTGPgpP/+iNE=)
                          7: wjlwL_TATpRkl3IwETvo11EU7l0.roa (hash: uMoT+Y/uxFQEEAREXENe/LFmTT6LeqDGlq2BaS0K//Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:00:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:11:b0:18:bf:58:24:ae:36:bd:84:c7:52:bc:b1:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
        Validity
            Not Before: Sep 23 21:00:15 2026 GMT
            Not After : Sep 24 21:00:15 2026 GMT
        Subject: CN=c3117e39a1d301a65666a65556914b3997f1f9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3b:81:21:3f:3f:ef:c8:dc:e4:e1:b9:16:18:
                    26:a3:56:ff:f9:7e:2c:83:aa:81:ca:ea:8d:7b:b1:
                    dc:71:cc:06:26:c2:b7:98:f6:16:08:e5:d6:ee:f1:
                    5f:cb:be:e2:c3:f9:50:94:f8:e6:f8:5b:d8:51:70:
                    a9:45:97:cd:33:95:56:56:7c:f9:9e:0f:6d:cd:55:
                    f1:e4:11:38:75:c1:b3:09:61:fe:0d:70:87:f8:de:
                    a1:48:d3:f6:f3:b5:81:75:87:21:92:3f:90:f7:aa:
                    35:99:97:12:66:e5:6e:fe:9c:94:2c:89:71:2d:97:
                    f4:bd:63:71:77:f8:21:52:eb:85:19:58:63:cf:8e:
                    07:de:94:9d:6e:59:43:65:fc:ce:01:c3:67:0a:27:
                    81:3e:28:41:c2:2d:cb:de:5b:27:53:48:93:57:d3:
                    7b:ed:37:d0:aa:6a:fc:10:28:d9:75:4a:b9:c5:bd:
                    1d:d4:af:76:ad:90:c7:55:ef:00:9b:ae:78:ab:17:
                    f0:fe:b9:87:ae:64:c9:93:43:3e:4f:65:8a:d4:74:
                    61:79:3f:2d:06:11:82:90:64:4d:b7:15:46:82:f3:
                    91:dd:32:a4:9f:c6:c0:9c:8b:b0:82:0b:09:88:2a:
                    21:8b:c7:c4:c0:b1:df:44:90:33:e3:d1:b9:f9:7a:
                    ca:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:11:7E:39:A1:D3:01:A6:56:66:A6:55:56:91:4B:39:97:F1:F9:C0
            X509v3 Authority Key Identifier:
                keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:af:bc:cc:46:e6:d4:9b:99:fc:8e:a7:a6:50:b9:55:0a:36:
         82:9b:47:ea:3d:0e:c0:44:2c:20:f9:28:06:41:ad:a0:c5:03:
         ec:0d:e7:bb:1d:7a:b4:2d:70:60:b6:e1:4b:f7:aa:69:1b:0e:
         8b:7e:aa:60:ff:5e:b1:09:c9:ea:a1:1a:76:00:d7:b3:c4:53:
         63:ab:e9:bb:6f:bf:a8:83:36:b9:b9:a1:0f:70:d1:c8:c4:3f:
         cf:a5:83:ba:44:98:2c:9f:be:9b:a5:f2:1d:62:44:93:6a:35:
         53:0e:5d:27:d2:df:51:01:88:87:f6:01:7b:02:67:30:1f:0f:
         61:7d:22:24:c6:45:85:93:1e:0b:e4:e4:d1:f4:8a:89:9f:8d:
         77:a9:29:48:1e:50:81:0d:b3:46:4b:68:ab:37:56:a8:e9:a9:
         8e:a3:1a:58:82:f6:95:bf:15:ed:fb:ae:de:ca:11:df:0e:40:
         a3:94:68:57:dc:ff:fc:e1:d1:9e:f5:45:17:84:a0:ea:b7:30:
         d2:2c:ee:af:97:ff:37:c6:b7:74:78:a6:4a:d1:ce:17:77:87:
         3c:4b:9e:2d:97:21:3e:3e:3b:b0:c9:e3:da:b8:22:6b:d3:a5:
         c1:a6:7f:62:a4:35:19:fc:e4:68:66:30:dd:57:15:e5:af:6c:
         b7:55:25:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:40:48 2026 by rpki-client