Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File:                     viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier:          TZ7AyTIm3uKWPO1MyJNTFO3qmOYeOzsAaDxDVjDZgsU=
Subject key identifier:   52:EB:7C:E3:1B:C5:0B:C9:C0:05:F6:E8:C0:C9:8C:6F:7C:82:9A:4C
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer:       /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial:       01A0CEFFAB79723D99C1E9BFEA4FA08A5958
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number:          05B6
Signing time:             Wed 23 Sep 2026 16:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 16:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 16:00:57 +0000
Files and hashes:         1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
                          2: viphXepqVOryff6ZwH483I13X74.crl (hash: 6cfXMXBzIgT4SoRUX3Gk7vWsYn20YvE0HmrhQY6Xio4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ce:ff:ab:79:72:3d:99:c1:e9:bf:ea:4f:a0:8a:59:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
        Validity
            Not Before: Sep 23 16:00:57 2026 GMT
            Not After : Sep 24 16:00:57 2026 GMT
        Subject: CN=52eb7ce31bc50bc9c005f6e8c0c98c6f7c829a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:71:75:19:f2:7a:64:8c:1b:79:4a:ae:33:20:
                    f4:c0:cc:a8:43:ff:a0:d2:30:8f:7c:c0:be:eb:81:
                    df:51:d9:ea:75:13:a8:c2:96:25:6f:09:eb:19:5c:
                    08:74:62:89:1d:fa:c2:30:78:35:25:93:75:87:70:
                    f0:95:99:5c:d0:c9:ca:fd:7d:75:be:ca:39:5f:9c:
                    b0:dd:85:ef:e3:41:aa:08:47:ba:81:5e:e7:3f:15:
                    39:20:a2:82:4d:b4:34:5f:f0:11:45:f4:06:ad:eb:
                    91:56:cb:65:9d:31:16:94:ef:96:c7:ab:a4:7f:ef:
                    1c:a0:db:cf:f2:7a:cc:ae:f4:4f:36:95:a2:3c:33:
                    3f:e9:4f:2c:59:d6:da:04:a6:f9:c0:51:c2:26:c9:
                    d5:a5:84:2f:d2:23:7f:43:e3:8b:d9:c8:6b:6b:c4:
                    29:90:85:12:31:76:b5:62:b1:7c:aa:93:57:dc:05:
                    1c:61:65:7a:83:7f:d4:64:a4:8e:6b:4f:bc:a6:e2:
                    10:32:4e:51:25:7b:ac:80:6f:11:dd:60:59:43:fa:
                    2f:03:29:d6:92:0c:02:87:37:76:ab:f2:59:c5:ef:
                    44:c6:2c:b1:06:0e:b3:2e:f0:67:30:97:56:6a:a2:
                    13:eb:e3:3d:73:07:b4:a9:fc:88:35:74:85:0d:3c:
                    f1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:EB:7C:E3:1B:C5:0B:C9:C0:05:F6:E8:C0:C9:8C:6F:7C:82:9A:4C
            X509v3 Authority Key Identifier:
                keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:5a:20:ad:d5:79:81:a7:bb:b9:b6:71:13:e9:14:99:f0:60:
         07:50:4d:17:5b:7a:23:e9:bd:c6:f4:5a:77:74:4d:c6:9f:53:
         0d:e8:0c:af:89:fb:78:2f:2d:b7:23:62:79:05:4f:0b:26:5a:
         35:04:b8:62:b7:43:1d:03:6d:31:35:71:ca:e7:71:1f:92:55:
         dc:c4:60:50:74:93:b3:33:24:0c:f8:28:5a:74:c7:c0:2c:87:
         2a:d9:dc:97:ea:4c:1e:a1:84:8a:7b:97:ac:db:16:f8:ff:fd:
         ea:28:9e:15:59:1f:18:25:9f:62:c9:23:6e:f6:39:40:76:9b:
         aa:63:99:9d:f7:42:f5:e7:22:83:6c:d7:fd:0d:9c:56:25:4c:
         b8:17:ad:5e:20:73:24:c6:8d:8a:75:25:89:99:0a:86:13:90:
         fe:38:a0:7b:6b:09:d4:d3:b0:54:a2:22:48:b7:b1:70:fa:b7:
         3b:8b:d9:98:b7:1b:3a:37:6e:19:18:18:45:f6:ca:63:f5:0c:
         35:65:ce:9f:14:26:46:59:af:7b:44:3f:4c:fb:2b:b1:5b:98:
         89:da:bc:5d:04:0a:b2:ce:09:92:d4:1c:3a:b4:02:fd:cd:b1:
         ff:aa:35:64:7c:99:3d:70:72:7d:8f:e1:d3:f7:37:c8:4e:a0:
         0a:43:6a:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 21:44:11 2026 by rpki-client