Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
File:                     VrTLQmw_QCVQIcng1H3IMBequxM.mft (raw, json)
Hash identifier:          H2oGeDqSOU7Yo/2kpjlVefg7rhvl0D1H3qClRYBxWOA=
Subject key identifier:   DF:C1:85:63:1F:76:25:20:85:81:3F:6B:D2:BA:84:1D:8D:D2:29:75
Authority key identifier: 56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13
Certificate issuer:       /CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
Certificate serial:       01A112CE4EECCEC0BDA50DCBC849E8DF888C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
Manifest number:          4E
Signing time:             Tue 06 Oct 2026 20:01:12 +0000
Manifest this update:     Tue 06 Oct 2026 20:01:12 +0000
Manifest next update:     Wed 07 Oct 2026 20:01:12 +0000
Files and hashes:         1: VrTLQmw_QCVQIcng1H3IMBequxM.crl (hash: QXxJnkeb0yBFxOsYnogqUYeLjMd4bLeM6S6IIdlR2ho=)
                          2: cbod8T-kZlikRq3LeFGefidEURA.roa (hash: aSy5zxb/U6h4osrQnmgMwfZXWE/lcFtOIfKr5xh6JnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 20:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:12:ce:4e:ec:ce:c0:bd:a5:0d:cb:c8:49:e8:df:88:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
        Validity
            Not Before: Oct  6 20:01:12 2026 GMT
            Not After : Oct  7 20:01:12 2026 GMT
        Subject: CN=dfc185631f76252085813f6bd2ba841d8dd22975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:03:c1:91:b4:91:d3:7a:b5:a6:67:5f:06:c2:
                    c8:04:cf:d4:2e:7d:e1:c1:b9:76:bb:4b:41:06:3f:
                    1d:45:42:29:3b:3e:e1:9e:8b:e6:dd:ae:d6:f9:60:
                    32:38:7d:fb:0c:d7:23:c1:62:35:63:8b:5f:e2:58:
                    ee:56:94:fc:d4:3a:5a:29:98:7f:a6:9b:4c:ed:c5:
                    0f:36:45:44:9d:7b:0d:c5:5b:7a:cb:6b:d1:32:76:
                    b0:d2:12:f5:4b:fc:5e:6f:e0:95:c7:ec:97:06:82:
                    3c:48:ca:aa:ee:55:e8:90:a2:aa:b4:c0:43:4d:bd:
                    10:46:ca:2d:a4:c1:cf:60:55:76:fa:b8:0d:76:d1:
                    37:e5:3c:c3:fc:2e:9d:1a:95:ba:19:10:06:fc:a1:
                    c7:f3:c1:f7:9a:7c:17:35:89:0e:74:78:d7:8b:9c:
                    f4:82:7d:9c:f5:e4:36:c7:07:69:e5:06:92:f1:cd:
                    11:45:00:f6:57:95:b4:6a:5e:e7:3e:54:59:f9:00:
                    73:3f:52:cc:48:46:63:a1:3d:44:1e:60:e5:74:04:
                    90:e8:66:3d:db:09:56:65:63:60:44:c5:f8:45:70:
                    01:a2:75:37:b3:53:8d:f2:77:f2:13:12:14:74:76:
                    01:4d:25:be:ab:e1:60:8b:54:75:b0:ac:c7:76:e2:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C1:85:63:1F:76:25:20:85:81:3F:6B:D2:BA:84:1D:8D:D2:29:75
            X509v3 Authority Key Identifier:
                keyid:56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:84:86:45:6c:93:db:54:ca:dd:cd:b9:98:c6:20:3f:19:6c:
         f8:c5:4a:1a:28:74:3d:72:c6:6e:f2:16:78:fe:14:0b:06:34:
         88:47:5a:8a:6f:5b:a0:aa:26:26:0e:41:69:2a:28:ec:b4:be:
         7a:98:84:aa:5f:5f:13:7e:84:b7:69:17:f3:a4:e4:79:e1:3a:
         3a:53:ae:03:9d:b4:42:5f:91:92:22:53:29:e5:99:ac:e2:3f:
         a7:06:2d:93:f1:1f:f7:99:ef:70:a1:42:e0:96:a5:7e:46:cb:
         70:a8:c0:6b:88:9d:97:f4:66:f9:83:7c:e7:5d:d5:a2:55:b2:
         dd:bf:eb:5e:b6:0c:e6:24:0d:f2:ee:58:93:1d:7e:97:36:ff:
         ca:af:ff:7b:be:22:93:fe:e5:d2:d4:97:c9:da:74:71:30:04:
         c3:33:30:a0:3d:ab:6b:a0:42:19:10:8d:02:ee:98:0e:69:29:
         c9:43:dc:a4:17:f3:f5:02:c0:41:46:e7:8f:76:28:3e:b0:a6:
         f5:9c:dc:f5:bf:64:7f:ee:a0:84:ef:dc:54:62:48:15:e3:15:
         9c:09:fa:b1:16:fe:d0:ff:1e:3c:0b:8d:9a:78:19:38:91:e7:
         a2:fb:de:9d:68:83:8b:7c:cb:fc:e7:3a:37:31:b2:a8:f5:12:
         5a:e7:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:04:16 2026 by rpki-client