Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File:                     VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier:          zU5vUKAwKL3312KXcfH7emSwrvXi3awBkpI/9VWodV8=
Subject key identifier:   41:F2:8E:A9:5A:29:E3:90:4B:E8:93:FC:4B:7B:41:85:B7:36:A0:A0
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer:       /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial:       01A0E1AB6A07EBE53E0FB27AEDCA9CAFD8EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number:          1A73
Signing time:             Sun 27 Sep 2026 07:01:42 +0000
Manifest this update:     Sun 27 Sep 2026 07:01:42 +0000
Manifest next update:     Mon 28 Sep 2026 07:01:42 +0000
Files and hashes:         1: KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa (hash: CMCFJ522ifdqt0xcDWNSZop/WrNivf5oelP7FfWl5vI=)
                          2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: dOhTpxqF2VNs+OBpAdJlzo3Tg37MLc0n6thF1L4iJnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:ab:6a:07:eb:e5:3e:0f:b2:7a:ed:ca:9c:af:d8:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
        Validity
            Not Before: Sep 27 07:01:42 2026 GMT
            Not After : Sep 28 07:01:42 2026 GMT
        Subject: CN=41f28ea95a29e3904be893fc4b7b4185b736a0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:fe:23:c4:f6:fd:20:6e:69:2a:30:7b:62:
                    c7:64:29:92:9d:23:56:c5:e1:ae:cf:1d:d9:80:0e:
                    e9:dd:49:82:77:31:4f:4e:db:b7:d0:19:39:d5:90:
                    97:e7:a1:30:8c:d6:88:41:dc:5e:f5:4f:0b:95:21:
                    48:0e:bb:66:c2:94:54:dd:2a:b4:42:eb:a6:db:5d:
                    06:27:8e:01:d7:39:d7:d0:be:dd:32:8d:b6:88:ae:
                    29:cb:00:99:a5:a2:3b:fd:89:e2:f2:4f:4d:7c:5a:
                    73:cc:32:ed:55:60:ce:a1:aa:a8:39:16:1d:24:17:
                    7f:fa:39:6a:d2:51:91:13:67:c6:72:ca:d5:22:3f:
                    a0:e8:76:a6:26:68:15:cd:90:7b:fa:73:4b:dc:27:
                    5f:e3:2c:75:cb:90:4b:4e:62:04:63:fc:94:a0:49:
                    96:9d:79:35:ad:0e:9b:71:de:9f:ee:b3:a4:a8:d6:
                    e0:35:57:7f:85:94:d3:c6:5a:8e:35:ec:72:d6:54:
                    cd:ac:f3:a2:05:e8:07:bd:0c:8b:aa:7d:da:6b:91:
                    ed:8f:50:b7:5d:7d:ad:0d:6a:e3:53:d7:98:6d:92:
                    df:25:e1:eb:53:d1:eb:78:56:f8:d8:21:79:e8:d5:
                    f0:09:af:69:9c:ef:57:93:a4:2a:7e:e1:4f:03:c2:
                    d0:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:F2:8E:A9:5A:29:E3:90:4B:E8:93:FC:4B:7B:41:85:B7:36:A0:A0
            X509v3 Authority Key Identifier:
                keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6c:d0:a5:cc:54:26:77:c9:24:74:d2:ac:da:32:c2:54:1f:
         5c:09:9f:f3:16:a8:69:b7:e4:c2:d7:78:4a:6a:92:c3:fe:94:
         66:43:99:60:ad:33:22:9b:40:9d:b7:08:77:cf:e6:bd:d7:03:
         27:ae:72:ba:52:5b:a0:64:bd:88:16:47:6e:ad:31:61:0b:87:
         47:80:13:a7:64:af:b2:b6:e0:52:91:52:26:d5:ea:61:ab:ea:
         6e:a7:20:5a:1e:7d:59:e8:e8:68:a0:47:0f:8d:78:44:9b:15:
         54:8b:6a:a4:85:3a:a8:79:15:a1:07:a8:a7:62:2b:03:f3:24:
         81:ad:75:77:eb:6f:03:60:2a:6f:3f:ec:b4:0f:51:44:c3:56:
         1d:ed:35:e2:51:94:03:90:18:e5:d3:03:32:33:68:d9:c4:74:
         0d:e2:0c:6e:a3:3e:27:f2:2a:43:0b:97:f0:9a:67:f9:32:99:
         53:82:3f:3e:d4:e4:cf:28:b4:1e:3d:2d:0b:d6:88:fc:bd:d6:
         0a:9a:e3:80:a7:ca:b6:ed:b1:92:44:fb:42:e2:03:96:54:4e:
         4d:6f:8a:e3:a8:f2:e6:4b:77:43:33:21:e5:15:e8:74:a3:b4:
         0c:ed:51:57:ed:81:b0:ef:cc:a0:8e:53:10:a8:ce:75:1a:ee:
         51:3e:e7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 11:51:59 2026 by rpki-client