Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File:                     VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier:          ggEY0UhWVTuZiFgqegh8ojDJ/u4T/1pypyYVqhBJWqU=
Subject key identifier:   AB:A2:FE:7D:E5:83:1F:4A:2A:DB:4B:A0:D4:D4:FE:E9:EA:6C:3C:A1
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer:       /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial:       01A1311013EE6775A3FF3E5738277510CD41
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number:          07E7
Signing time:             Mon 12 Oct 2026 17:01:39 +0000
Manifest this update:     Mon 12 Oct 2026 17:01:39 +0000
Manifest next update:     Tue 13 Oct 2026 17:01:39 +0000
Files and hashes:         1: J3APbr50rVneV9H1qg-HNNc-3lc.roa (hash: NXCP1NiFTqdVA1tneuQk89jFvEWiunEfCtSHBOd2xMY=)
                          2: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: 8M0CndGC3McslIk2GuPS2GODFfx59nReWASZugB2IwM=)
                          3: sFbjjm9G4nIcCl6eddoCOU60Adg.roa (hash: s7stSepgHsyCZyovoxvn1tgIewGdFX/4iFQZDg8eOb0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:10:13:ee:67:75:a3:ff:3e:57:38:27:75:10:cd:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
        Validity
            Not Before: Oct 12 17:01:39 2026 GMT
            Not After : Oct 13 17:01:39 2026 GMT
        Subject: CN=aba2fe7de5831f4a2adb4ba0d4d4fee9ea6c3ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:17:a3:9d:58:b0:d8:b4:d0:83:15:44:a0:f0:
                    d2:0d:83:e8:87:5f:3c:fb:03:e4:a6:27:2a:f5:45:
                    fa:ec:1d:dd:b3:0b:c1:2c:7c:0d:0e:41:07:27:b1:
                    30:cc:c6:46:7b:af:b2:87:96:87:51:57:41:9c:a7:
                    72:81:18:a8:a3:02:21:cd:0b:73:1e:77:01:1e:1d:
                    f3:34:0f:7b:a9:1f:59:43:82:d2:db:b5:84:23:83:
                    9f:35:15:f4:10:75:19:b6:1d:9a:14:31:55:b2:85:
                    78:fb:00:f3:47:45:b5:67:93:bd:0d:92:3d:de:33:
                    94:6c:04:25:39:48:51:26:6f:fd:20:31:fd:f0:75:
                    94:29:31:51:a5:7d:77:f4:58:91:ad:4c:e7:73:07:
                    7d:cd:61:d0:3d:9e:59:6b:25:97:0c:db:33:ac:0e:
                    e3:19:72:88:60:18:3a:e2:1d:a0:b0:8a:c1:8b:ed:
                    24:4f:54:97:46:f8:c0:7b:5e:b1:2b:25:25:be:39:
                    ec:64:21:e2:0b:59:56:f6:48:1d:40:4d:2b:b3:29:
                    1f:7c:a8:cc:e1:c3:65:c1:ec:bd:03:ec:79:88:d6:
                    9f:f0:28:36:28:fa:9e:8c:39:a8:49:cb:aa:38:32:
                    f9:34:2a:48:e8:77:09:1c:bf:71:65:44:6e:0f:04:
                    a8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:A2:FE:7D:E5:83:1F:4A:2A:DB:4B:A0:D4:D4:FE:E9:EA:6C:3C:A1
            X509v3 Authority Key Identifier:
                keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:10:3b:3b:5f:05:31:b7:36:b4:2d:d7:bf:82:e8:a6:32:e4:
         2b:4a:d1:9f:24:d4:2d:ac:ee:e6:00:d0:c7:0b:ac:2d:19:44:
         95:49:20:0d:0b:af:8f:12:cf:af:d1:1a:48:f8:bd:b6:98:35:
         95:9a:26:5d:d6:17:3e:da:6f:89:98:55:2c:e3:54:e7:8d:47:
         d0:29:c6:14:3b:af:b3:56:b4:e7:05:ef:d3:86:5c:8f:37:13:
         72:87:41:48:c5:06:1b:7a:c6:45:e9:00:74:20:83:cf:c5:99:
         f3:95:77:bd:90:d4:36:7e:6d:44:d5:61:a0:69:4e:5e:57:13:
         9d:37:3f:76:e4:36:6c:0a:a8:48:a5:61:b7:04:63:34:18:3c:
         35:6b:9c:68:27:eb:3b:9b:ca:78:a6:0a:43:e0:d8:b4:31:6b:
         b5:8c:1f:d4:b5:60:df:44:b2:c0:66:cd:b7:92:a0:be:d1:b9:
         b1:d8:cf:ac:a4:b3:42:78:2c:1a:72:c5:f7:f5:8d:ed:e1:27:
         4e:5e:0c:80:1b:ef:5b:4f:7d:35:68:75:a4:a1:ee:80:5f:2c:
         47:ef:ab:cf:d0:52:e9:d0:7a:44:3c:60:7e:9d:94:99:d9:ec:
         f0:07:34:8d:df:0c:bd:9f:0d:a4:f3:5d:a9:15:97:27:fb:20:
         ea:99:75:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 01:49:16 2026 by rpki-client