Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          RPT3LjQrTh33IPMwbV+3u/Dn4aVMw3Khb/OvF/RuWdc=
Subject key identifier:   D3:B8:E1:89:CE:46:64:40:C4:96:40:FE:BB:5F:39:02:28:D7:DF:C6
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       01A0FE34E2C71B2B43A2868983FEFE76F512
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          04EE
Signing time:             Fri 02 Oct 2026 20:01:13 +0000
Manifest this update:     Fri 02 Oct 2026 20:01:13 +0000
Manifest next update:     Sat 03 Oct 2026 20:01:13 +0000
Files and hashes:         1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
                          2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: ZSt5WHgoygf5xQZFYAJ56aqCfpRMT0D3IUzuMcvqkZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 17:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fe:34:e2:c7:1b:2b:43:a2:86:89:83:fe:fe:76:f5:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Oct  2 20:01:13 2026 GMT
            Not After : Oct  3 20:01:13 2026 GMT
        Subject: CN=d3b8e189ce466440c49640febb5f390228d7dfc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:06:34:b1:e0:ef:92:df:0a:41:3b:16:af:48:
                    90:7a:a7:aa:3b:85:ab:de:b5:fe:91:84:5f:65:ca:
                    f7:3d:48:28:46:d9:e2:21:9b:f2:53:34:2d:1e:3e:
                    6f:35:11:c6:87:5b:e6:39:c8:da:44:12:d3:eb:c3:
                    4b:f2:9f:03:6b:1a:29:1c:f5:24:21:c4:2a:23:ea:
                    b0:88:c2:b9:a2:0f:9f:e3:53:f4:2e:b0:e7:dd:43:
                    4a:92:17:9c:89:8b:0b:8b:23:d3:86:00:8f:37:78:
                    c7:14:66:da:21:bd:4c:f5:fb:f1:68:ce:b8:d4:16:
                    a4:f7:2b:f4:20:9e:28:11:74:2c:a8:1a:bb:cf:fb:
                    c7:02:56:9c:9b:a8:0b:80:60:79:8b:3f:fa:36:e9:
                    b8:c6:1c:eb:6e:a6:22:03:fd:32:69:6a:ab:e2:35:
                    29:09:0a:48:90:9f:aa:65:4d:8d:5a:da:74:13:98:
                    1c:44:73:72:e1:9c:5c:1f:9f:2b:8b:ed:55:0f:a8:
                    7d:6e:6e:86:be:1f:60:c5:c4:93:3a:f5:c4:c3:03:
                    8e:57:31:18:2b:76:94:8c:55:77:58:33:f3:90:56:
                    f4:29:86:98:81:25:70:24:3b:a3:2b:3e:ab:55:b0:
                    e5:b3:06:9d:c0:84:7c:92:e3:5a:bc:79:44:cc:ae:
                    a7:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:B8:E1:89:CE:46:64:40:C4:96:40:FE:BB:5F:39:02:28:D7:DF:C6
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:43:8e:47:de:c6:3c:fb:f9:6b:7e:92:20:e1:ee:84:71:86:
         d3:46:f5:2f:f7:d8:3f:e6:2d:cf:da:9e:72:22:73:19:57:d8:
         ae:66:12:8a:b3:77:20:0d:65:e2:99:d9:0b:9f:4c:c3:b5:1d:
         b5:d7:1f:d0:14:1f:76:c0:fa:23:fe:21:2b:3b:cd:aa:67:c0:
         bd:15:c2:0d:fa:1f:e0:59:90:ea:b4:4c:fe:d2:0f:d8:7b:f6:
         81:12:cc:9c:2d:59:64:d9:47:0e:2a:88:51:f0:0e:14:a9:d3:
         67:1c:0a:28:b4:10:38:03:be:ba:14:9a:ea:29:4a:bf:2a:7c:
         4a:09:c0:ea:e0:94:32:15:d3:f3:e1:86:27:b6:0c:86:08:15:
         9e:f3:23:8f:fe:78:24:89:6e:e4:43:8e:e6:9f:49:24:29:ef:
         fe:4d:70:28:57:31:d9:d4:95:18:3c:13:2f:86:ec:8d:b4:78:
         54:f6:51:d9:28:13:1a:04:f8:d3:d6:bd:71:99:ab:07:12:f2:
         8a:00:92:47:66:5f:7e:ec:a3:97:47:d1:c1:2c:9c:5f:fd:e1:
         ff:3b:b2:cd:48:57:42:99:36:19:30:f8:cd:ba:f2:26:00:b1:
         01:4a:7e:00:f9:7d:3c:1b:a0:0d:5c:fc:ae:02:18:cb:b1:f2:
         37:27:0a:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 06:09:07 2026 by rpki-client