Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          B+dFxpwlXLMT3BJvcT/L7hPmgdRNDd8Dg9plsTyolxE=
Subject key identifier:   72:F2:04:D6:A1:2C:21:3F:7D:89:07:2F:AD:02:81:5F:AF:E3:E2:D7
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       01A0D383A6C03E67F244725AB9D7B5DCB012
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          0D97
Signing time:             Thu 24 Sep 2026 13:03:35 +0000
Manifest this update:     Thu 24 Sep 2026 13:03:35 +0000
Manifest next update:     Fri 25 Sep 2026 13:03:35 +0000
Files and hashes:         1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
                          2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: VCfVHKAZouKhhMxgGij8R5zDJa6pn/2zHLTkSKJ1yN0=)
                          3: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
                          4: uKWnz8_LcW_aNSrzf71no4gpaHo.roa (hash: J7oKnwSHKrSta4NBW2liWqaQzZeozN70ItapCRa9dC0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 13:03:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d3:83:a6:c0:3e:67:f2:44:72:5a:b9:d7:b5:dc:b0:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: Sep 24 13:03:35 2026 GMT
            Not After : Sep 25 13:03:35 2026 GMT
        Subject: CN=72f204d6a12c213f7d89072fad02815fafe3e2d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7f:2a:a1:7e:0a:d5:19:30:cd:4d:cb:a6:f5:
                    b5:eb:17:d3:35:62:fb:6e:04:78:92:7d:8e:42:7a:
                    e4:a0:93:e7:ac:94:17:47:52:cc:40:e8:76:53:90:
                    16:3e:5e:2d:aa:f8:30:d8:ec:7e:ee:3d:3b:aa:7e:
                    5e:94:d4:3d:4e:f6:33:f7:46:02:fa:74:d0:9b:e0:
                    ad:62:a7:6b:60:44:e9:60:ae:49:bf:22:98:d6:9d:
                    71:7f:32:6f:19:cb:a0:88:20:1c:2f:de:cb:1b:1e:
                    f1:b8:7f:0e:5b:22:e9:60:62:3d:fa:38:55:e4:b0:
                    00:80:40:3d:b2:1c:be:01:c5:25:f1:8a:ec:91:aa:
                    69:d7:01:d5:8e:f1:87:45:a1:59:d5:2c:05:06:05:
                    b8:6b:bc:da:b5:64:6c:c1:04:10:d4:b0:ac:33:0f:
                    b7:a9:97:f5:0d:7a:65:e5:2c:f0:ee:e2:da:b3:6b:
                    3a:5e:54:d4:a0:52:0a:b5:9d:5f:73:7f:e6:56:54:
                    88:0d:98:a0:72:78:77:33:a0:b3:d1:c1:81:a6:d7:
                    1c:29:4f:11:5c:81:9e:5b:8a:ff:aa:39:ca:bb:2e:
                    3b:da:73:63:0d:7b:27:da:b7:14:7a:c0:3b:75:11:
                    37:45:5f:70:48:46:dd:aa:9f:2f:43:df:bd:da:ea:
                    74:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F2:04:D6:A1:2C:21:3F:7D:89:07:2F:AD:02:81:5F:AF:E3:E2:D7
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:d5:57:7b:44:a5:9a:fb:37:82:7b:82:4a:de:61:b2:94:9f:
         ea:cc:39:cc:43:b4:bb:e0:34:aa:67:e5:14:64:be:17:03:5e:
         b5:15:02:9e:a7:3a:02:60:22:c3:1b:f4:12:c1:b1:37:b4:92:
         e8:35:95:29:8d:55:64:e8:86:22:15:8d:64:c1:63:d5:f2:1f:
         3a:60:52:74:b4:00:cd:cc:8e:a0:5d:88:70:76:ed:c6:73:4e:
         57:29:9c:a9:5d:83:84:a7:81:9e:0d:f5:41:5e:b8:cb:c6:c9:
         07:4d:ed:9a:5e:85:31:cb:4e:cc:9b:63:56:a7:54:b7:f5:59:
         5e:ae:e9:08:e4:ec:a0:70:4d:c6:3a:9e:37:47:8b:5f:7f:3f:
         23:fb:d3:1f:3c:61:a1:c7:fa:cc:06:19:48:88:32:a7:43:ee:
         c2:0f:6c:aa:c1:21:93:49:fa:7d:0d:86:51:d1:ad:13:f7:44:
         d2:c5:b1:89:f0:45:0f:20:79:f9:8c:f9:a3:02:d4:f2:14:7a:
         d2:14:f0:9b:58:48:e6:84:86:b3:eb:d9:f0:63:8c:f8:24:6a:
         9a:d6:68:e1:0b:bb:63:33:03:c7:88:ee:bf:98:67:d5:ac:fd:
         c3:aa:f2:58:36:3c:f2:38:9f:6c:21:05:c7:b9:37:cc:ec:90:
         05:3f:39:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:14:18 2026 by rpki-client