Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          A7c2OklWmrOyP458cRaVwcDItZUSjzrGsNlbqg/u+hA=
Subject key identifier:   26:8A:E0:05:00:62:F1:FE:38:5E:8A:C8:25:CD:5B:22:ED:5C:24:63
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       01A1242F5DD7ED362CFF979716E6689FF10F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          1A98
Signing time:             Sat 10 Oct 2026 05:00:46 +0000
Manifest this update:     Sat 10 Oct 2026 05:00:46 +0000
Manifest next update:     Sun 11 Oct 2026 05:00:46 +0000
Files and hashes:         1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: n0QRuJCcQtRc8LK8N5ealiPB7NTLkuA05pKBTd8CsAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 05:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:5d:d7:ed:36:2c:ff:97:97:16:e6:68:9f:f1:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Oct 10 05:00:46 2026 GMT
            Not After : Oct 11 05:00:46 2026 GMT
        Subject: CN=268ae0050062f1fe385e8ac825cd5b22ed5c2463
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2e:47:de:1f:93:8b:36:d1:44:b4:a0:bf:27:
                    04:3a:f1:d9:3c:31:bc:8f:15:5f:16:a9:47:9f:e3:
                    5b:b4:4d:ba:4f:47:b4:0c:cc:78:7b:bf:d5:cf:8b:
                    75:c5:cb:64:77:e8:a6:56:3a:09:b4:c7:2e:be:b8:
                    3b:82:6c:18:46:45:2f:02:d3:58:31:16:63:d2:7e:
                    82:2e:3d:51:4c:96:ad:f6:fd:6c:50:22:1a:ff:a5:
                    80:06:09:6c:ab:fe:65:40:ef:13:9b:e5:69:34:77:
                    31:87:c2:ef:68:42:33:08:72:e2:6e:85:98:40:4e:
                    a9:af:85:c6:ec:29:8f:5b:50:54:e0:df:a9:10:95:
                    56:bd:3b:e1:13:5b:98:88:cb:5a:42:24:44:68:61:
                    68:cc:6a:83:82:f4:e3:cc:8a:86:47:b7:7c:90:68:
                    e0:c0:6d:db:e1:c0:89:5f:c5:35:8f:40:53:4f:bd:
                    7d:d8:c4:0b:d9:42:50:f4:7c:c5:9c:58:b3:35:d9:
                    c4:45:1f:0e:37:66:f0:cb:c8:87:be:64:e4:a5:e9:
                    60:e7:e3:1d:17:93:8e:d6:23:5a:c8:e2:c2:86:b3:
                    2c:f5:d5:ae:48:0a:21:8d:6e:25:29:ca:8e:65:49:
                    ce:94:e0:82:ea:3e:5b:b6:3c:df:77:c5:30:26:76:
                    27:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:8A:E0:05:00:62:F1:FE:38:5E:8A:C8:25:CD:5B:22:ED:5C:24:63
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:7b:66:ad:34:7b:e1:41:15:13:d0:59:6c:37:2b:99:5e:6f:
         3d:06:64:ce:96:a7:ac:bd:b4:7a:3a:0e:f9:3d:a3:56:a0:f4:
         32:8c:b4:a8:0e:74:8f:d0:df:d4:69:0f:49:16:1b:b7:07:37:
         79:7d:6f:1f:29:54:7e:84:50:4a:53:cd:da:7c:a5:07:19:f0:
         6e:c9:c4:fa:31:bd:9f:9f:2e:bf:b9:d4:dc:e7:a4:49:06:0e:
         bc:17:3e:bc:7b:ca:16:6b:47:72:5d:5f:8b:ce:29:31:45:f1:
         9a:55:d6:42:ff:15:20:bd:e2:29:4a:fa:64:09:0b:ac:44:b0:
         9e:0c:04:61:04:91:c7:d4:bf:63:70:3b:73:18:1a:73:43:7c:
         05:1b:6b:23:cf:e6:ce:6f:d1:94:81:f0:9d:8a:52:40:7c:4e:
         36:dd:6a:08:e0:73:4f:28:09:ce:08:43:36:49:a0:86:9c:a7:
         09:c9:30:51:5c:5e:bd:c2:6f:36:64:18:01:60:36:c9:39:5f:
         b5:3c:2a:7c:0f:36:09:98:9a:e0:b0:dc:95:48:59:13:be:90:
         0c:9a:37:58:10:68:f5:de:86:18:31:81:80:6c:1f:e8:3e:bc:
         55:47:7d:58:cd:0e:39:d3:5f:d9:f1:55:4d:5c:92:8b:5e:86:
         88:c9:92:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 15:49:31 2026 by rpki-client