Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
File:                     02vm8HVADTBaFt3mkOJcvZRkXL4.mft (raw, json)
Hash identifier:          CKW5Xmhq+2V8M4E4nifi8rubrg0hD7HHwHfXt8xYMQE=
Subject key identifier:   C9:76:B4:60:D8:4A:36:11:42:96:04:B6:02:A4:01:59:CC:6E:C6:43
Authority key identifier: D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE
Certificate issuer:       /CN=d36be6f075400d305a16dde690e25cbd94645cbe
Certificate serial:       01A0C09F1104999E4605211E3B6D55B7B8D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
Manifest number:          19B5
Signing time:             Sun 20 Sep 2026 21:00:44 +0000
Manifest this update:     Sun 20 Sep 2026 21:00:44 +0000
Manifest next update:     Mon 21 Sep 2026 21:00:44 +0000
Files and hashes:         1: 02vm8HVADTBaFt3mkOJcvZRkXL4.crl (hash: smXM6WAr+vDixhxUKwp08xDL0FWHnVhKlGV46XMTOu4=)
                          2: tfcGfm5inMTt9cfihgrBHcgLBeA.roa (hash: wAYHYoqlbuhkIu13qc05BEwhuRgD+rXRGSKUOssyz4w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 21:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c0:9f:11:04:99:9e:46:05:21:1e:3b:6d:55:b7:b8:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d36be6f075400d305a16dde690e25cbd94645cbe
        Validity
            Not Before: Sep 20 21:00:44 2026 GMT
            Not After : Sep 21 21:00:44 2026 GMT
        Subject: CN=c976b460d84a3611429604b602a40159cc6ec643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:4e:06:70:23:61:f8:22:d8:c7:de:f0:71:db:
                    66:9a:44:7d:ff:48:02:74:24:ff:36:0a:e8:70:0e:
                    e0:1e:7f:a6:30:08:51:46:e8:69:83:fa:01:ef:ab:
                    4e:35:cc:0b:fe:4f:f6:6d:e3:f8:3c:cc:50:14:40:
                    30:0e:08:93:bd:8c:2b:e6:77:14:6f:ad:d5:8e:a1:
                    5d:33:94:02:18:2f:21:a1:2e:f3:55:d4:61:56:47:
                    e1:e7:d5:cb:88:a3:03:a3:be:ad:a7:fb:bd:2e:6d:
                    fe:b9:82:70:78:8b:3e:f9:60:ab:da:8f:71:c4:ee:
                    5f:d2:45:97:7e:7c:e9:9e:88:16:19:1a:32:ec:38:
                    89:55:9f:5c:bc:f6:d9:07:2b:a3:09:45:d2:0a:5a:
                    d3:d2:f6:e0:f6:96:32:f1:6b:b4:b1:92:f2:85:c7:
                    bd:e9:c4:50:a3:77:5e:df:08:de:06:51:0f:9c:ef:
                    de:0f:89:d5:2a:11:b3:37:84:c7:4b:ca:f1:61:cd:
                    6e:85:79:d4:dc:26:d3:dd:be:b9:08:ec:63:a6:d9:
                    bc:72:a7:ec:1e:41:07:9d:64:2b:08:09:c3:48:ee:
                    eb:c4:6c:d9:28:22:3e:e4:9d:00:4d:1b:f3:31:6a:
                    d2:78:01:0d:79:91:fc:11:1c:c1:31:1b:e9:aa:bd:
                    74:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:76:B4:60:D8:4A:36:11:42:96:04:B6:02:A4:01:59:CC:6E:C6:43
            X509v3 Authority Key Identifier:
                keyid:D3:6B:E6:F0:75:40:0D:30:5A:16:DD:E6:90:E2:5C:BD:94:64:5C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/02vm8HVADTBaFt3mkOJcvZRkXL4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/0fde38-e9b9-4b69-b414-30c1c5a080d9/1/02vm8HVADTBaFt3mkOJcvZRkXL4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:c3:e7:84:e0:20:8c:5f:5c:ae:82:72:c7:05:db:66:cb:2b:
         42:9a:38:79:fe:eb:bc:bf:7a:f3:4d:59:64:6d:15:f9:96:a3:
         85:68:7a:db:18:49:94:11:41:46:ce:47:d1:ec:2f:a6:d0:e0:
         04:8b:d2:b2:60:f6:7f:4c:6e:d9:f3:3c:dd:2e:5b:63:0b:93:
         c7:df:76:ee:03:e5:7f:7f:99:90:58:e4:ac:3e:d4:d4:e1:c4:
         de:ea:17:94:2c:fe:3e:fa:40:30:da:77:4b:d0:b6:64:c9:2a:
         74:af:54:95:20:41:d9:80:7f:cc:e6:c1:3d:44:7e:3d:db:54:
         6b:fd:a8:b1:bd:ed:66:c6:de:48:30:c7:f1:e4:e9:61:bf:3d:
         f6:4d:74:3a:5b:3f:d5:97:5e:0f:e2:28:64:93:7a:6e:06:b9:
         fc:9c:ca:10:1b:12:b2:16:21:9b:bb:5f:96:01:6c:f3:e4:eb:
         d6:73:51:b1:3d:38:3f:5d:59:13:16:aa:ba:6a:4a:39:c3:62:
         97:54:f2:ec:8e:49:19:06:2c:c8:f1:74:19:61:80:d0:21:27:
         ed:ef:7c:85:fd:bd:6b:14:04:f4:78:63:81:bf:5a:ea:02:13:
         f5:91:0c:7c:aa:58:b4:95:8f:51:19:da:c9:db:db:20:3f:f4:
         64:6c:51:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:05:04 2026 by rpki-client