Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
File:                     v-x0OQub_hRrfpPpLpiVBCCY5kM.mft (raw, json)
Hash identifier:          4ezWdqxl9fFiLAVUMskl+pVr3OG/Kz8o2UKufkGNnSo=
Subject key identifier:   91:BF:6A:5F:76:9C:99:8C:EC:E2:3A:7B:55:4A:B0:92:87:8C:EB:0D
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Certificate issuer:       /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial:       01A0ECD35C761BBB0D173CD53C8D4BF9BEA4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
Manifest number:          01EF
Signing time:             Tue 29 Sep 2026 11:01:09 +0000
Manifest this update:     Tue 29 Sep 2026 11:01:09 +0000
Manifest next update:     Wed 30 Sep 2026 11:01:09 +0000
Files and hashes:         1: 2uyn9-rt4qXDQnJ_RuBqhpLfNFE.roa (hash: h7g9VGs3XqpFOw06DvMhbAXgfcpKbwQItbjDo8Cg+8U=)
                          2: 51iSXNXbLmvTLItGRvoRtGfr2K4.roa (hash: mxwbG4mvPMTjMzVFCzi4Qb5/YZ7wF3FzdOkJfABIOVo=)
                          3: sNjzoH83uTZc3yqrwLs2fTToJ44.roa (hash: Q8V0Cj1vOvzVJGr92WZPenUgBMLqHvMDwmn67TqH9gM=)
                          4: v-x0OQub_hRrfpPpLpiVBCCY5kM.crl (hash: 2udKobhEQFFEdSnwagfp0e587sAd4gU57l9zWVBG+qM=)
                          5: wLvmDuYgph_xW_HmKa5TI2eFe8g.roa (hash: qmBeschUBslaG7/fRSSItMAUXj1DcvRjrdWGWCgrhXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 08:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ec:d3:5c:76:1b:bb:0d:17:3c:d5:3c:8d:4b:f9:be:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
        Validity
            Not Before: Sep 29 11:01:09 2026 GMT
            Not After : Sep 30 11:01:09 2026 GMT
        Subject: CN=91bf6a5f769c998cece23a7b554ab092878ceb0d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0a:01:2e:2c:f0:22:04:02:18:68:47:28:e1:
                    8c:d3:1f:b3:0f:a1:ea:8c:cb:0a:2a:03:2b:9c:95:
                    41:b9:2a:6c:b6:2e:da:0b:30:b5:37:74:45:1e:5d:
                    fe:70:1d:4f:49:9e:36:37:69:34:cd:f2:1c:f6:d4:
                    c5:05:68:c8:60:0e:22:45:ee:3c:02:13:3a:52:91:
                    49:89:38:d8:4c:dd:56:0b:11:8e:78:f7:fd:b4:1c:
                    59:f3:2b:07:5e:4f:eb:97:6c:dc:05:e2:89:68:c3:
                    68:52:4a:00:54:bc:c7:7a:ee:64:a9:c5:27:c5:27:
                    57:ac:c3:a0:2f:67:13:4a:31:9e:a5:c5:ca:46:43:
                    a8:9f:a3:35:8c:61:7e:4a:2a:63:f9:0b:d3:7f:70:
                    b3:bf:2e:07:3f:d2:dc:0f:76:fb:00:38:05:b4:7e:
                    e8:8e:89:83:89:c8:a2:01:fe:a9:7b:2c:f3:28:85:
                    86:7d:19:0c:4f:1c:6c:b7:d0:dc:98:e9:0d:8f:45:
                    66:7f:f6:37:45:f8:c0:1d:9e:84:0f:d4:79:69:51:
                    65:f7:69:87:d4:17:6c:26:ea:c6:3b:e3:b2:10:1b:
                    c8:2c:62:a1:f1:28:0f:1d:82:94:a1:11:45:36:f5:
                    53:f1:5b:5f:0c:4f:2e:25:ad:31:8b:bf:4f:fd:67:
                    58:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BF:6A:5F:76:9C:99:8C:EC:E2:3A:7B:55:4A:B0:92:87:8C:EB:0D
            X509v3 Authority Key Identifier:
                keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:04:05:13:0d:9f:7f:5c:01:a1:5a:74:47:e2:a6:1c:56:13:
         62:ab:52:8c:fa:b1:26:8a:95:85:a6:55:02:e6:9e:c9:5c:9b:
         70:eb:93:94:88:ff:07:74:be:72:bb:1d:8f:bf:2e:5c:f9:32:
         f6:09:2f:7c:60:11:38:74:4d:b4:a0:30:d0:db:48:75:4d:6b:
         23:56:39:f6:12:13:ce:69:df:7a:4d:d2:a5:04:51:15:c3:58:
         d7:4e:32:91:50:32:10:eb:75:7d:02:ff:ae:b6:41:06:7a:5b:
         4e:f3:c5:87:08:42:bc:33:ac:f1:76:64:ff:66:83:be:48:a9:
         45:24:6a:2e:fb:c9:06:cb:e1:f5:41:d2:83:11:82:fb:85:bc:
         10:bd:23:4b:b3:3b:ea:31:c0:37:7b:ea:bf:fd:3b:0b:14:2a:
         b6:af:a8:a9:b9:62:41:fa:8a:b7:2a:7f:97:d7:a8:b1:0a:cf:
         55:37:16:48:80:fa:5d:4f:3d:f7:ce:1f:19:8c:6f:a3:53:ca:
         fc:13:74:c2:cf:df:9a:de:eb:f3:3f:7d:8f:18:6b:c6:fc:e1:
         3f:9f:f5:3a:af:9c:d9:93:d8:0e:63:93:5b:62:19:31:fc:5f:
         a9:4c:27:c5:d0:ff:4e:59:77:a7:1a:bf:83:67:ca:62:3a:59:
         fb:cc:9b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 16:00:50 2026 by rpki-client