Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File:                     _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier:          qSzFCMqPB4pvpsVYY1Mjn3ZQVBL79rqVV8YSwss5q+I=
Subject key identifier:   C0:2F:36:34:BA:31:33:2B:5A:64:32:81:3B:EC:B2:48:CF:E9:C8:FF
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer:       /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial:       01A0BEB03DE62DB76FF42D5EDE93E6004192
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number:          03FD
Signing time:             Sun 20 Sep 2026 12:00:16 +0000
Manifest this update:     Sun 20 Sep 2026 12:00:16 +0000
Manifest next update:     Mon 21 Sep 2026 12:00:16 +0000
Files and hashes:         1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: JDOqV5iP9bYhFGg2/kB9EvXOIEVrYSjXigylHjDi10A=)
                          2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
                          3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 12:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:be:b0:3d:e6:2d:b7:6f:f4:2d:5e:de:93:e6:00:41:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
        Validity
            Not Before: Sep 20 12:00:16 2026 GMT
            Not After : Sep 21 12:00:16 2026 GMT
        Subject: CN=c02f3634ba31332b5a6432813becb248cfe9c8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:24:a1:c1:bf:65:a2:46:f5:1b:1e:54:81:c7:
                    eb:dc:fe:0d:26:73:67:a1:69:12:34:0e:c7:0e:f1:
                    18:b8:06:70:b2:8f:fb:9b:cf:4c:f8:7e:6b:96:0e:
                    e1:2e:a9:8e:f7:e4:c1:a1:7f:b4:d7:f8:22:5f:58:
                    71:ca:8a:54:81:76:56:09:c6:96:ab:11:f8:3a:cf:
                    40:6e:72:9f:31:f5:aa:1b:02:46:be:6a:42:b4:6b:
                    ed:76:d2:0b:fb:00:cc:21:6f:a2:92:2d:a4:29:83:
                    28:f1:4f:6b:9f:c3:f8:47:f0:56:c1:ee:69:a4:34:
                    2c:82:f7:23:db:6d:82:72:2c:20:b1:24:20:57:eb:
                    ab:d2:ac:b1:fe:fe:89:3d:4a:9f:cc:f1:cf:35:a6:
                    42:3e:27:15:18:43:19:dc:4a:fa:e5:64:7a:e9:aa:
                    f1:3c:50:d7:51:81:05:f5:ac:4c:3d:1d:6f:75:9a:
                    e1:08:be:5e:05:8e:41:9a:a1:b4:84:1f:3c:f2:53:
                    47:2e:ae:f3:fe:37:45:08:3e:c8:e6:17:63:77:0d:
                    ce:61:b4:80:b1:51:e9:ff:b9:e5:30:f2:86:72:e9:
                    7d:50:4b:d3:0a:5f:e1:70:fc:62:5f:2f:1a:c9:e8:
                    7d:27:fb:3b:be:34:68:ea:b2:07:ba:c5:b7:ca:5e:
                    d0:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:2F:36:34:BA:31:33:2B:5A:64:32:81:3B:EC:B2:48:CF:E9:C8:FF
            X509v3 Authority Key Identifier:
                keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:57:40:ba:1e:c7:14:69:1f:96:82:2b:33:49:18:05:bd:c1:
         55:49:38:d4:41:10:f4:77:0c:d5:39:ee:a7:90:9c:9d:26:05:
         a3:67:8e:6b:15:cb:b7:da:c8:3e:16:15:90:35:61:7f:95:1c:
         1a:86:81:95:50:24:cc:a1:10:0a:27:a9:cc:14:81:71:5a:9f:
         c0:18:e7:06:db:37:e3:a3:95:1f:c2:f1:fa:c2:0d:f8:e4:36:
         53:33:4c:16:41:25:d1:63:f4:ff:87:80:41:83:f6:f4:be:93:
         69:10:2d:0a:02:fe:98:c4:b2:78:6a:43:16:68:78:2f:80:27:
         24:35:bd:af:41:86:e1:25:b1:c8:42:bc:9e:fb:91:bc:6a:66:
         06:90:94:4c:26:c5:30:1f:b9:c5:64:8a:57:6c:0c:64:fb:f1:
         86:e8:4e:1c:00:86:94:5b:cb:c0:53:d1:fe:df:0c:ef:f3:c4:
         9a:d9:9d:c4:8b:61:71:ed:1d:b3:a0:38:91:c1:91:0f:e2:8d:
         fd:fa:15:10:28:3e:5f:62:73:c0:d4:9d:fb:c6:39:bd:cb:f3:
         5b:53:ea:cc:e7:63:ba:87:49:24:0f:6d:32:0d:f3:fd:03:23:
         fe:8a:a3:6f:e8:81:ed:5b:4a:20:b4:56:0e:51:07:7d:c7:5f:
         7d:f7:40:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:19:52 2026 by rpki-client