Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File:                     _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier:          iFX4voQ9JqlX/akK7JtOYFA/jI4pOKV6YpKfGBzhhoU=
Subject key identifier:   06:A4:90:87:53:82:58:34:B5:0D:CB:F3:CE:22:1B:BD:92:E4:7C:01
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer:       /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial:       01A1A85DCDAD39E8AEA471A48ADCA159BF2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number:          0476
Signing time:             Wed 04 Nov 2026 21:01:22 +0000
Manifest this update:     Wed 04 Nov 2026 21:01:22 +0000
Manifest next update:     Thu 05 Nov 2026 21:01:22 +0000
Files and hashes:         1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: OqzuwpZLO+gE98RNTexgQnNSA55CIBg8TBGBY5lhJOg=)
                          2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
                          3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 19:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a8:5d:cd:ad:39:e8:ae:a4:71:a4:8a:dc:a1:59:bf:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
        Validity
            Not Before: Nov  4 21:01:22 2026 GMT
            Not After : Nov  5 21:01:22 2026 GMT
        Subject: CN=06a4908753825834b50dcbf3ce221bbd92e47c01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:68:dc:94:ac:eb:63:c0:86:cb:15:93:b6:29:
                    b8:64:3a:11:42:f9:df:0d:97:f8:60:42:d1:c7:5e:
                    a7:87:eb:17:a4:76:46:07:b2:80:37:2c:31:04:5c:
                    15:ff:23:34:3e:1f:70:09:06:ed:bb:af:56:18:1e:
                    14:0d:9c:b3:63:19:6d:e4:df:dc:38:6b:90:c5:5d:
                    e1:38:33:7a:00:c6:42:f8:76:8a:fb:bf:fe:2e:b1:
                    2c:48:bf:1c:ca:91:d3:ee:6b:ed:13:73:0a:5d:cf:
                    17:f0:b0:e1:07:3e:c4:d7:06:bb:f8:04:53:7a:32:
                    e0:4f:9f:c1:37:bb:f9:6a:a0:1c:55:76:b6:1a:94:
                    01:f8:94:c3:59:41:be:54:8b:df:92:6c:48:80:93:
                    3e:9a:28:fb:56:9c:55:7f:99:c1:68:fd:cd:e4:53:
                    38:60:b9:45:a5:40:b9:6c:3f:19:ff:65:d3:98:51:
                    a6:5f:ed:06:1a:b8:47:7a:f5:5c:f2:35:70:41:e8:
                    53:3b:a6:b9:e1:15:23:81:0c:73:3a:d6:ec:e2:82:
                    b9:d0:ca:7f:b8:f9:9f:cc:45:0f:62:c2:80:3f:09:
                    38:4d:d7:b9:4c:f3:be:33:e6:9d:c8:cd:72:7e:7e:
                    cf:34:aa:36:7e:c2:81:13:4c:60:0c:71:cf:4b:32:
                    76:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:A4:90:87:53:82:58:34:B5:0D:CB:F3:CE:22:1B:BD:92:E4:7C:01
            X509v3 Authority Key Identifier:
                keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:80:73:5f:ef:35:31:e0:b8:24:f7:87:50:55:2b:36:c5:8a:
         d9:d3:02:41:1f:1f:d9:a8:43:dc:39:d8:fc:77:d3:53:93:33:
         8a:d3:63:32:69:12:a7:5c:79:22:9b:ac:a1:23:3f:98:19:4e:
         d4:3b:9b:f4:c4:6c:4b:51:0b:3b:a6:a2:d3:50:90:36:20:21:
         3b:43:ca:82:f7:6e:84:2f:ff:6f:fd:7b:cf:fc:18:43:1b:a5:
         62:47:a8:fd:1f:1c:7e:b4:f4:db:97:39:11:d6:be:fa:96:b0:
         72:81:14:b2:01:c6:23:2a:07:af:68:ef:25:23:60:8a:72:b9:
         b5:3d:0e:49:4d:1a:65:83:38:c2:94:80:c7:5b:13:f5:70:8b:
         0a:f0:f3:3f:38:98:cf:bc:3e:61:ff:6b:a6:ee:8d:ed:a8:7d:
         0a:fa:35:25:45:93:ac:b1:06:d6:8b:8e:50:46:c6:1f:00:0c:
         6d:97:25:44:67:e8:ae:60:c4:db:87:1a:25:f3:b4:42:45:8f:
         93:a7:fb:a9:cc:40:32:28:c7:6f:d3:8b:6e:14:ef:87:a9:fa:
         a9:d5:19:5f:ec:8c:a1:73:b5:ad:17:f5:84:77:91:8d:bb:bf:
         a4:61:41:1d:93:79:6a:72:d1:3b:10:c1:d7:53:d2:5b:59:4b:
         8e:de:a8:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 05:32:39 2026 by rpki-client