Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
File:                     vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft (raw, json)
Hash identifier:          GLvKpQuXATFQ5Br0Qu+9uYKgvHpCWxG3nFvwqwH+2rM=
Subject key identifier:   4F:5F:AA:44:D1:EA:94:5A:96:60:00:96:E2:34:2C:54:D7:A3:9C:EE
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       01A131B48B4BCC7BB2F904E35BFFADF1BDA0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
Manifest number:          027A
Signing time:             Mon 12 Oct 2026 20:01:18 +0000
Manifest this update:     Mon 12 Oct 2026 20:01:18 +0000
Manifest next update:     Tue 13 Oct 2026 20:01:18 +0000
Files and hashes:         1: 2MkkGiaWngpj3U_s10szg-C2G3E.asa (hash: tRTEi9Wv285mhFd9p2e1WBPXHzXR6/hZi7ygRmANF/A=)
                          2: vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl (hash: q7wLHFMsOGYVyxKzgf2gM7AHdWm4fLTqiHBiaH9AWL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:31:b4:8b:4b:cc:7b:b2:f9:04:e3:5b:ff:ad:f1:bd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Oct 12 20:01:18 2026 GMT
            Not After : Oct 13 20:01:18 2026 GMT
        Subject: CN=4f5faa44d1ea945a96600096e2342c54d7a39cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5e:c3:11:c5:1d:99:40:5c:89:44:2e:a7:32:
                    18:c4:87:59:ce:2c:94:f8:46:4c:4b:12:e6:5f:b0:
                    10:a8:ca:f6:4f:fb:3f:5e:06:e6:97:73:cf:11:68:
                    e0:2d:4e:91:62:e3:6d:ab:ad:a4:c4:3f:90:16:47:
                    ff:aa:81:bf:8c:d6:ae:24:cd:9e:fb:55:67:bb:9a:
                    13:b6:cc:de:cb:4f:e3:f3:01:e9:3f:42:56:d9:85:
                    95:88:0b:76:9f:5b:c4:ad:0e:dd:a5:40:7f:df:9b:
                    c2:38:33:79:22:7b:9e:6a:de:7f:e4:3c:6d:d7:48:
                    bc:f5:97:90:f0:ae:42:0e:c5:a7:6d:07:63:a5:50:
                    7a:69:3c:ee:13:4d:ca:93:33:c9:52:cb:a9:5e:e2:
                    06:b4:b1:e1:54:c1:fe:97:61:d3:af:f2:83:01:59:
                    30:7b:1b:95:a7:43:81:62:c3:01:f0:23:db:98:fb:
                    bd:31:91:6f:75:58:b2:67:2f:bd:9e:c3:f5:d7:5b:
                    7b:36:c2:05:9f:65:ed:4f:d5:05:89:32:23:db:af:
                    53:89:b8:ea:70:ba:5c:79:9c:bc:a3:b4:b7:f8:14:
                    a5:2e:2c:4a:58:ff:6e:a6:f1:6c:bc:78:c9:92:7c:
                    c2:d7:77:14:31:d4:05:84:66:85:6d:27:3f:60:09:
                    e1:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:5F:AA:44:D1:EA:94:5A:96:60:00:96:E2:34:2C:54:D7:A3:9C:EE
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:01:f0:04:8f:6d:63:5b:19:83:09:5d:f6:c6:ed:2d:80:4b:
         f7:88:92:98:8c:7c:58:3b:92:c6:d8:81:e5:86:19:9a:9b:35:
         d5:4e:b3:39:29:e1:26:a0:b4:54:e0:74:1e:70:b7:c8:6e:d3:
         58:74:8c:de:07:55:4a:67:74:d5:c3:ed:4d:e9:2e:5f:ef:36:
         d5:ca:22:d3:c9:87:b5:fe:84:10:cd:bc:20:f0:d4:71:6e:79:
         e5:f3:78:c9:1c:27:7d:be:93:d5:b6:ac:5c:32:c9:ff:e1:4d:
         b5:9b:bc:49:f5:d7:7c:32:ed:c4:1b:e5:db:63:5e:39:cd:5b:
         61:b1:98:5a:a2:53:73:52:6b:b6:d2:29:50:c2:ad:47:30:86:
         83:b6:a4:77:08:4c:45:1e:18:8a:55:92:2c:7e:c3:11:88:27:
         d1:bc:4e:19:db:57:6e:86:37:23:2b:ae:10:05:4c:3e:4d:5b:
         a0:f4:fb:f3:a8:41:04:ad:f8:7f:94:ed:a8:b2:0c:a9:53:a7:
         90:eb:bf:98:17:28:72:2b:1b:b5:63:23:ec:40:79:a1:a8:a2:
         e7:42:94:b4:7d:43:16:07:e6:e6:6f:b0:ba:9f:9e:a2:41:19:
         4b:de:e0:5a:be:1c:61:3d:1a:b6:c2:e9:c9:34:4d:0e:f1:d5:
         93:6a:07:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 04:43:53 2026 by rpki-client