Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          UJXlDjsS5HKl2R5XkauZlTLyAQQ7sEf2VRtFpW86tpY=
Subject key identifier:   77:33:CE:28:29:1B:BC:D0:A6:30:67:B0:4D:57:5B:76:62:39:27:0E
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       01A1A894B3EE754897D82789B7F64DFE0269
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          1369
Signing time:             Wed 04 Nov 2026 22:01:19 +0000
Manifest this update:     Wed 04 Nov 2026 22:01:19 +0000
Manifest next update:     Thu 05 Nov 2026 22:01:19 +0000
Files and hashes:         1: L_7j6XipV_rl9hNUiOHj4WxMSmo.roa (hash: z3a3VYcxFpYn9ODiZyLM9UwhT9JBwpNbCVANtU3EGAU=)
                          2: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          3: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: p1O4l/Ic13FyoJlFptHFiAOdcgmPmQeBlTK2DhNHCnk=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 05 Nov 2026 17:37:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:a8:94:b3:ee:75:48:97:d8:27:89:b7:f6:4d:fe:02:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Nov  4 22:01:19 2026 GMT
            Not After : Nov  5 22:01:19 2026 GMT
        Subject: CN=7733ce28291bbcd0a63067b04d575b766239270e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b3:3f:fc:78:7d:71:f9:2d:9f:48:9c:cf:44:
                    2b:7e:8a:66:34:01:0a:3e:44:fe:c3:53:88:db:54:
                    d9:e1:de:48:9a:1c:50:29:c5:d6:f4:bd:55:81:59:
                    f3:37:26:ea:c7:12:8b:04:3b:55:49:96:85:41:3d:
                    2d:51:1b:77:5b:a6:cb:57:f5:ae:45:09:73:94:b5:
                    84:c0:d6:6f:d9:34:6b:76:19:61:9a:e7:b9:2e:23:
                    e9:9e:85:a4:b2:82:e4:b9:8c:82:30:34:07:f2:33:
                    88:01:52:95:c6:4a:30:ff:fe:58:40:1e:a2:dc:0a:
                    1f:07:fe:c7:98:b5:35:5d:2c:29:fc:04:d5:9d:c7:
                    22:46:9f:0e:96:fe:e0:c1:e7:84:cc:4a:25:e8:a2:
                    40:9e:c5:c3:cf:8c:da:7a:8a:84:f3:c9:ce:d7:ab:
                    c7:8b:d7:ab:fc:ce:50:48:e6:83:b0:c6:7a:07:b4:
                    54:b3:16:2d:59:c2:9f:ed:2b:2a:c5:44:56:f3:10:
                    81:b4:ad:85:12:da:dc:0d:1f:9d:ae:d9:aa:f4:0e:
                    88:f6:e6:80:d6:b9:5f:c2:86:7b:92:43:78:9d:bf:
                    12:bc:e9:59:85:ce:cb:c4:63:82:c5:d1:a7:a3:04:
                    0d:f5:c6:4a:a5:c6:f9:b6:9d:6b:eb:ec:d3:eb:e5:
                    5a:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:33:CE:28:29:1B:BC:D0:A6:30:67:B0:4D:57:5B:76:62:39:27:0E
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:a2:4f:72:82:6c:90:25:0f:35:9c:67:1c:12:f2:59:ec:14:
         b0:a2:ab:80:d7:e9:89:5e:a0:b6:fb:6c:a9:e0:43:a2:57:7f:
         82:c6:28:52:9a:38:fa:16:5b:3d:9a:a1:73:e3:f6:4a:e3:fb:
         9d:e6:23:fd:c1:02:f6:c1:f3:1c:a2:a7:ca:99:9d:77:1c:3b:
         18:7d:0e:7d:24:97:da:b9:0d:8d:a0:7c:57:14:72:42:3f:51:
         b8:30:c9:60:85:0b:dd:4e:a2:f3:cf:e9:6d:66:4d:09:97:bd:
         ee:ea:f1:3f:25:c4:b5:99:20:3f:59:a9:ec:2f:60:8a:4b:8e:
         73:e1:33:a9:87:d1:28:87:da:30:ab:7a:bf:e5:de:eb:73:cc:
         1c:4b:86:87:bf:9e:70:8a:c5:af:8d:9a:43:e5:9f:ab:48:91:
         c0:19:88:0e:79:42:7c:eb:f3:76:79:3c:30:bf:58:da:61:f4:
         41:0e:83:da:af:65:c9:c7:2e:c0:8b:97:c7:7a:fc:32:98:34:
         25:69:6e:13:d9:19:2a:49:a4:be:24:14:aa:32:fc:36:b2:5a:
         22:c1:03:b5:9e:20:63:8a:8d:d3:ce:84:3f:71:50:0a:f8:be:
         46:f8:f4:b1:98:3f:41:6c:ef:cd:5d:3f:f1:15:83:f9:bf:94:
         8b:50:f1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 02:41:30 2026 by rpki-client