Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          h5PZUlbx68zhEzk3d4Z/z+rm4nJvqCHONpxAsOfwiU8=
Subject key identifier:   A1:DF:9D:AC:B7:D7:90:18:3A:6D:77:25:99:00:6B:0B:E1:53:F2:D3
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       01A0BD3072D6DA5EA7041955FBC10D7DFED2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          12EF
Signing time:             Sun 20 Sep 2026 05:01:03 +0000
Manifest this update:     Sun 20 Sep 2026 05:01:03 +0000
Manifest next update:     Mon 21 Sep 2026 05:01:03 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: lf+wKb6p9sKW3ggcaB3+LZxQ7g+TgJ+K/oFdykZjnM0=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 05:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bd:30:72:d6:da:5e:a7:04:19:55:fb:c1:0d:7d:fe:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Sep 20 05:01:03 2026 GMT
            Not After : Sep 21 05:01:03 2026 GMT
        Subject: CN=a1df9dacb7d790183a6d772599006b0be153f2d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:3a:1b:ac:f6:dd:fd:63:38:ed:43:d1:37:33:
                    38:cc:4c:48:6a:1c:e4:28:38:32:7b:ad:51:a6:e8:
                    1b:b2:5a:db:75:43:ff:41:27:2a:d4:4e:c7:9a:80:
                    2d:a9:b8:b7:5e:71:55:93:7b:f7:8e:7f:f9:a9:35:
                    be:60:7c:f0:87:cc:5d:b7:e0:18:e8:0b:a6:bb:e7:
                    b5:f6:bb:32:48:9c:e8:a5:32:81:24:25:f7:7b:23:
                    f7:12:c2:83:51:f7:d3:ab:56:28:bf:e6:39:1c:fc:
                    3e:a5:7b:52:64:27:70:c7:7d:9a:3b:6f:0f:93:18:
                    6d:7e:59:cd:ae:a3:5f:9c:e7:83:41:4c:e8:df:cd:
                    aa:63:68:eb:24:d7:44:f8:10:34:6a:56:f8:0c:1b:
                    63:eb:6c:22:73:ad:57:6a:af:9d:e7:07:47:4c:ab:
                    2d:c8:a3:b9:63:46:de:60:1a:b7:62:2d:28:08:3e:
                    c7:e0:8f:a8:2e:b3:c6:02:0a:e4:96:19:91:ce:75:
                    78:94:c3:95:b3:5a:67:17:f9:c7:d0:e1:81:a4:51:
                    0d:57:ef:73:6a:ac:cc:aa:4d:44:2f:5c:5c:cc:38:
                    77:37:db:d2:16:ab:de:e3:84:17:78:90:1d:7c:08:
                    f4:2c:33:60:a3:fb:18:c1:10:38:d8:44:e1:03:a9:
                    b8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DF:9D:AC:B7:D7:90:18:3A:6D:77:25:99:00:6B:0B:E1:53:F2:D3
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ec:1a:21:44:a3:70:06:28:9c:d0:24:f4:83:5e:fe:1c:b4:
         c4:f7:20:2e:3f:a5:7a:46:9e:e1:c6:69:d0:99:2f:73:4e:85:
         53:66:5a:e8:2a:b4:5c:c8:9c:5c:a6:9f:80:51:f0:d6:1a:53:
         af:27:33:e9:99:ab:75:2f:1f:4c:32:73:60:ea:fb:33:6a:b4:
         b7:5b:ce:65:47:27:25:40:d8:64:38:1a:8c:47:c6:e6:60:41:
         7a:18:12:3f:d4:29:86:08:56:3a:51:35:21:59:6e:5b:e9:85:
         73:52:96:b7:c1:22:f6:2f:26:fb:25:ec:b8:51:93:49:5e:03:
         d6:ff:04:05:14:50:a3:5a:1d:60:de:f2:0d:0c:e2:08:ba:49:
         04:97:db:17:30:fc:9e:d2:af:3f:d1:c1:01:42:a2:8b:e6:68:
         c1:05:54:32:aa:71:b1:44:de:15:fa:5d:14:5f:a2:04:96:e2:
         93:1a:57:e5:d5:88:5e:d4:ec:df:1b:75:cb:28:af:29:ce:54:
         7e:07:38:79:f6:36:1b:ec:b4:c9:ba:34:e0:a5:cc:2b:9c:7f:
         46:a3:1e:12:37:a8:fb:70:98:bf:0a:c0:b3:c7:27:fd:b4:ef:
         9e:e6:00:6e:0d:01:6d:e4:18:fe:3a:19:b0:13:eb:59:ab:f2:
         05:a3:9d:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:45:15 2026 by rpki-client