Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
File:                     vmBP81opyRFWvkvSKbO693yDl70.mft (raw, json)
Hash identifier:          WKdG7E5BnZB+OwxaHgBCPx0MY1Rn+kWokDMY/Bv330A=
Subject key identifier:   EB:96:95:D9:4E:77:38:E2:9A:08:E0:7A:2A:E3:6F:82:6D:E1:64:00
Authority key identifier: BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD
Certificate issuer:       /CN=be604ff35a29c91156be4bd229b3baf77c8397bd
Certificate serial:       01A0C9A227F14FE1D8D9B248E4F28545DB7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
Manifest number:          0C98
Signing time:             Tue 22 Sep 2026 15:00:42 +0000
Manifest this update:     Tue 22 Sep 2026 15:00:42 +0000
Manifest next update:     Wed 23 Sep 2026 15:00:42 +0000
Files and hashes:         1: 4gyUgvvblC7I5QDxCNCCyEJeWZ4.roa (hash: nDBkzRzCyJ6k3duOjuq/g47E59h3h29lMNe++vUhVXY=)
                          2: ZJ-T6ueMae72SObhWhaz9nVHF40.roa (hash: Ow4/9pV+gX/QMnh7E9AZiapSKVWWKGuqpiJHgE1l0SU=)
                          3: g2RgzQfRtI2o8X5sMP-NXjF8Uho.roa (hash: QHdSplXR9hrky5KPz8Vf+POncO+1O6g9pizr3/G9QPY=)
                          4: vmBP81opyRFWvkvSKbO693yDl70.crl (hash: e4oQkW/jD18TL+dBpODIjDl2ANQfK/CYxCVVmfDcoTk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c9:a2:27:f1:4f:e1:d8:d9:b2:48:e4:f2:85:45:db:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be604ff35a29c91156be4bd229b3baf77c8397bd
        Validity
            Not Before: Sep 22 15:00:42 2026 GMT
            Not After : Sep 23 15:00:42 2026 GMT
        Subject: CN=eb9695d94e7738e29a08e07a2ae36f826de16400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:4e:96:d1:69:81:7d:53:99:81:c2:b1:db:3e:
                    d2:38:f9:81:36:0d:9c:df:f4:90:cb:d2:63:4c:ca:
                    24:f5:8e:ca:1b:f3:2b:fe:5b:57:b3:df:f3:60:81:
                    6c:b5:e1:97:47:28:80:85:cc:3a:54:8d:29:b5:35:
                    06:da:56:69:be:b8:c4:2f:ea:cc:79:6a:6c:d2:70:
                    69:69:92:3c:e7:bc:fd:fd:64:df:3c:3d:36:2d:68:
                    79:22:c9:f7:84:16:41:20:0f:95:f1:d4:4f:fe:31:
                    de:6f:0e:24:2d:dc:6c:79:a2:90:2d:21:0e:cf:09:
                    ee:15:a2:32:c6:7c:65:92:6c:6f:e2:b7:61:14:94:
                    6a:ca:e0:8f:3c:78:94:67:cd:66:64:41:3c:02:7d:
                    08:d7:d9:be:97:14:c9:e8:23:3c:fc:ef:2e:fd:dc:
                    56:6c:5d:6e:63:d3:65:b6:6f:d5:cb:51:fd:0b:30:
                    7a:8a:0c:7b:df:0e:3f:e8:92:17:56:86:43:66:a7:
                    11:9f:5c:26:9a:41:e8:91:fe:19:e3:db:30:c9:d7:
                    02:d3:36:b2:c8:a3:a8:74:e5:fe:a3:2b:3a:7e:5f:
                    c7:cb:79:30:60:11:ea:23:7a:3e:52:9a:3c:70:5e:
                    bc:dd:24:ce:bc:41:46:99:17:45:a6:0b:d4:a7:0f:
                    76:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:96:95:D9:4E:77:38:E2:9A:08:E0:7A:2A:E3:6F:82:6D:E1:64:00
            X509v3 Authority Key Identifier:
                keyid:BE:60:4F:F3:5A:29:C9:11:56:BE:4B:D2:29:B3:BA:F7:7C:83:97:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmBP81opyRFWvkvSKbO693yDl70.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e849bb-1304-44ea-838f-1a39c3d34f08/1/vmBP81opyRFWvkvSKbO693yDl70.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:98:f2:75:ed:cd:47:69:6c:98:3a:c6:e9:eb:c0:12:71:ca:
         ef:a6:24:cb:4b:e1:a3:3e:f8:0d:90:cd:fd:ec:51:06:a4:a6:
         3d:d2:b6:3f:84:86:22:37:b5:6b:dd:a1:3d:02:c9:05:c2:3a:
         96:8d:4f:8f:ee:43:2c:31:bc:74:42:71:8c:ca:36:32:3b:16:
         18:1c:03:9b:b0:21:03:a6:f4:4a:39:0b:d5:c5:a0:f0:27:74:
         68:76:46:f7:05:67:26:54:91:ba:a6:72:c1:4a:b8:46:f9:ee:
         a5:69:0e:9a:84:a7:5b:62:3a:ac:bb:a4:21:4a:40:7c:49:9c:
         a2:e3:40:6b:13:b5:30:62:87:72:f4:cb:37:f8:6d:71:37:06:
         4e:1b:10:4a:77:83:54:b5:64:02:74:80:ae:6f:e6:87:1f:92:
         cc:4f:a7:50:06:7b:bb:b9:4a:d6:87:4a:63:b7:41:49:08:38:
         0b:7f:c8:9d:a0:d1:5f:de:46:1b:0f:7a:df:ac:87:72:8f:8e:
         c9:c3:64:9a:5d:0b:5b:a4:c9:fb:6a:4e:10:ad:55:82:da:4c:
         48:77:f3:8e:be:87:00:ca:98:4e:d3:6f:7e:8b:b4:c1:11:e8:
         31:ca:93:d1:46:81:9f:a4:bc:74:61:87:00:48:ef:e0:2a:37:
         8d:74:4e:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDJoifxT+HY2bJI5PKFRdt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjA0ZmYzNWEyOWM5MTE1NmJlNGJkMjI5YjNiYWY3N2M4
Mzk3YmQwHhcNMjYwOTIyMTUwMDQyWhcNMjYwOTIzMTUwMDQyWjAzMTEwLwYDVQQD
EyhlYjk2OTVkOTRlNzczOGUyOWEwOGUwN2EyYWUzNmY4MjZkZTE2NDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5k6W0WmBfVOZgcKx2z7SOPmBNg2c
3/SQy9JjTMok9Y7KG/Mr/ltXs9/zYIFsteGXRyiAhcw6VI0ptTUG2lZpvrjEL+rM
eWps0nBpaZI857z9/WTfPD02LWh5Isn3hBZBIA+V8dRP/jHebw4kLdxseaKQLSEO
zwnuFaIyxnxlkmxv4rdhFJRqyuCPPHiUZ81mZEE8An0I19m+lxTJ6CM8/O8u/dxW
bF1uY9Nltm/Vy1H9CzB6igx73w4/6JIXVoZDZqcRn1wmmkHokf4Z49swydcC0zay
yKOodOX+oys6fl/Hy3kwYBHqI3o+Upo8cF683STOvEFGmRdFpgvUpw92ewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOuWldlOdzjimgjgeirjb4Jt4WQAMB8GA1UdIwQY
MBaAFL5gT/NaKckRVr5L0imzuvd8g5e9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYt
MWEzOWMzZDM0ZjA4LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lODQ5YmItMTMwNC00NGVhLTgzOGYtMWEzOWMzZDM0ZjA4
LzEvdm1CUDgxb3B5UkZXdmt2U0tiTzY5M3lEbDcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcpjyde3N
R2lsmDrG6evAEnHK76Yky0vhoz74DZDN/exRBqSmPdK2P4SGIje1a92hPQLJBcI6
lo1Pj+5DLDG8dEJxjMo2MjsWGBwDm7AhA6b0SjkL1cWg8Cd0aHZG9wVnJlSRuqZy
wUq4RvnupWkOmoSnW2I6rLukIUpAfEmcouNAaxO1MGKHcvTLN/htcTcGThsQSneD
VLVkAnSArm/mhx+SzE+nUAZ7u7lK1odKY7dBSQg4C3/InaDRX95GGw9636yHco+O
ycNkml0LW6TJ+2pOEK1VgtpMSHfzjr6HAMqYTtNvfou0wRHoMcqT0UaBn6S8dGGH
AEjv4Co3jXROzg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 21:59:07 2026 by rpki-client