Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
File:                     vmGeqxZHT-1toJ0UezAl31t0l8o.mft (raw, json)
Hash identifier:          obgr2xCqoe1MNnEJPgso8R2U4ui2NnaIXYNPNNntoR8=
Subject key identifier:   AE:DF:2D:A2:6D:DE:E8:37:0E:43:48:C7:67:90:86:B0:11:7F:26:B2
Authority key identifier: BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA
Certificate issuer:       /CN=be619eab16474fed6da09d147b3025df5b7497ca
Certificate serial:       01A13A49E8F4D5602A2508E25F6AD8EC4745
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
Manifest number:          011C
Signing time:             Wed 14 Oct 2026 12:01:24 +0000
Manifest this update:     Wed 14 Oct 2026 12:01:24 +0000
Manifest next update:     Thu 15 Oct 2026 12:01:24 +0000
Files and hashes:         1: k95nSKzfyj7oyf3hxhJggwkYbzM.roa (hash: qGRzMQRX6JUJIZPjW/27YDaPV7jnrL30iowtpo5onJ8=)
                          2: vmGeqxZHT-1toJ0UezAl31t0l8o.crl (hash: mIrVoXPtHTBkcsSnFKZF1LmoIyuKUodrufkLArsVwlQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 12:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:49:e8:f4:d5:60:2a:25:08:e2:5f:6a:d8:ec:47:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be619eab16474fed6da09d147b3025df5b7497ca
        Validity
            Not Before: Oct 14 12:01:24 2026 GMT
            Not After : Oct 15 12:01:24 2026 GMT
        Subject: CN=aedf2da26ddee8370e4348c7679086b0117f26b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b3:34:81:1e:58:7e:4e:99:8c:bd:8c:d7:79:
                    85:f6:f5:de:ed:b5:fb:69:a7:83:92:0a:9a:c9:1d:
                    5b:e8:03:26:60:09:fe:3f:60:55:fd:f2:8d:d8:a2:
                    9b:4c:97:7b:d6:fa:ae:34:8b:3a:57:15:42:f4:42:
                    b2:e1:f2:ed:64:3f:a0:fd:d3:6a:03:35:bf:a1:05:
                    82:10:5e:32:7f:1f:3d:b4:1f:22:98:b0:95:cd:51:
                    2b:07:3f:33:fb:44:cb:9c:c8:ad:81:ef:d3:97:4b:
                    27:c4:0d:47:90:4d:3d:60:5c:30:33:02:e0:4b:23:
                    c9:e3:0e:b3:1b:b8:8f:6a:62:7b:c9:69:d4:7c:3d:
                    0e:07:72:cf:73:8a:88:8e:f9:3c:25:a2:4b:af:69:
                    bf:2e:63:3b:bc:dc:7a:12:ff:d8:13:7d:8f:25:63:
                    bd:86:0e:05:cf:4f:4c:a6:4d:61:bd:85:77:02:bd:
                    17:da:46:dc:ca:11:34:a3:55:ea:7c:54:65:fb:9f:
                    68:1e:d7:41:fe:5c:bc:df:21:25:9b:5c:b4:68:d4:
                    e6:0a:11:91:c2:ed:46:c7:c4:7c:32:46:99:b2:d2:
                    41:6b:12:be:b0:aa:5b:21:05:7d:51:35:01:5c:14:
                    08:f9:52:d3:3e:3a:ee:6b:6b:13:7a:31:88:09:7b:
                    4e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DF:2D:A2:6D:DE:E8:37:0E:43:48:C7:67:90:86:B0:11:7F:26:B2
            X509v3 Authority Key Identifier:
                keyid:BE:61:9E:AB:16:47:4F:ED:6D:A0:9D:14:7B:30:25:DF:5B:74:97:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmGeqxZHT-1toJ0UezAl31t0l8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/2f870e-2ba5-4b88-91a0-1d2348dbd036/1/vmGeqxZHT-1toJ0UezAl31t0l8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:cc:23:59:e6:f4:ee:62:e6:df:8b:19:50:e0:0b:31:5a:ad:
         5e:a5:cb:a5:e5:59:c0:50:99:d7:6c:19:ae:54:77:cb:9c:c0:
         2e:cc:1d:0e:75:b8:97:22:f0:a2:59:bc:3c:a4:6b:3c:9a:bd:
         f5:09:e7:95:37:e4:e1:86:1b:3b:79:82:46:d5:d9:6c:6e:f9:
         41:03:21:1f:6a:b6:b4:ab:65:94:dd:a5:40:ae:6e:6e:c2:7f:
         22:f1:21:c9:fa:6d:74:43:21:de:cd:52:54:9a:dc:b3:c9:1b:
         be:70:31:9f:9d:21:3b:1d:70:e0:0c:32:d6:fc:d5:ea:75:1c:
         77:9b:dc:dd:24:95:8a:0b:e0:e5:2c:14:ac:e2:e5:eb:da:b1:
         42:b3:4c:bc:48:e1:16:56:8f:c0:5f:9f:a7:64:84:96:52:54:
         b5:24:55:83:93:55:82:d5:bd:c9:0d:7e:7a:8b:07:6d:b0:52:
         0b:43:20:b0:cb:09:39:9d:32:64:6b:3d:94:70:b2:44:b1:64:
         02:95:59:7f:49:6a:08:e9:99:e6:89:41:1f:39:f2:6e:aa:ac:
         ac:42:69:92:d5:56:03:a6:93:dd:44:16:7b:20:97:73:cc:03:
         61:6c:73:2d:85:84:46:fa:ca:25:97:30:82:6a:a8:63:f6:e8:
         f1:b1:3e:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 20:23:21 2026 by rpki-client