Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
File:                     vfmISqqLxFMKb9rXkmv_tpp6UAM.mft (raw, json)
Hash identifier:          VudKAhe6jGX+i/emxquMQXKpEH4Sxp2Z9uoOypDx4sM=
Subject key identifier:   0B:8A:6E:17:51:74:B5:7B:CD:29:EE:C5:D6:7C:A0:D5:2D:B6:8B:27
Authority key identifier: BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03
Certificate issuer:       /CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
Certificate serial:       01A0C36940C5CA07C881C202D1A74C13E727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
Manifest number:          02B7
Signing time:             Mon 21 Sep 2026 10:00:49 +0000
Manifest this update:     Mon 21 Sep 2026 10:00:49 +0000
Manifest next update:     Tue 22 Sep 2026 10:00:49 +0000
Files and hashes:         1: feFpbgaA_8ODcMfVc_V_mfl727s.roa (hash: vDrb2+rFyQM8sOu/Abj+uxS/ki6Xx6oaox5voNWFwNA=)
                          2: gmD9TDwbm0vMSKjcjDpi5qLB-y4.asa (hash: jNcrwejNBMt6PY2S2p0eW8VeVdCpmEplbpxc8yddEaI=)
                          3: vfmISqqLxFMKb9rXkmv_tpp6UAM.crl (hash: RxVUBrIi4DIR18r5IH96IrdGOJwlYHbpF+5Ws2V+T0U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 10:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c3:69:40:c5:ca:07:c8:81:c2:02:d1:a7:4c:13:e7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf9884aaa8bc4530a6fdad7926bffb69a7a5003
        Validity
            Not Before: Sep 21 10:00:49 2026 GMT
            Not After : Sep 22 10:00:49 2026 GMT
        Subject: CN=0b8a6e175174b57bcd29eec5d67ca0d52db68b27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:db:f6:96:65:40:d9:f6:cc:cd:61:c8:fa:b8:
                    b6:41:4a:47:3d:5d:ef:48:99:ae:b9:af:c2:ce:a2:
                    d5:43:80:0f:96:e0:89:9b:4a:c9:d3:77:d3:21:d5:
                    a8:78:99:c7:43:f5:47:fb:e0:b2:57:b3:99:ca:b5:
                    b0:2f:29:46:63:0c:e3:8a:0d:c0:31:09:8a:16:02:
                    cc:95:80:e0:93:32:2e:b8:00:e5:a6:be:55:2e:bd:
                    0b:9f:d5:e1:b5:30:9c:8e:7f:26:04:45:f7:a6:5b:
                    03:ee:d2:f3:33:de:a4:fe:19:be:82:74:51:7d:55:
                    c9:5c:ce:a4:b9:b9:24:0c:39:1e:c6:c1:e3:bb:11:
                    ed:34:12:b2:1e:5f:14:b8:39:ac:42:7e:f6:9f:85:
                    9d:8f:63:76:e4:31:8e:94:0a:67:61:89:0b:9b:fd:
                    b9:e3:17:f0:df:24:95:87:29:73:66:af:99:40:55:
                    67:76:9f:e6:b5:66:f9:7d:1d:46:32:dc:de:5b:0a:
                    5d:a6:38:b6:22:03:d4:09:5b:5e:ce:0e:a9:6a:7a:
                    81:57:f6:97:d8:a3:28:74:77:0a:5f:56:57:bd:b0:
                    85:b1:ef:a6:cb:0c:1f:4d:c4:bd:24:c2:5b:5d:0e:
                    0e:8c:68:c0:94:e8:fe:7a:64:ac:e4:c3:9a:2a:10:
                    c7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:8A:6E:17:51:74:B5:7B:CD:29:EE:C5:D6:7C:A0:D5:2D:B6:8B:27
            X509v3 Authority Key Identifier:
                keyid:BD:F9:88:4A:AA:8B:C4:53:0A:6F:DA:D7:92:6B:FF:B6:9A:7A:50:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfmISqqLxFMKb9rXkmv_tpp6UAM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/e344bc-168b-4f6e-a05c-c8798e88527a/1/vfmISqqLxFMKb9rXkmv_tpp6UAM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:53:3c:af:1c:1a:bb:c4:bd:dc:5f:55:a2:d9:8a:65:47:d0:
         2f:15:7c:21:7c:8a:3a:5f:80:09:14:76:7e:3b:84:c4:ef:55:
         12:e7:ba:ea:16:a2:cf:07:57:5a:b7:f4:74:eb:7f:39:1d:fa:
         01:0c:40:ae:20:1f:1e:f0:61:43:17:2d:51:7c:32:88:03:bd:
         8a:13:96:22:85:09:ea:3e:4a:b0:13:f4:e9:87:95:f8:3b:a9:
         c2:1a:76:0e:9a:1d:33:90:56:aa:4d:60:ad:f3:f6:27:89:0c:
         90:6c:7b:60:33:fb:6b:69:c8:77:1b:54:63:30:ba:2d:1b:7a:
         e6:20:2a:ec:ae:e1:bc:ab:ae:06:fd:71:3f:5f:5b:58:a1:47:
         e1:52:52:11:5d:32:bf:1c:25:61:de:ce:62:4e:98:64:c8:fc:
         98:be:08:b0:e7:51:3e:ef:d3:08:b7:61:3e:da:60:7a:39:e3:
         28:ea:6d:b9:1c:31:f1:a8:2d:60:6e:bd:09:8b:47:bd:f4:ac:
         1d:40:79:81:bf:26:6f:cf:1a:2c:67:bf:19:08:2f:68:72:fd:
         34:33:a5:96:d1:82:54:4c:1a:b4:db:36:ba:78:31:26:40:91:
         42:9a:be:f6:af:13:0f:8d:9a:6f:fe:d9:dd:f3:72:13:e2:5c:
         50:db:d9:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:28:34 2026 by rpki-client