Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
File:                     vJlZuRyVadjFra0awLYTmZq-2ck.mft (raw, json)
Hash identifier:          P2diyTjhT2n0h2kRxQY8E+XnYhxHHVhANlj3SIYQXKY=
Subject key identifier:   CE:A5:83:D6:73:FC:EF:D4:E0:0A:0D:E9:DF:1D:13:63:7D:03:E7:AC
Authority key identifier: BC:99:59:B9:1C:95:69:D8:C5:AD:AD:1A:C0:B6:13:99:9A:BE:D9:C9
Certificate issuer:       /CN=bc9959b91c9569d8c5adad1ac0b613999abed9c9
Certificate serial:       01A0FFEC7685D131883283550FC7909A03B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
Manifest number:          81
Signing time:             Sat 03 Oct 2026 04:01:21 +0000
Manifest this update:     Sat 03 Oct 2026 04:01:21 +0000
Manifest next update:     Sun 04 Oct 2026 04:01:21 +0000
Files and hashes:         1: 7o-LAygpPsH8kjhW0FQceQY9tWg.roa (hash: BBD6wZRfYwRF5hVYqF35L5OLVJ+7UEg6AKmLxvRoNiw=)
                          2: vJlZuRyVadjFra0awLYTmZq-2ck.crl (hash: A/UfkrvZrVRMZEKZFEqJajY0PGDw8vHH5DDoOwJOi0c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ff:ec:76:85:d1:31:88:32:83:55:0f:c7:90:9a:03:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9959b91c9569d8c5adad1ac0b613999abed9c9
        Validity
            Not Before: Oct  3 04:01:21 2026 GMT
            Not After : Oct  4 04:01:21 2026 GMT
        Subject: CN=cea583d673fcefd4e00a0de9df1d13637d03e7ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:db:27:d1:f8:bc:d1:d0:c4:29:20:cf:33:f2:
                    db:90:93:6f:07:e7:54:80:d2:14:2f:02:33:24:c7:
                    a5:7e:fb:c7:d2:f2:ad:25:15:50:e3:6b:ff:48:0f:
                    8f:73:4f:18:15:25:e9:83:4b:b8:47:bf:3f:b7:71:
                    90:36:77:13:f4:2a:38:83:35:2a:02:96:7f:e8:85:
                    d8:49:19:2a:69:3a:36:c4:df:c2:34:8a:48:15:9d:
                    96:68:59:69:87:5c:f9:ce:b3:7e:4e:03:77:fc:da:
                    e3:64:51:1e:cb:43:40:99:30:9f:7b:98:68:42:04:
                    4b:bb:06:44:23:71:32:be:1b:eb:19:de:bb:0a:42:
                    0c:42:cd:9b:82:b2:85:34:aa:08:3c:e8:66:d9:b6:
                    b5:8f:23:e7:7d:8b:08:1b:fe:13:44:fb:3f:42:44:
                    b9:ab:0d:84:e0:15:16:53:07:1b:78:6d:02:e0:a5:
                    76:01:fc:f1:b8:e7:11:32:ea:20:82:21:d2:d5:af:
                    ff:50:25:2b:d9:da:16:b1:d5:fe:20:46:e2:92:69:
                    76:c8:1f:5e:31:58:1e:05:82:0c:cf:c3:c1:10:a5:
                    7f:1c:8e:37:f6:d7:34:60:2f:e3:cd:3a:bc:a0:f0:
                    24:b6:8e:75:25:e1:41:12:b7:da:bd:82:b5:e4:1d:
                    bf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A5:83:D6:73:FC:EF:D4:E0:0A:0D:E9:DF:1D:13:63:7D:03:E7:AC
            X509v3 Authority Key Identifier:
                keyid:BC:99:59:B9:1C:95:69:D8:C5:AD:AD:1A:C0:B6:13:99:9A:BE:D9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJlZuRyVadjFra0awLYTmZq-2ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/467d54-5050-49db-9154-35928683f67b/1/vJlZuRyVadjFra0awLYTmZq-2ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:38:99:18:8e:28:95:78:81:0d:59:bf:3f:79:ad:e0:56:fa:
         d5:ef:96:b8:62:57:9b:0f:9c:6e:4d:cd:74:a2:fd:6d:f3:c4:
         5e:db:44:df:e4:2a:af:96:06:0b:6a:cb:b0:30:d3:0a:d9:7f:
         82:a5:21:b9:07:99:d9:35:47:50:6b:8e:de:82:32:79:cf:2d:
         79:5c:86:e5:ea:9f:02:ad:17:bc:6e:f5:a0:15:d6:d9:36:f3:
         dd:16:24:37:67:84:47:1b:a7:f1:d8:df:c2:d2:7b:d1:87:a7:
         51:16:d1:8c:e3:a3:5e:c9:79:e3:f8:63:e2:f2:1d:df:09:cc:
         c6:36:22:d5:8f:ab:e9:a2:c9:14:19:91:9a:7f:f5:41:f2:74:
         95:a0:97:c3:59:9f:d3:0b:15:67:de:b0:46:eb:c3:6c:95:8b:
         32:29:90:32:b4:54:b7:f5:f4:92:0f:b0:9b:5c:f9:10:1b:6f:
         8a:8b:25:0b:73:4d:8c:fc:7d:4b:8e:e0:69:79:d5:2b:9a:be:
         c8:c0:19:96:a5:57:65:b9:58:78:d8:ea:7d:eb:29:d6:8b:a2:
         1b:36:94:16:7b:c3:4a:bc:2e:42:34:3f:83:cd:3a:5b:d6:5a:
         63:8e:a9:9c:0b:6d:2f:fb:81:c8:ac:65:a1:69:a5:04:ac:a7:
         28:43:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 11:30:31 2026 by rpki-client