Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          MxcgRSbQc15sMYlocrKQDXKjKPH+EgaFdLLnCk1FhS4=
Subject key identifier:   40:10:E1:E3:89:49:19:6E:DD:00:2D:93:73:9D:1D:17:3A:44:CE:8E
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       01A12D32FB9B8EE674EAEC6FFCB9AF973CA3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          1A9C
Signing time:             Sun 11 Oct 2026 23:01:18 +0000
Manifest this update:     Sun 11 Oct 2026 23:01:18 +0000
Manifest next update:     Mon 12 Oct 2026 23:01:18 +0000
Files and hashes:         1: DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa (hash: J9f3+3+bZCVO4pdaXJk73MjSTfHDh7PUS0/X3EifbYI=)
                          2: FVHHHiStYazQcaMR-6kWtYOxbzs.roa (hash: pJULO84lcrM/sFgnoFFGZDLPLbAu3bVxvObeTRPi3ds=)
                          3: H8dMsf8QtugmggF2iMoFflOsZM8.roa (hash: PZPW581Oe5q4Dva6P0wu0eLhLStSSj+Ttl8NhZ/xkvU=)
                          4: Y4k6hZFhvCoHiB7h05680H5APKM.roa (hash: BGmp+q30ZAASUmPPXR43EIv6VKKM1vrOmCdZ6rG6eeg=)
                          5: ZX0valTvB4XUFb2t2MvkLevuS6o.roa (hash: mqjFEPpJKWkFc8eYY9RB4MA5DD2L0uPMPEokQ0eKgy4=)
                          6: eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa (hash: S3PsF2cp96qNKXQpWngG/gA+/rgdkiompOBnIfGv5D8=)
                          7: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: d21v16hm4DVHUX40sJQ/jcEORo2HsPEhs9PbAGVIifI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 22:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2d:32:fb:9b:8e:e6:74:ea:ec:6f:fc:b9:af:97:3c:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Oct 11 23:01:18 2026 GMT
            Not After : Oct 12 23:01:18 2026 GMT
        Subject: CN=4010e1e38949196edd002d93739d1d173a44ce8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:d0:0b:e7:20:65:d7:3f:f0:7d:b5:36:09:
                    7e:d9:f6:ce:6e:21:3b:6c:c7:22:78:09:93:20:a6:
                    6f:db:b2:3a:41:d4:97:a3:bb:fe:70:79:68:ac:5a:
                    4e:c7:72:fe:af:ae:57:f6:cb:c0:63:75:04:19:57:
                    5b:b9:0c:96:8d:64:11:86:3b:a9:fa:77:97:0c:e5:
                    52:66:9e:77:4b:20:a9:c6:fd:9f:e8:2e:44:a5:e8:
                    be:4c:c5:de:f9:94:dd:e0:39:63:fa:4c:d5:fd:35:
                    90:a0:9a:be:b4:52:1c:7c:bb:b3:98:ce:4c:bd:5e:
                    16:81:06:76:4d:31:7a:62:82:30:75:ab:5c:8c:b9:
                    55:ca:9f:c7:6c:de:e2:a8:33:8f:18:bf:ce:cf:96:
                    37:b5:83:19:3c:3e:14:8d:87:dc:86:40:3f:23:37:
                    26:e0:ba:1a:4a:60:18:7b:a2:d1:65:3e:e7:cc:83:
                    12:99:15:d5:34:69:64:50:c8:c9:f7:5c:17:fd:f1:
                    e3:61:b3:d6:65:1a:dc:6f:22:41:93:fa:86:ca:8f:
                    20:95:b4:dd:dd:5d:1a:6d:9f:d2:ec:e1:b4:7d:f1:
                    cb:28:4e:fe:a2:03:0e:7a:c0:65:a2:35:59:c1:e3:
                    45:e8:bd:eb:c0:34:c6:01:e9:c3:1c:1e:37:25:e8:
                    a0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:10:E1:E3:89:49:19:6E:DD:00:2D:93:73:9D:1D:17:3A:44:CE:8E
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:67:5a:bc:ca:a6:52:01:ba:70:6c:00:7f:a0:cc:7b:a6:3c:
         a5:1c:0b:4a:bf:5c:ec:69:1a:62:09:4b:51:ae:c9:6f:cf:52:
         3d:b4:fd:ee:13:81:de:11:09:c5:5d:eb:ec:7c:6c:5b:9a:f9:
         4e:ca:39:d2:79:37:f6:3e:f0:9a:74:42:a2:a0:eb:e6:1a:76:
         ec:9e:76:f0:f6:ac:99:e6:a0:85:5a:7a:e6:f2:04:2e:bf:fc:
         bb:07:dd:44:25:ab:d5:ae:05:ea:8e:4d:bd:d0:fd:2b:29:5f:
         bf:2a:17:f9:7b:c9:6a:9c:0a:a1:d3:d5:47:85:3a:f5:23:38:
         0d:92:61:63:36:c0:bf:05:33:0a:2f:e4:10:cf:75:65:a9:25:
         80:ec:d7:41:ec:55:78:b4:45:fe:72:7e:79:78:b3:92:8d:66:
         45:ae:9b:ed:3e:b4:70:99:04:d2:ed:07:91:8f:26:f3:a5:23:
         f8:be:9c:9f:d2:cf:32:41:92:a3:06:76:ef:76:ac:98:e2:6f:
         76:00:12:e1:57:7e:37:b0:6a:b6:c8:bf:89:aa:f6:95:ab:f3:
         ee:b5:8d:8a:38:7a:41:ec:86:8c:b2:eb:f4:06:61:04:5b:05:
         c5:23:24:d2:83:39:60:7e:85:17:0b:4d:d9:0f:40:66:19:38:
         3a:27:e1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 04:06:37 2026 by rpki-client