Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File:                     vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier:          Dxjil55dxPzNQ5mUs3rAAbxqKFd6JxyFbipAmWXz7Y8=
Subject key identifier:   B6:68:80:E5:74:D6:60:ED:26:0B:56:86:84:B8:CD:1A:66:D0:9F:44
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer:       /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial:       01A0C82186F57AB34DA4F8C406A7682A1E2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number:          065C
Signing time:             Tue 22 Sep 2026 08:00:35 +0000
Manifest this update:     Tue 22 Sep 2026 08:00:35 +0000
Manifest next update:     Wed 23 Sep 2026 08:00:35 +0000
Files and hashes:         1: j6WVMlj7QGC0B6lVcgTm5Vqjms0.asa (hash: HUsdlww5wzPN9pHKVOg9JknKg0Sqp60i383BUXuT2YI=)
                          2: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: bE3saxuOkp65ccbZc2QPV6IuEMZaoaKqkvEQVTlf/u8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 08:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:21:86:f5:7a:b3:4d:a4:f8:c4:06:a7:68:2a:1e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
        Validity
            Not Before: Sep 22 08:00:35 2026 GMT
            Not After : Sep 23 08:00:35 2026 GMT
        Subject: CN=b66880e574d660ed260b568684b8cd1a66d09f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:fe:d2:ef:8f:0e:dc:a5:70:04:6b:9e:04:09:
                    53:26:71:13:5d:e2:fe:fa:bd:de:7c:a0:77:a0:9c:
                    16:64:ba:7e:41:d2:9e:1c:e8:1e:f8:de:18:95:52:
                    21:f5:ce:cd:4b:17:7d:2f:2d:14:cb:38:31:fa:ec:
                    31:48:b1:97:9c:f7:ce:30:70:76:56:77:ef:32:3c:
                    1d:25:80:9f:e2:17:d4:d1:e2:3f:7b:ff:5f:3b:de:
                    3b:83:0f:27:b4:b5:6f:fe:07:d5:bd:4d:c6:17:26:
                    9c:0a:1d:97:94:bf:0a:66:22:cf:f0:65:63:a4:3c:
                    8e:6f:60:c9:81:13:42:91:39:13:b5:9e:a7:b2:c2:
                    b8:2e:b7:e8:32:23:2c:49:38:3e:8d:d8:a9:c7:89:
                    6f:85:e7:01:70:21:bd:b1:eb:b9:a4:b6:b0:10:01:
                    61:52:7b:9e:c3:75:76:68:4e:01:4c:6a:40:c4:84:
                    15:8c:af:0d:6c:20:35:08:05:47:69:55:b1:71:03:
                    de:b8:39:18:1b:56:9c:c3:98:2b:27:a9:7d:ae:e9:
                    55:9b:be:6e:47:f6:6b:b4:90:7d:de:ac:bb:16:87:
                    b6:37:ab:cd:3b:99:56:46:14:ca:69:5f:ea:3a:c2:
                    06:e6:19:71:81:33:92:bc:d1:db:8e:81:45:5f:24:
                    d3:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:68:80:E5:74:D6:60:ED:26:0B:56:86:84:B8:CD:1A:66:D0:9F:44
            X509v3 Authority Key Identifier:
                keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:63:02:3e:98:b3:1a:51:14:93:a9:fd:4d:d4:94:09:6f:a5:
         63:6d:de:af:29:35:e3:5c:7f:96:e9:24:2f:42:1e:be:0d:d3:
         19:3e:e6:39:39:a1:76:f8:4c:5a:0d:19:49:e7:75:54:09:e9:
         ac:44:54:41:7e:1e:f2:97:59:9b:3e:bc:c5:b3:16:a7:5b:b6:
         37:a8:65:27:73:9c:34:89:c4:b3:ec:05:e7:66:c9:8c:e3:80:
         1c:c1:1b:19:c8:95:13:e3:69:93:a1:76:b1:95:75:ba:c1:35:
         cf:d7:73:18:0a:5f:d7:46:ff:44:44:91:51:18:55:4a:f8:94:
         06:5a:e2:83:03:ee:0a:88:e4:5a:db:36:c5:8d:c0:06:7a:ed:
         37:5a:21:96:7d:8d:4e:38:bc:eb:95:a7:80:fa:57:e2:4e:01:
         4f:63:6d:59:af:58:6f:35:01:37:27:29:9d:d0:74:9c:21:90:
         94:69:2c:11:da:fa:af:c0:f9:f3:d1:8d:18:78:2d:2a:e6:60:
         08:5f:7b:05:8f:8c:f1:25:91:e1:ca:73:04:6f:2e:52:d4:24:
         8e:e9:0e:2a:12:a1:14:ff:52:6f:4f:a4:77:5f:77:37:26:47:
         59:81:00:92:10:dc:d2:c0:29:1d:34:94:a3:7b:57:b9:d7:1d:
         9a:9e:ee:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:25:56 2026 by rpki-client