Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
File:                     vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft (raw, json)
Hash identifier:          xaiIshfesOTnttiGAJQS3oHJIN+m//CPrJG3T3MR65s=
Subject key identifier:   54:BA:86:0C:11:88:92:25:11:5B:DF:31:D6:82:89:BF:72:57:37:8A
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Certificate issuer:       /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial:       01A0C47B5A9A0E381E94D92CC599B809A24A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 15:00:13 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:13 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:13 +0000
Files and hashes:         1: HDFBj63zZKtSC6Jw4UiShUElLMM.roa (hash: dM6soWydRdWA9tO0ayG6aaBJ/bKBsqmgot+omBKKzgI=)
                          2: MV9jYxZc4Pt5SR7yy233XyCWLl0.roa (hash: CCSfxKCBfU96JZOkhVpKkTvEVxdzHUgSCznNnbc32HM=)
                          3: QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa (hash: hnbKkDbftBuvAa8vwX3rQQSx/8OuOGXHnpFHQ2CyWKo=)
                          4: WpnuLvnippB8tVyEsrRUR3ewk_U.roa (hash: BHza+2duMNR9nIMzQqoFfpCBTh9mkWoaMy7myW/tl3E=)
                          5: dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa (hash: wDNh4iJtkmG2Tv4fXnbCCR59EatzQ/W+vho/keWCSrQ=)
                          6: vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl (hash: 8NPb9aCOJ9UAMqRIYPquaw3BNYtUHwUQln0P1gJFrlU=)
                          7: wjlwL_TATpRkl3IwETvo11EU7l0.roa (hash: uMoT+Y/uxFQEEAREXENe/LFmTT6LeqDGlq2BaS0K//Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 14:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7b:5a:9a:0e:38:1e:94:d9:2c:c5:99:b8:09:a2:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
        Validity
            Not Before: Sep 21 15:00:13 2026 GMT
            Not After : Sep 22 15:00:13 2026 GMT
        Subject: CN=54ba860c11889225115bdf31d68289bf7257378a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:53:19:6b:e2:48:f3:e5:41:e2:09:18:60:aa:
                    c3:1a:4e:7d:94:08:ed:51:02:7b:29:ad:98:c8:45:
                    e0:80:0b:c3:13:cf:a2:d5:07:7b:ec:41:d1:1b:35:
                    af:5a:fe:ce:ce:a7:17:3a:a6:31:29:55:e5:dc:84:
                    9d:7d:7f:12:b6:3c:4d:fa:3e:ec:26:1d:be:12:d5:
                    d4:6b:a9:30:74:df:51:d5:09:05:2b:7f:c6:db:37:
                    79:59:b5:77:af:ed:79:7c:d1:94:4b:a6:28:23:83:
                    d2:08:f4:86:ef:9c:b2:4b:1b:82:45:eb:90:5e:2b:
                    e6:b8:d5:28:cc:f2:94:1a:8c:27:1d:f0:23:b4:c3:
                    fd:8f:a6:a4:24:b7:05:e2:b4:a2:51:a6:1a:86:ef:
                    14:27:a2:7d:68:97:ff:0f:9a:b1:fc:f6:de:cb:49:
                    8f:c8:a0:22:6f:e8:2d:f9:f0:c9:5c:a7:98:2d:fd:
                    85:04:3f:ef:fd:bd:6a:25:ba:de:3d:54:82:ff:d0:
                    f3:b5:20:fc:d1:36:d5:1c:89:28:3c:0b:2d:47:2b:
                    92:5f:de:c6:6c:7e:62:a1:dd:91:74:6f:dc:c9:ff:
                    2e:e8:1f:b2:c6:cb:45:5f:bd:a1:40:c4:fb:7d:58:
                    5b:49:47:67:d9:a4:12:ae:0e:d4:a6:da:d1:46:49:
                    10:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BA:86:0C:11:88:92:25:11:5B:DF:31:D6:82:89:BF:72:57:37:8A
            X509v3 Authority Key Identifier:
                keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:5d:f4:c9:45:e8:3b:af:45:d1:00:ee:7b:58:9a:04:96:66:
         01:45:03:c6:bc:99:00:a3:42:49:dd:02:18:e8:ba:5d:e8:bc:
         bc:8c:25:5e:a9:6c:34:4c:54:54:81:e6:73:dc:71:76:0a:f3:
         c4:41:37:ef:ee:31:bc:d4:5d:00:40:98:c0:8e:aa:e9:17:b5:
         a6:42:96:64:3d:54:7d:13:01:08:df:ac:31:73:37:fb:d4:e0:
         fd:11:c4:35:16:20:2b:8f:d2:b1:f5:eb:31:36:30:f6:e1:08:
         74:5e:56:77:cd:a9:e8:51:4c:1d:14:33:e5:7e:b4:c0:4f:19:
         6d:a6:eb:33:09:b9:7d:a9:83:67:14:21:a7:10:02:04:cc:53:
         d1:e8:06:41:ed:c6:cf:b7:af:af:1d:8c:6a:59:cc:c9:17:65:
         ae:6b:0f:70:8e:d6:8d:df:e6:73:bc:a8:08:0f:d7:7c:84:19:
         eb:3f:c0:24:5f:c9:19:c5:d4:50:ab:9f:9b:44:e0:27:f4:79:
         87:8a:d4:c7:77:a5:82:aa:3b:27:e0:b2:b4:60:4c:45:ff:af:
         21:24:0a:01:21:cb:82:13:3f:ca:2b:e9:96:74:bb:5a:bd:70:
         8b:22:fe:b6:1f:0c:6b:04:ed:48:1e:b3:1e:c9:c3:e3:f3:96:
         2a:4c:1a:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 01:04:08 2026 by rpki-client