Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
File:                     v-V8w9sYQEcMc6CWBdGH172Vlcs.mft (raw, json)
Hash identifier:          0d+YlVzzLoY7TvrRwLpMtlHctjBbPhnS5ONy6GcjZCs=
Subject key identifier:   1F:C5:09:54:19:C6:1A:CD:64:38:0A:FF:0E:A9:D0:99:6A:B0:A4:AB
Authority key identifier: BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB
Certificate issuer:       /CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
Certificate serial:       01A0D5DD83C334C5086393D17839B69355DE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
Manifest number:          1A71
Signing time:             Fri 25 Sep 2026 00:00:59 +0000
Manifest this update:     Fri 25 Sep 2026 00:00:59 +0000
Manifest next update:     Sat 26 Sep 2026 00:00:59 +0000
Files and hashes:         1: 2ikB92Z1YZga53T_5TgPbCYNO2U.roa (hash: 6LYS7/XU1c9VFgwkPm/Cq36EgEjl8++/LJln5tJD5X8=)
                          2: v-V8w9sYQEcMc6CWBdGH172Vlcs.crl (hash: biKfDuQoTCUDBKjeI2LvQfYndYhjiQUHj+9Qf9TBEGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:dd:83:c3:34:c5:08:63:93:d1:78:39:b6:93:55:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfe57cc3db1840470c73a09605d187d7bd9595cb
        Validity
            Not Before: Sep 25 00:00:59 2026 GMT
            Not After : Sep 26 00:00:59 2026 GMT
        Subject: CN=1fc5095419c61acd64380aff0ea9d0996ab0a4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:7d:5e:52:50:b6:cd:d8:fe:11:26:b5:2d:
                    79:06:75:b1:7e:be:e6:af:df:6f:54:82:2b:45:a2:
                    88:43:ab:f5:87:42:34:58:62:86:3a:0f:5b:74:91:
                    a7:8b:a9:d8:3a:c7:b7:81:20:a4:2d:a9:17:4f:92:
                    15:f4:51:73:e7:a0:d7:79:4e:b8:29:04:70:92:b0:
                    74:ab:13:82:f2:1a:80:38:6c:74:52:28:3f:28:64:
                    b6:79:11:28:06:f1:1e:fb:f1:07:d7:53:59:e4:5c:
                    4c:33:d9:76:5d:56:de:f0:d5:07:c3:1e:6c:52:6f:
                    a6:87:0b:99:25:e7:c7:32:7d:0d:96:34:6a:fd:8d:
                    6b:8f:72:ce:52:7d:2d:57:ec:73:ca:5e:54:f5:d0:
                    7f:2f:d1:bd:ee:4b:00:a8:c0:dd:07:ea:20:92:e1:
                    fb:9a:e2:6c:06:28:18:3f:12:41:0c:38:f2:5f:0d:
                    3a:74:2a:66:78:2c:0b:5d:0b:2e:5c:c7:0d:b4:14:
                    d9:20:58:4c:2c:19:70:74:09:85:27:5b:3a:15:1b:
                    71:66:85:e6:4f:92:c2:68:9d:7f:0e:75:e2:d7:bb:
                    40:36:4d:0f:2d:75:c6:99:84:05:dd:3f:91:75:86:
                    ec:ec:2c:2c:72:d7:2c:08:02:57:76:a4:21:c4:b3:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:C5:09:54:19:C6:1A:CD:64:38:0A:FF:0E:A9:D0:99:6A:B0:A4:AB
            X509v3 Authority Key Identifier:
                keyid:BF:E5:7C:C3:DB:18:40:47:0C:73:A0:96:05:D1:87:D7:BD:95:95:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-V8w9sYQEcMc6CWBdGH172Vlcs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/17b797-2e66-40df-868a-0a275a6763ce/1/v-V8w9sYQEcMc6CWBdGH172Vlcs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:4d:6b:ad:8d:f6:98:93:ab:15:c1:b1:7c:0a:13:ae:d7:44:
         5e:b5:7f:dc:b3:c3:43:d9:85:95:f4:f4:b6:c2:0d:05:f6:71:
         a3:41:02:e7:f1:22:2b:fc:5d:d4:5e:cf:c7:24:84:f8:5c:ee:
         99:8a:c1:bf:eb:cb:32:49:88:47:24:3b:8b:9f:c0:0c:c2:98:
         eb:a0:72:32:38:eb:1e:54:0f:a1:50:60:4f:19:dd:b0:0e:ff:
         4c:a7:08:59:19:9f:dd:c6:d9:67:34:bf:ea:72:dd:e0:eb:2a:
         21:aa:5d:d5:ae:9f:e2:92:aa:b7:45:6d:59:77:89:ff:93:82:
         45:8b:35:cd:7c:ae:03:b5:03:79:08:d9:f5:b4:01:16:8a:eb:
         6f:2a:68:0a:34:9f:18:19:d9:66:3b:8e:24:2b:9c:61:98:35:
         da:d9:41:ff:4c:d3:cd:4d:c2:aa:4d:04:ee:0f:61:e3:7e:34:
         84:6c:d7:9b:50:49:c1:41:27:af:f7:ba:e9:3a:00:3d:44:8e:
         ca:09:67:13:0d:09:2a:9f:88:66:5a:3c:3c:71:37:8c:6c:0a:
         19:97:73:20:a8:52:fa:b2:cf:43:af:96:e0:22:7e:ef:89:de:
         d1:00:9f:84:b9:0c:86:86:1a:60:09:20:b8:1f:90:51:43:58:
         ae:28:ed:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDV3YPDNMUIY5PReDm2k1XeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTU3Y2MzZGIxODQwNDcwYzczYTA5NjA1ZDE4N2Q3YmQ5
NTk1Y2IwHhcNMjYwOTI1MDAwMDU5WhcNMjYwOTI2MDAwMDU5WjAzMTEwLwYDVQQD
EygxZmM1MDk1NDE5YzYxYWNkNjQzODBhZmYwZWE5ZDA5OTZhYjBhNGFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufB9XlJQts3Y/hEmtS15BnWxfr7m
r99vVIIrRaKIQ6v1h0I0WGKGOg9bdJGni6nYOse3gSCkLakXT5IV9FFz56DXeU64
KQRwkrB0qxOC8hqAOGx0Uig/KGS2eREoBvEe+/EH11NZ5FxMM9l2XVbe8NUHwx5s
Um+mhwuZJefHMn0NljRq/Y1rj3LOUn0tV+xzyl5U9dB/L9G97ksAqMDdB+ogkuH7
muJsBigYPxJBDDjyXw06dCpmeCwLXQsuXMcNtBTZIFhMLBlwdAmFJ1s6FRtxZoXm
T5LCaJ1/DnXi17tANk0PLXXGmYQF3T+RdYbs7CwsctcsCAJXdqQhxLMuGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB/FCVQZxhrNZDgK/w6p0JlqsKSrMB8GA1UdIwQY
MBaAFL/lfMPbGEBHDHOglgXRh9e9lZXLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEt
MGEyNzVhNjc2M2NlLzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8xN2I3OTctMmU2Ni00MGRmLTg2OGEtMGEyNzVhNjc2M2Nl
LzEvdi1WOHc5c1lRRWNNYzZDV0JkR0gxNzJWbGNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFE1rrY32
mJOrFcGxfAoTrtdEXrV/3LPDQ9mFlfT0tsINBfZxo0EC5/EiK/xd1F7PxySE+Fzu
mYrBv+vLMkmIRyQ7i5/ADMKY66ByMjjrHlQPoVBgTxndsA7/TKcIWRmf3cbZZzS/
6nLd4OsqIapd1a6f4pKqt0VtWXeJ/5OCRYs1zXyuA7UDeQjZ9bQBForrbypoCjSf
GBnZZjuOJCucYZg12tlB/0zTzU3Cqk0E7g9h4340hGzXm1BJwUEnr/e66ToAPUSO
yglnEw0JKp+IZlo8PHE3jGwKGZdzIKhS+rLPQ6+W4CJ+74ne0QCfhLkMhoYaYAkg
uB+QUUNYrijtiQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 02:56:08 2026 by rpki-client