Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          SV7Kv831cVbkg8l61LY8CWGkk5hbGcHYNHGVQ8BFZZ8=
Subject key identifier:   A2:83:76:B4:5C:17:B8:98:D0:5B:E7:A5:D0:E7:F5:7C:9A:63:BF:D9
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       01A0C1B1C6E56FE20A5D84DDD8B7E8819CD0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          1A64
Signing time:             Mon 21 Sep 2026 02:00:48 +0000
Manifest this update:     Mon 21 Sep 2026 02:00:48 +0000
Manifest next update:     Tue 22 Sep 2026 02:00:48 +0000
Files and hashes:         1: CnLU5sdd9_xh2OEtCZx6z-2dgTY.roa (hash: n31FwsvZCRP5aWFMhgbGP9qd5w+wCRJhNJerptRYayU=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: PkS7CCjUnKNuIQQlRO/c88tzfOucQfs6Aye7SrJYmLA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 23:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c1:b1:c6:e5:6f:e2:0a:5d:84:dd:d8:b7:e8:81:9c:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: Sep 21 02:00:48 2026 GMT
            Not After : Sep 22 02:00:48 2026 GMT
        Subject: CN=a28376b45c17b898d05be7a5d0e7f57c9a63bfd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:56:cb:1c:6d:81:9c:11:b9:5e:14:69:02:1a:
                    62:32:a3:d9:a2:d1:38:2e:f2:90:cb:75:13:c3:56:
                    d0:12:63:89:7a:9b:80:dd:71:3a:0d:98:72:b3:aa:
                    fc:bf:98:dd:9d:fa:ea:e6:af:a1:7b:74:98:85:eb:
                    2f:a0:b1:3e:17:9b:38:f5:ef:86:e6:9c:1f:b2:c2:
                    a8:3e:ee:8f:eb:fa:ee:a3:28:a4:71:f5:f8:47:d2:
                    26:0c:e3:d1:cd:24:d4:51:a5:3f:c5:a1:18:a1:18:
                    64:96:d0:7d:3e:5e:e9:89:21:c8:06:21:53:42:33:
                    e8:f5:2e:8d:33:61:cf:2f:6a:bd:de:63:94:5f:04:
                    df:bd:ac:76:1e:c5:a1:ea:cc:0c:64:e6:42:1c:73:
                    4c:07:11:b2:10:65:19:60:39:de:1d:a9:d7:ee:cd:
                    9b:74:5c:f3:a4:58:a4:68:7d:46:4b:2f:3f:ff:7b:
                    db:ea:e5:a5:76:c3:ae:b8:43:b7:0c:4e:82:19:74:
                    67:94:ad:66:26:17:34:cf:41:20:22:46:0b:da:03:
                    bd:bb:9c:be:90:fd:1c:0d:a0:c8:b9:58:8b:d4:1c:
                    ca:89:38:b7:89:31:6d:b7:dc:c5:ff:d6:61:5f:05:
                    c2:78:27:1b:a7:4c:91:60:f4:c0:ca:a5:d0:9a:07:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:83:76:B4:5C:17:B8:98:D0:5B:E7:A5:D0:E7:F5:7C:9A:63:BF:D9
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:34:a9:2a:60:a5:24:35:c1:cb:fa:aa:9b:18:d6:c0:c0:36:
         5d:85:c5:01:b2:d4:35:7c:dd:28:38:95:f6:ac:3c:ba:c7:f9:
         1c:78:98:8f:2c:7d:db:f4:70:bb:e6:0c:e1:ef:7f:05:7b:c6:
         65:4d:f1:bc:a0:e6:c4:b5:60:9d:4d:a3:66:9f:26:7c:fc:c4:
         c1:22:3e:60:9f:30:f6:aa:b3:38:9b:4a:cb:b5:e6:d1:3f:f0:
         e0:cf:8d:93:7c:d2:df:6c:8c:3c:f4:ae:75:21:4f:7a:1a:77:
         56:83:bf:4a:04:5b:86:54:f1:3e:83:c8:84:84:ff:55:28:47:
         10:3c:b5:c4:51:a7:db:4d:c2:eb:ba:5d:e1:ae:5d:fa:55:19:
         14:ae:7e:5d:eb:ed:25:c7:b6:6d:3f:ab:ef:c7:d0:c2:c7:45:
         5d:7c:ee:dc:9d:f0:df:bb:f8:03:f0:a5:2f:88:40:40:f2:df:
         ec:e4:2f:16:cb:36:31:5a:d0:64:e6:7d:23:57:ca:7a:f6:bd:
         17:b8:40:7d:b9:9b:f1:c2:78:e4:45:09:a4:ce:e1:db:a4:47:
         91:ff:c3:e6:48:f6:8e:4a:5f:29:83:e4:18:45:0e:ce:74:69:
         0f:01:51:46:94:52:69:4f:23:fe:00:c7:a2:6d:67:ec:a9:cc:
         22:c6:6f:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:24:27 2026 by rpki-client