Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          rd4X1JRPDPaxcZozuwZQ/1hciFce8ITsHVmQ25SzDEc=
Subject key identifier:   8F:1A:16:F4:13:30:5D:3D:E8:C9:DE:33:13:4E:DF:A6:C3:11:C9:B4
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       01A0BFC2F39CB41D7F1FEA000A2F4939A039
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          15DF
Signing time:             Sun 20 Sep 2026 17:00:19 +0000
Manifest this update:     Sun 20 Sep 2026 17:00:19 +0000
Manifest next update:     Mon 21 Sep 2026 17:00:19 +0000
Files and hashes:         1: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
                          2: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
                          3: Brh5qAJPA9FMOJZTetxo5g3Xdcg.roa (hash: 0y2jpGlKXD4RZy+O7hfV7TOL/ignRhvtpZ28boX0Mgc=)
                          4: H1emVUICE2XmoUB3lCjzmQnd6Ak.roa (hash: OQbtHQhbOceKidpOYtukQNjTxgTngWpdYul9lp5ld+E=)
                          5: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
                          6: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
                          7: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
                          8: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (hash: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=)
                          9: Ofgeobg55e8lqnNuTZu03yb12Ag.roa (hash: FN7C8Po9NJD9RTZuVfv4iTIQrGdvz+gzOEAhvCfOHtg=)
                          10: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
                          11: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
                          12: Qpqd5hHnjqSsp3sn5RVpGOfpq2g.roa (hash: usudWUM+M6fpK5Kxq+vyQ1DEZbBsRF3RxCtpG9oZ+NM=)
                          13: T5CDK_oQYjtuRm85HhxdOK6D6ro.roa (hash: AghyqtWN0W0iUPw+NKSWTH4tyE+1j2q7hdV6WZEDDus=)
                          14: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
                          15: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
                          16: YrfvxNJdeHYuSdfjBibJ7k6pvEE.roa (hash: oBcJN0/vUgerckttMrITgGrAWVOsR/md3WZHA4+tgo0=)
                          17: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
                          18: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
                          19: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
                          20: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
                          21: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: kIDho2q45WGSNs/ckNByV+poNVIw/6t65DibHIuPdcg=)
                          22: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
                          23: wfh-UOAZf8zXcfnGgtljGrgtW4Y.roa (hash: v/XrCw+3zSPx3FlcLzuKPWemLUh1+me4/h0qQHJfqdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 21 Sep 2026 14:00:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:bf:c2:f3:9c:b4:1d:7f:1f:ea:00:0a:2f:49:39:a0:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Sep 20 17:00:19 2026 GMT
            Not After : Sep 21 17:00:19 2026 GMT
        Subject: CN=8f1a16f413305d3de8c9de33134edfa6c311c9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:37:bc:ce:35:e9:b4:bb:74:a9:09:f8:8f:
                    72:f9:43:ca:91:32:19:0f:aa:41:8b:d6:3e:7c:1d:
                    88:da:8f:3f:65:09:04:5e:f2:12:8a:df:f9:10:c3:
                    a8:4b:8f:3b:39:99:24:5a:3d:d8:82:00:1c:d2:51:
                    87:84:d8:f2:5f:99:22:7b:ef:75:2f:d2:bc:e5:b5:
                    48:95:b0:e8:e2:17:08:8f:19:3b:c9:81:57:ac:11:
                    5a:a3:a6:47:5d:e2:d1:b2:8a:6c:b9:2f:25:e2:b6:
                    a9:39:b2:34:93:75:1f:53:13:e9:52:a4:d8:eb:ec:
                    f4:de:af:fd:cf:e4:1e:4e:04:f7:c7:b0:d9:08:bd:
                    f4:35:17:b7:65:4f:33:9c:1e:16:4b:cd:55:d0:4d:
                    bd:3a:d3:07:3c:e0:de:18:c2:14:3e:0c:d4:d0:65:
                    06:60:a1:8d:90:13:b3:75:1e:2c:5b:73:35:53:8c:
                    dd:5f:39:b3:eb:62:9b:bf:25:9f:63:b1:e1:ee:05:
                    79:38:1c:6d:c2:a5:54:62:65:c3:88:51:22:9e:58:
                    61:1e:8c:c5:cb:31:a6:5d:bd:7c:8c:cb:71:0a:d2:
                    a8:ad:fe:5a:b6:d3:8b:c4:1f:a8:1d:34:ef:d6:06:
                    37:31:08:6f:46:53:d6:f4:ec:4a:d6:c7:02:72:80:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:16:F4:13:30:5D:3D:E8:C9:DE:33:13:4E:DF:A6:C3:11:C9:B4
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:db:0e:8f:3c:bf:4f:a8:e5:d5:70:60:c1:90:ae:60:63:67:
         e4:69:70:a7:af:80:42:05:62:a3:e6:d7:1e:24:1f:3a:9c:24:
         fe:76:d6:83:ca:d5:e3:55:b0:a9:1c:eb:d2:d6:8a:d6:c0:98:
         e2:cd:a4:c6:e1:c3:19:9b:26:1f:fb:12:75:ba:63:36:87:24:
         12:0c:89:87:e1:f6:60:67:fa:39:fb:bd:77:85:97:04:ae:28:
         1c:85:49:e6:e7:b1:4f:2d:b4:06:2d:77:40:21:ed:c8:69:6a:
         7f:63:8f:94:6c:85:90:6d:88:f5:28:96:27:2a:fe:ab:bf:c0:
         1b:55:af:49:20:6a:9b:ba:eb:00:01:09:0a:a6:fd:5f:cb:53:
         40:8d:e0:3a:f2:ae:20:05:3c:99:f0:53:cf:94:a5:0f:38:2c:
         22:f7:02:42:23:aa:15:f5:4c:43:67:3f:c5:8f:0a:98:f3:3f:
         d4:1e:6a:cd:d2:b1:ca:c6:0e:7f:b8:35:2b:17:4c:8d:97:eb:
         d7:b8:ad:5e:4b:3c:4a:46:b1:fb:e9:f3:db:46:45:a4:e2:d5:
         2b:a2:f1:0a:35:44:9b:34:35:4e:1e:86:9a:29:de:e3:6e:66:
         82:a0:1f:18:b0:f9:f5:bb:9f:81:52:9f:81:63:b9:f0:cb:9e:
         bf:a9:1a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:35:25 2026 by rpki-client