Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File:                     vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier:          ibANx155YyJFWTaYyCU9ePc8HncCXh+W9dts4jsvNlk=
Subject key identifier:   59:C9:C2:2C:BA:21:28:CC:0D:9E:A0:FD:FC:D4:9A:C7:E3:5C:89:A7
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       01A0D124B3C715314B854DBCA30616C512D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number:          0667
Signing time:             Thu 24 Sep 2026 02:00:38 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:38 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:38 +0000
Files and hashes:         1: j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (hash: U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=)
                          2: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: f4BKIdKJbmdj/4Ef/d5UGRrq8FkZV8KNOOWeSAzaYAg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:b3:c7:15:31:4b:85:4d:bc:a3:06:16:c5:12:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Sep 24 02:00:38 2026 GMT
            Not After : Sep 25 02:00:38 2026 GMT
        Subject: CN=59c9c22cba2128cc0d9ea0fdfcd49ac7e35c89a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:6c:13:68:f7:6e:9f:71:3e:7e:2f:c6:08:68:
                    98:50:67:f7:04:56:75:8c:5e:4d:93:1c:ae:d1:08:
                    e7:b9:d2:d6:7f:eb:82:41:c2:94:64:3c:cc:a9:17:
                    53:1d:f3:f8:3a:d3:d0:18:01:61:11:15:7b:79:8b:
                    97:9b:50:da:e3:78:4e:f2:e9:4c:a8:25:37:96:3a:
                    98:48:df:a7:e7:12:19:fb:c1:85:99:19:1f:25:0b:
                    3a:a1:13:07:17:33:19:9d:33:36:06:71:f6:a1:44:
                    92:46:37:a1:82:bc:99:d5:14:d9:f4:0b:38:c9:27:
                    c0:8a:ad:03:30:01:1d:91:51:b8:fb:87:ba:ca:b9:
                    b5:6c:1f:18:41:a0:fc:c6:a9:d0:4d:28:36:b6:f5:
                    f9:9b:7f:7b:df:20:d6:2e:cc:76:b0:01:a9:2d:dc:
                    da:a6:fd:6a:6e:90:79:44:5a:c2:65:72:eb:8a:76:
                    3d:f2:0e:87:1c:0e:9a:24:69:fe:e9:ab:20:2d:a2:
                    58:eb:68:db:23:e0:df:ec:05:7f:3a:de:fd:13:94:
                    b9:8e:9b:9d:dc:96:58:a2:c4:f7:90:1c:c7:00:e6:
                    37:0e:02:78:ff:d6:08:c6:46:b9:81:87:ed:06:19:
                    10:0e:41:58:14:5a:b3:f5:3f:86:69:bf:01:8d:cc:
                    08:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:C9:C2:2C:BA:21:28:CC:0D:9E:A0:FD:FC:D4:9A:C7:E3:5C:89:A7
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:14:8c:07:e5:f8:6f:a1:97:f2:be:eb:2d:bb:1c:f4:3d:dd:
         44:e2:a9:64:8a:2e:b1:3d:0e:17:de:b0:1a:cb:c1:a3:d4:d0:
         df:c2:3b:82:39:e2:8a:2d:6f:c4:88:55:17:b4:c8:a5:74:3d:
         99:8b:df:b1:91:e1:00:41:83:04:b4:15:37:ce:9f:a0:c9:8d:
         91:db:cd:cf:c3:8c:74:33:e0:7b:da:d2:dc:d5:33:fb:53:20:
         97:a5:c5:ef:71:dc:15:13:aa:03:03:6d:a7:36:a6:1d:58:e5:
         06:e7:20:51:42:1a:00:37:e2:cf:22:2b:1d:61:03:b5:e5:78:
         d7:26:f9:be:cc:f9:93:b6:0b:e0:b4:d8:98:09:c4:32:a8:80:
         5d:9e:76:c5:dc:45:08:f7:c4:21:2d:cc:78:fa:07:df:48:2e:
         13:4f:c5:77:43:8f:56:e7:52:5d:43:9b:65:5b:dd:3c:fd:39:
         8f:9c:7f:90:64:9b:ba:80:db:c5:8d:9a:ed:b9:c3:61:18:48:
         37:ab:ab:fd:6c:62:7c:45:15:af:ce:69:37:20:97:48:dc:c5:
         9b:8e:7b:4d:fc:83:56:15:af:dd:2d:23:04:0f:bf:b6:75:99:
         93:8c:4b:92:79:3b:09:22:4f:1a:09:6f:e9:47:93:f9:57:ba:
         a3:c8:6f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:05:23 2026 by rpki-client