Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
File:                     vl_ipkltKkOapPeyHWmWu_u_CzU.mft (raw, json)
Hash identifier:          FOaEV2luMA4jZVhDi3RFh3VjTpefTLfpQG0Hvq1fmv4=
Subject key identifier:   5D:43:49:95:C8:82:90:2C:62:E4:6F:6B:D3:D5:C6:6C:3D:2D:A7:88
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Certificate issuer:       /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial:       01A0D6829D6CE6F5C37809327F03B948BB0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
Manifest number:          EB
Signing time:             Fri 25 Sep 2026 03:01:19 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:19 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:19 +0000
Files and hashes:         1: 1GIHSznDsxXrw3jKQkIzicOXuk0.roa (hash: 9Pl5E1KhSoDAyA5hgG5eNFyWYdKksOI+dFWiKoJazjY=)
                          2: NpS_oD6fm-O5UOaMpkZigJh2nTc.roa (hash: qIFJnleVwqTPPwrUhkvyWblZMC0jHP9X/BrE9rsE/eA=)
                          3: bcljfazgeEM-f4h7Gdy40mNg7JE.roa (hash: FNnWgsOBtX934LwXU89et8KvVLloyc53/NmDw9dHK28=)
                          4: v4bpHyawzRWnm8RqdJExgbPJfr0.roa (hash: sC7/VOkCbRGWzAVmIlTymUCvG6bGOihVG6LZ6ZpxHR4=)
                          5: vl_ipkltKkOapPeyHWmWu_u_CzU.crl (hash: q2JnPo1Ayyw/i1AogioA/+cuEWBMzQKEywscVP1uJ7Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:9d:6c:e6:f5:c3:78:09:32:7f:03:b9:48:bb:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
        Validity
            Not Before: Sep 25 03:01:19 2026 GMT
            Not After : Sep 26 03:01:19 2026 GMT
        Subject: CN=5d434995c882902c62e46f6bd3d5c66c3d2da788
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:42:8a:b3:43:54:3c:a7:e8:35:1c:f3:e1:31:
                    06:52:a2:aa:db:09:69:6a:7d:c7:e9:22:08:fd:34:
                    ba:2c:ee:8b:46:21:b1:11:ee:a1:e5:47:f0:c9:90:
                    b0:b1:39:35:d0:ba:75:87:6e:ba:02:4a:2d:03:ab:
                    66:20:70:e6:d2:e7:72:e8:fe:b8:76:66:9c:66:c2:
                    4a:19:14:2e:76:27:d7:d3:8d:c9:5f:95:a0:32:75:
                    8c:a6:03:bd:e3:7d:ca:5e:66:4c:15:64:bf:87:77:
                    6f:aa:f6:84:35:9b:7f:be:68:73:a2:2a:d8:2a:e0:
                    36:fa:af:77:ad:3f:94:23:6d:f8:6f:7f:71:1f:43:
                    59:ca:39:cc:e9:f6:a5:33:08:8d:1d:ae:d8:a5:19:
                    5d:a6:f2:c9:b9:ed:f5:f2:22:c5:21:d9:3c:bc:92:
                    1e:ae:3f:a2:0b:7c:09:69:64:37:24:5a:d8:73:d7:
                    ad:0c:f6:4a:6e:72:08:74:a4:a4:d0:fb:e5:ca:7a:
                    39:c2:5e:91:cf:af:06:a6:2a:0d:a3:61:e9:e6:2e:
                    b6:a5:a5:69:27:de:b6:39:77:20:b2:1a:48:6a:64:
                    cf:27:41:7f:f8:80:06:4e:b1:da:21:4a:44:6d:ec:
                    18:2c:3d:0b:72:97:a6:9d:05:35:71:0a:f4:67:ce:
                    a5:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:43:49:95:C8:82:90:2C:62:E4:6F:6B:D3:D5:C6:6C:3D:2D:A7:88
            X509v3 Authority Key Identifier:
                keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0d:f2:0c:5a:a3:4a:70:94:75:9f:3d:0e:a5:f9:fc:60:80:
         b2:83:35:f2:e7:f3:b0:31:9a:db:52:8f:f8:b5:de:6c:f3:04:
         ec:b0:12:15:bd:f8:86:3e:41:3a:53:b1:fb:80:53:ee:c6:d1:
         e4:1d:ce:6b:e8:92:42:52:f7:26:28:de:1d:c5:8d:c4:d2:f1:
         a4:0c:01:43:bf:5f:98:51:d6:cf:74:d8:ad:09:be:1c:ce:29:
         e7:b8:19:1d:c0:2d:c1:7d:c9:1b:e3:26:85:21:ac:90:aa:63:
         b1:20:92:a3:8d:04:0e:7f:26:14:98:89:7f:a8:1f:67:57:37:
         f4:02:96:3e:20:54:e5:09:0b:3f:1c:ec:fd:aa:0b:f0:8a:0c:
         0c:4b:f5:a2:b5:66:95:fa:35:2f:bc:de:d4:de:1d:df:85:cb:
         2c:65:10:69:bc:39:74:f3:82:c1:11:63:11:cd:21:5e:f0:69:
         85:13:0e:ab:27:88:c3:ad:f6:ab:73:09:57:9b:26:4d:f9:ed:
         32:10:6e:82:9a:41:83:72:2e:93:b9:56:5c:b7:36:c9:01:ee:
         36:bc:f3:3a:c1:08:c5:c2:ef:07:1e:6b:69:70:26:fd:3b:84:
         77:01:12:6d:97:9b:c3:54:92:ae:a3:d5:e0:96:71:e3:d5:75:
         34:44:b7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:02:52 2026 by rpki-client