Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          H6IW25K4UFwO+VTxAdYGDHxsSV9NKgjEPSuJEj+Kty0=
Subject key identifier:   6D:FB:81:3C:3B:D7:3C:DB:28:E4:BE:BA:1B:24:C6:F1:F1:BF:8A:F1
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       01A0D26E695B9DA601CEC3BC2712F1414341
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          12FA
Signing time:             Thu 24 Sep 2026 08:00:46 +0000
Manifest this update:     Thu 24 Sep 2026 08:00:46 +0000
Manifest next update:     Fri 25 Sep 2026 08:00:46 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: bem4ypGVkqQuRqQg+Gg4dcsoZGcdnM2+f/JfAyJJLFE=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 08:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:6e:69:5b:9d:a6:01:ce:c3:bc:27:12:f1:41:43:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Sep 24 08:00:46 2026 GMT
            Not After : Sep 25 08:00:46 2026 GMT
        Subject: CN=6dfb813c3bd73cdb28e4beba1b24c6f1f1bf8af1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:54:60:c8:92:49:19:21:f3:3a:89:2a:70:2e:
                    b2:bd:d8:2f:9d:3c:b2:a8:45:88:00:72:a9:f1:96:
                    6f:51:3a:27:ff:be:56:ac:cf:7c:db:73:f9:2e:a2:
                    22:73:39:5b:fa:61:31:ec:50:66:d8:ba:64:a0:83:
                    76:5b:00:10:fa:82:3d:db:cd:25:a5:ca:8b:cb:3e:
                    74:ab:d3:ce:4b:ec:12:81:c4:b6:47:21:31:3e:c1:
                    73:11:0f:0e:96:e2:25:3f:52:fa:74:1e:fd:88:ec:
                    4f:ef:66:40:08:c6:18:91:fa:30:2a:ce:bf:b1:a7:
                    e6:ec:1e:1b:dd:d4:05:2b:6f:ef:ac:87:76:87:d3:
                    93:68:cb:c2:36:2c:c3:24:5f:bb:79:df:44:5f:66:
                    ae:d0:3d:19:b0:c6:bb:f1:b1:9c:33:0d:75:e4:c5:
                    d1:e8:2a:ac:39:eb:02:7d:ed:54:58:d4:63:9c:31:
                    7e:54:ad:0e:c0:49:65:98:f2:21:77:1c:f1:ce:6e:
                    28:1c:31:ec:7f:48:23:ca:04:ed:5f:ec:35:d3:63:
                    dd:d9:0d:c0:a9:7c:45:5c:73:07:c5:cd:51:1a:32:
                    45:79:cb:23:27:78:e8:12:80:7a:b5:04:8f:52:3e:
                    a8:26:25:d8:94:87:0c:9c:24:79:4d:60:55:d4:09:
                    4e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:FB:81:3C:3B:D7:3C:DB:28:E4:BE:BA:1B:24:C6:F1:F1:BF:8A:F1
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:68:45:7c:fa:03:cc:e1:b5:62:75:18:7b:bb:f1:76:d9:65:
         2b:67:23:cd:c8:14:d4:8f:ed:7f:11:c3:90:34:79:a1:28:ec:
         69:5a:53:10:c8:87:32:c2:9b:07:6d:72:27:94:3a:c2:67:73:
         f6:d6:61:10:a3:43:9d:79:1a:ae:b0:e2:4a:59:59:60:4e:47:
         b0:85:47:44:8a:8b:73:3f:65:42:09:fc:7d:84:34:98:e4:c6:
         09:98:c9:f0:84:18:f9:ed:17:ec:87:a0:fd:33:39:88:94:6c:
         08:3e:be:30:5c:aa:e3:a1:3c:25:62:77:b4:15:37:78:7e:c7:
         7e:8c:a0:a9:51:dc:48:20:e7:5b:ec:46:b5:b5:63:74:54:f4:
         a2:08:13:91:57:7b:5e:82:5f:67:80:f2:90:e7:4e:94:a8:f0:
         42:a9:09:38:c8:04:14:34:fb:5b:c2:94:f6:14:b3:a2:13:46:
         5f:24:24:94:cf:70:85:ac:98:87:8a:4c:fe:fd:ed:bc:c1:a5:
         c4:1f:fc:0a:1a:1f:c9:20:fe:90:f3:6f:03:08:33:41:08:38:
         9e:5e:72:ef:f2:2d:10:41:99:2e:1c:18:29:93:85:0e:3e:77:
         1f:96:d1:50:b6:17:9d:77:4b:4a:68:32:4a:0f:4f:22:21:de:
         47:c7:3b:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 17:36:24 2026 by rpki-client