Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File:                     vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier:          spH8f58Hkmh2w5sp1sINUn7nPKOMPaKda8jUwLfUCLI=
Subject key identifier:   D8:2C:43:D0:45:10:12:66:38:71:D5:0A:1C:46:AF:7E:05:A8:F1:53
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer:       /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial:       01A0D0B703341BF9B0690FA5C3CDD8CE52A4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number:          17B4
Signing time:             Thu 24 Sep 2026 00:00:49 +0000
Manifest this update:     Thu 24 Sep 2026 00:00:49 +0000
Manifest next update:     Fri 25 Sep 2026 00:00:49 +0000
Files and hashes:         1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
                          2: ZTl4Zk7cce3PpwYo1VMIjiLUFEI.roa (hash: afB6AkuPwpkXIf5jkkcicrF1yBAdioEzpkz55cn4RIY=)
                          3: ksaCCpURSw0ZhOl5teojDL5xafg.roa (hash: zdkmFDcBfCu3b+jGRXAWP+4CGEsf9AaTPVfVHsmsQ5Y=)
                          4: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: rrARSaZJZDBjUSVqsiFNqsVeMC0uCFpxQJIEqfpEYTY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 00:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:b7:03:34:1b:f9:b0:69:0f:a5:c3:cd:d8:ce:52:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
        Validity
            Not Before: Sep 24 00:00:49 2026 GMT
            Not After : Sep 25 00:00:49 2026 GMT
        Subject: CN=d82c43d0451012663871d50a1c46af7e05a8f153
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a7:a6:a2:5b:f1:c5:49:a3:13:4d:df:8d:c7:
                    f1:1e:b1:69:05:d5:bd:f4:ab:62:df:62:5f:a9:47:
                    dd:dd:9d:c0:17:1d:b9:1c:5a:96:3b:71:e6:73:7a:
                    8f:6e:6a:d6:13:9d:ac:c2:c7:72:01:29:52:ac:a7:
                    e6:36:e6:d9:27:c6:c0:ef:98:e6:fe:c4:ee:f8:92:
                    62:2b:6f:55:42:ef:10:02:11:82:dc:4f:e8:8b:a3:
                    c4:03:a6:22:34:6d:95:41:1a:36:50:17:93:96:28:
                    a4:77:e3:e1:71:d0:c3:85:ce:11:73:08:1c:e1:86:
                    ac:20:c4:3d:fe:47:a8:f8:83:35:3e:54:45:50:33:
                    47:39:15:0d:e6:43:04:06:0b:57:5c:ab:87:f4:5b:
                    4f:c6:18:95:b7:a5:2d:fd:68:6c:ac:c3:15:57:b3:
                    a8:63:77:02:2d:d2:16:59:ce:a8:c5:50:ae:53:90:
                    b1:ea:d3:b3:1e:20:d7:19:53:a4:f2:3c:9b:82:2d:
                    d9:32:6d:9a:3a:b2:d6:a7:0e:23:23:f0:4d:4e:02:
                    01:d8:6d:e5:16:96:76:95:bd:75:a5:e9:83:d7:b1:
                    4a:80:77:02:b2:75:ea:8a:36:d6:b7:08:bb:58:1c:
                    19:5c:15:78:1c:d0:45:88:5f:98:84:93:d8:ab:60:
                    52:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:2C:43:D0:45:10:12:66:38:71:D5:0A:1C:46:AF:7E:05:A8:F1:53
            X509v3 Authority Key Identifier:
                keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:5f:9a:ef:70:b2:ce:6d:df:e3:a5:e6:f0:da:df:85:b9:92:
         1d:62:19:65:d9:ca:73:42:fd:6a:9e:7f:e3:1b:ba:2f:30:f4:
         3a:25:ea:72:ab:a0:31:e2:34:e2:3e:88:b8:87:40:39:00:6f:
         d8:a4:0c:b1:8f:2e:44:9e:0e:6a:92:fd:2f:27:52:56:45:cb:
         31:9c:b2:56:20:83:4d:35:75:d1:5b:5f:d0:d0:27:0e:6b:ad:
         8e:92:b6:1c:b6:69:83:b0:31:d6:4f:a8:39:b0:b3:03:4f:30:
         bc:be:df:73:8c:44:0d:58:7f:6a:ae:6c:c5:e4:a0:6e:ea:0f:
         3e:79:a0:82:45:a4:f6:9a:c0:5a:c6:47:e6:43:22:4c:1c:d2:
         a3:4b:13:8c:84:79:38:79:90:37:6f:ac:ff:a0:4f:65:ea:38:
         2c:11:b9:35:d4:89:c7:8b:0a:52:aa:8f:d1:12:fc:94:dc:6e:
         e6:29:bd:99:7b:c1:54:cf:c5:3b:84:62:27:1e:f6:01:db:04:
         c3:ff:7b:5b:17:81:03:a8:ef:e3:e1:b3:8b:2a:c8:5d:a5:48:
         b2:f4:29:8d:d9:bc:3b:bb:17:2f:bb:d1:1d:4a:c9:e8:59:db:
         c2:52:9c:18:ec:da:20:59:fd:a2:d4:bd:fa:fa:e5:13:7d:c5:
         55:e7:70:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 12:12:11 2026 by rpki-client