Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
File:                     vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft (raw, json)
Hash identifier:          GQdl5LshKDbGJBsMfX55siPhyw4FvlZvVnr0/tmVzKk=
Subject key identifier:   AA:61:C3:D5:74:A5:F7:CC:6E:D2:0E:E3:7D:FB:AD:7F:BA:33:D5:89
Authority key identifier: BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7
Certificate issuer:       /CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
Certificate serial:       01A105EEAB64D028D9ABC9A069F1AF6181C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
Manifest number:          1A88
Signing time:             Sun 04 Oct 2026 08:01:29 +0000
Manifest this update:     Sun 04 Oct 2026 08:01:29 +0000
Manifest next update:     Mon 05 Oct 2026 08:01:29 +0000
Files and hashes:         1: Zhqy7g8lJUOishUdKqXaWCvxzx4.roa (hash: UN8EUtXHVUb/yxu+HKPvBFBWS56nPQFqhJoUEVPPqMY=)
                          2: vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl (hash: piF98ixnuK0CWPvSa5N4Rto4w5WQSt0WYqn4SA57ff4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 Oct 2026 00:44:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:05:ee:ab:64:d0:28:d9:ab:c9:a0:69:f1:af:61:81:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15a027b5ee4b0e8537a8f7198cfa9ea0945ae7
        Validity
            Not Before: Oct  4 08:01:29 2026 GMT
            Not After : Oct  5 08:01:29 2026 GMT
        Subject: CN=aa61c3d574a5f7cc6ed20ee37dfbad7fba33d589
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:dd:44:25:0b:fc:ab:d0:06:25:5e:08:be:34:
                    ee:e0:b9:86:3d:bf:cd:06:fc:bd:6d:ee:ee:17:69:
                    21:0b:dc:50:9c:c7:38:5e:eb:0e:94:dd:e7:2a:55:
                    2b:f8:7e:d1:8c:7d:e9:c2:ca:da:5a:5a:84:81:f4:
                    5c:30:e0:9b:11:24:e7:c7:20:de:79:e8:7f:2d:9e:
                    fa:b0:28:62:2a:40:6f:ce:30:05:52:0e:81:45:22:
                    cb:e2:9c:2d:00:f5:f8:d7:b6:ef:c3:56:23:d3:ac:
                    8c:ea:f0:f1:0b:83:f9:22:d9:5d:ab:67:f9:28:8b:
                    ea:f3:67:f2:2f:c7:eb:d1:e7:94:ab:4c:e0:56:47:
                    9f:2e:6e:5e:89:f5:85:01:0a:a1:12:57:56:6d:55:
                    36:9d:e6:7e:07:75:7c:e3:33:ce:e8:63:6f:2d:80:
                    24:c6:17:b1:db:f8:b6:ac:09:19:ad:a1:ba:19:a6:
                    d0:ca:28:83:65:eb:50:40:2c:a7:2d:ef:d6:66:24:
                    93:a7:9a:2e:8c:2b:a6:e6:f9:d8:f3:5a:7e:2e:81:
                    ea:5a:e0:e7:5e:3e:41:4d:36:db:c4:49:9d:5a:34:
                    c0:07:66:d2:c8:db:c0:d7:19:30:dc:a5:39:55:75:
                    19:45:fb:2d:58:e0:d7:0b:0d:19:b1:25:25:cd:87:
                    94:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:61:C3:D5:74:A5:F7:CC:6E:D2:0E:E3:7D:FB:AD:7F:BA:33:D5:89
            X509v3 Authority Key Identifier:
                keyid:BC:15:A0:27:B5:EE:4B:0E:85:37:A8:F7:19:8C:FA:9E:A0:94:5A:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/27cd71-9df5-4f5a-a701-6dfe239ae541/1/vBWgJ7XuSw6FN6j3GYz6nqCUWuc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:97:3c:ac:fc:1e:5d:23:32:37:61:a6:54:6a:db:07:77:d0:
         2e:1a:9e:af:f8:d5:79:3b:23:dc:c9:3b:ac:98:5a:85:cb:da:
         ce:5a:17:f7:e9:8b:44:9c:08:9a:1d:78:ff:6c:15:83:8d:37:
         0d:c5:75:54:06:ed:f4:f6:cf:38:85:c5:87:e8:5c:a9:9e:29:
         40:2f:a9:41:cc:93:53:47:7c:6a:11:6f:3a:a3:ed:41:df:0a:
         42:d9:ba:bc:9f:fe:0e:68:f6:7e:66:a3:68:c5:c8:37:70:d4:
         f2:26:41:82:c3:fb:fa:90:20:6d:0b:23:da:c5:89:3c:9d:23:
         a1:1c:28:22:77:ee:c7:cd:c3:53:6c:00:e5:a4:87:c0:06:59:
         ae:e1:1a:41:ee:3b:90:df:ea:ec:ea:1e:05:00:fd:8e:ff:1b:
         b6:ae:74:e1:e2:6c:e4:11:64:70:00:bb:31:dd:25:31:ce:e6:
         92:86:1e:7a:11:75:90:77:86:a1:7a:d9:3c:65:cf:10:63:5f:
         61:4f:49:64:ef:43:7b:82:ef:c9:ee:43:7a:ee:e1:5a:96:79:
         2d:d6:b5:a7:70:56:6a:04:9b:a0:52:31:53:87:e1:86:ae:71:
         4a:33:60:09:d2:6e:85:1c:e0:34:c0:ca:05:65:8a:65:38:54:
         c2:b0:80:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEF7qtk0CjZq8mgafGvYYHBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTVhMDI3YjVlZTRiMGU4NTM3YThmNzE5OGNmYTllYTA5
NDVhZTcwHhcNMjYxMDA0MDgwMTI5WhcNMjYxMDA1MDgwMTI5WjAzMTEwLwYDVQQD
EyhhYTYxYzNkNTc0YTVmN2NjNmVkMjBlZTM3ZGZiYWQ3ZmJhMzNkNTg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxt1EJQv8q9AGJV4IvjTu4LmGPb/N
Bvy9be7uF2khC9xQnMc4XusOlN3nKlUr+H7RjH3pwsraWlqEgfRcMOCbESTnxyDe
eeh/LZ76sChiKkBvzjAFUg6BRSLL4pwtAPX417bvw1Yj06yM6vDxC4P5Itldq2f5
KIvq82fyL8fr0eeUq0zgVkefLm5eifWFAQqhEldWbVU2neZ+B3V84zPO6GNvLYAk
xhex2/i2rAkZraG6GabQyiiDZetQQCynLe/WZiSTp5oujCum5vnY81p+LoHqWuDn
Xj5BTTbbxEmdWjTAB2bSyNvA1xkw3KU5VXUZRfstWODXCw0ZsSUlzYeULQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKphw9V0pffMbtIO4337rX+6M9WJMB8GA1UdIwQY
MBaAFLwVoCe17ksOhTeo9xmM+p6glFrnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEt
NmRmZTIzOWFlNTQxLzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni8yN2NkNzEtOWRmNS00ZjVhLWE3MDEtNmRmZTIzOWFlNTQx
LzEvdkJXZ0o3WHVTdzZGTjZqM0dZejZucUNVV3VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJZc8rPwe
XSMyN2GmVGrbB3fQLhqer/jVeTsj3Mk7rJhahcvazloX9+mLRJwImh14/2wVg403
DcV1VAbt9PbPOIXFh+hcqZ4pQC+pQcyTU0d8ahFvOqPtQd8KQtm6vJ/+Dmj2fmaj
aMXIN3DU8iZBgsP7+pAgbQsj2sWJPJ0joRwoInfux83DU2wA5aSHwAZZruEaQe47
kN/q7OoeBQD9jv8btq504eJs5BFkcAC7Md0lMc7mkoYeehF1kHeGoXrZPGXPEGNf
YU9JZO9De4Lvye5Deu7hWpZ5Lda1p3BWagSboFIxU4fhhq5xSjNgCdJuhRzgNMDK
BWWKZThUwrCAlw==
-----END CERTIFICATE-----
Generated at Sun Oct 4 11:49:39 2026 by rpki-client