Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
File:                     vL4wndalMhnOvVZb4fI0uT5WLjk.mft (raw, json)
Hash identifier:          vC5dO14rsbf4rmfKHZcbjLXYRVIMWCm97PT6CZWLH68=
Subject key identifier:   E4:62:28:BC:5B:8F:12:E0:3C:08:1C:26:B5:D1:55:43:E2:61:C2:40
Authority key identifier: BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39
Certificate issuer:       /CN=bcbe309dd6a53219cebd565be1f234b93e562e39
Certificate serial:       01A0D8040A4CE446DD1495007785DDE5B1FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
Manifest number:          023D
Signing time:             Fri 25 Sep 2026 10:02:18 +0000
Manifest this update:     Fri 25 Sep 2026 10:02:18 +0000
Manifest next update:     Sat 26 Sep 2026 10:02:18 +0000
Files and hashes:         1: vL4wndalMhnOvVZb4fI0uT5WLjk.crl (hash: TCf0mW7k/u0Ubn5pRZBSI9W+8XVzFyUviuXmYXDuwNA=)
                          2: y80B_uuM_hGD_Q988wwVbuTVVzQ.asa (hash: wqE3B1uMY7o5p44haT4r4tbcqIzVxJtI7cONoSQ5lKs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 10:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:04:0a:4c:e4:46:dd:14:95:00:77:85:dd:e5:b1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcbe309dd6a53219cebd565be1f234b93e562e39
        Validity
            Not Before: Sep 25 10:02:18 2026 GMT
            Not After : Sep 26 10:02:18 2026 GMT
        Subject: CN=e46228bc5b8f12e03c081c26b5d15543e261c240
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:a0:c7:cf:d1:95:39:6c:95:02:a2:09:56:ee:
                    42:67:95:58:13:90:df:35:86:f6:33:a3:87:96:7a:
                    34:0a:5e:82:85:9b:12:65:ca:2f:ba:d6:1d:37:8c:
                    b6:de:cf:af:e5:e8:57:2c:ad:9a:2c:c6:06:d7:9f:
                    1d:b2:6f:74:e5:f9:e6:49:c1:a2:dd:e5:31:0e:50:
                    5c:91:28:7f:c4:b6:a0:ac:02:9e:57:ef:ee:b9:fd:
                    0f:e7:2b:a1:1a:e8:15:e9:7b:b0:6d:80:75:43:66:
                    d4:3f:bb:0a:be:b7:5d:37:50:75:12:d1:46:6a:a3:
                    b4:81:a7:15:f5:11:d1:57:c8:db:d5:f0:d2:56:61:
                    ef:1c:52:da:b1:7b:a3:c7:b1:7f:fb:6c:d4:de:a2:
                    c9:8f:12:bf:50:f7:0c:ae:94:62:55:67:6f:bd:a3:
                    c6:22:3c:b6:1c:dd:8b:b7:7f:31:64:7b:0b:8c:89:
                    ca:9b:d9:75:3e:fd:3f:9d:f3:4d:e8:f1:23:96:d1:
                    80:c4:20:86:92:44:a8:60:bc:cc:52:76:fa:bb:be:
                    18:1f:73:ba:93:25:e9:78:9b:38:60:6c:e2:60:03:
                    df:43:c9:5c:b2:9a:f7:df:96:6c:1c:13:d3:db:05:
                    50:a6:35:e3:5b:1f:10:ea:a6:08:8d:de:55:9e:a8:
                    02:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:62:28:BC:5B:8F:12:E0:3C:08:1C:26:B5:D1:55:43:E2:61:C2:40
            X509v3 Authority Key Identifier:
                keyid:BC:BE:30:9D:D6:A5:32:19:CE:BD:56:5B:E1:F2:34:B9:3E:56:2E:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vL4wndalMhnOvVZb4fI0uT5WLjk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c0c375-03ae-49ac-bffb-3d3bbc5db543/1/vL4wndalMhnOvVZb4fI0uT5WLjk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:9f:e3:8b:4f:90:be:b4:d2:3b:73:e8:84:c0:8b:81:c4:df:
         a8:37:f4:97:85:ec:7c:a8:a5:46:04:6d:cf:4f:cf:43:70:a5:
         50:43:64:a4:9b:f2:b9:21:da:c1:cb:41:86:80:1f:0c:f6:5c:
         4e:f7:00:37:d0:d4:fe:11:fc:eb:78:4b:e8:c4:b5:6e:7e:6a:
         4c:3b:6a:68:1b:f6:6b:08:a1:33:f3:46:84:c4:c4:80:c2:3c:
         96:fc:2f:21:98:ca:15:48:59:17:47:75:5e:98:b9:c6:81:20:
         84:78:32:d5:f5:a4:7c:c9:fd:cc:52:38:f4:2b:b4:2b:f6:d9:
         33:59:48:24:0d:57:a4:23:83:b6:32:8b:40:be:e7:f1:06:a2:
         76:de:b9:ff:ab:e4:81:59:61:68:f1:a5:73:42:4c:a2:d4:3c:
         54:f7:16:d5:21:56:37:b8:b9:07:aa:8f:36:4c:40:5e:85:d0:
         10:75:6b:9e:88:e2:00:ec:48:17:0b:f8:50:8a:8c:ce:95:eb:
         fd:93:6f:5d:0c:14:fd:9a:fe:76:35:22:ce:eb:51:45:f8:ec:
         91:51:25:c1:0f:fc:0f:33:8c:30:15:12:79:b7:94:ac:8c:2f:
         b9:38:47:07:e9:7d:72:51:b1:55:e8:f7:a0:d2:0d:bf:6a:01:
         45:ab:86:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 20:37:46 2026 by rpki-client