Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
File:                     vf89luiqFB0ixCQq7_eK9x74skQ.mft (raw, json)
Hash identifier:          qGBwOutZrgFDMywUEgoZoaIeogRJ9Xw1o6mt0PyOal8=
Subject key identifier:   7C:6B:50:5C:C9:6E:90:42:08:1E:93:18:C3:68:28:FA:72:E0:09:02
Authority key identifier: BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44
Certificate issuer:       /CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
Certificate serial:       01A138920CFE9FB4B6911D468FE16C68AF74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
Manifest number:          1A36
Signing time:             Wed 14 Oct 2026 04:00:57 +0000
Manifest this update:     Wed 14 Oct 2026 04:00:57 +0000
Manifest next update:     Thu 15 Oct 2026 04:00:57 +0000
Files and hashes:         1: 7w9615nIUak6j9qKBSemLYUs4lE.roa (hash: UXmWoVxNa8W/M8yy0s9ag8l2H1J69QCKdRwDtmWIJD0=)
                          2: vf89luiqFB0ixCQq7_eK9x74skQ.crl (hash: Pr99sBX/rZ9lYKD77vFg/7J0eCwbxDrkKuQ2Z69P7q4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:38:92:0c:fe:9f:b4:b6:91:1d:46:8f:e1:6c:68:af:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdff3d96e8aa141d22c4242aeff78af71ef8b244
        Validity
            Not Before: Oct 14 04:00:57 2026 GMT
            Not After : Oct 15 04:00:57 2026 GMT
        Subject: CN=7c6b505cc96e9042081e9318c36828fa72e00902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:b5:88:30:7a:53:fc:41:c4:47:46:df:bb:
                    4d:b9:84:48:b6:2c:15:92:d6:e1:c5:23:3c:52:6f:
                    94:d0:e0:4a:c6:b3:a0:93:0b:07:c4:e5:49:e6:57:
                    e8:f2:6d:a0:0a:99:1a:d6:96:5e:57:54:41:e7:4b:
                    2d:77:b8:39:33:c7:c1:d8:80:0e:04:a9:6e:ab:b5:
                    5a:17:c9:56:bd:38:a4:3a:ed:ad:26:9d:2b:48:f2:
                    47:db:f3:9d:64:47:07:0f:9f:e8:65:9f:ea:8c:ea:
                    4d:7a:fc:a4:fe:e4:f4:48:93:e1:11:1e:21:98:df:
                    4f:27:8e:d8:fe:de:18:29:0b:bf:c8:1b:4e:00:22:
                    72:c8:7b:c8:a0:b0:26:1a:49:dd:39:15:5f:a8:76:
                    d7:53:a3:d7:8c:0a:ca:1a:c3:32:58:12:37:31:10:
                    99:bc:93:1c:7d:9b:fb:3a:2f:b0:d1:39:04:78:b8:
                    a5:7a:16:91:b0:39:7a:b5:38:02:ad:86:6b:44:bc:
                    a8:e4:10:09:5d:98:b2:40:2a:6a:ad:b1:ac:74:95:
                    c5:77:dc:34:62:b2:cd:47:d5:ba:af:05:d5:78:71:
                    90:c8:c8:62:7f:ba:cc:96:af:f9:e4:2f:95:8a:22:
                    8c:3c:d1:54:1b:84:bb:10:ba:58:98:18:0c:06:79:
                    7e:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:6B:50:5C:C9:6E:90:42:08:1E:93:18:C3:68:28:FA:72:E0:09:02
            X509v3 Authority Key Identifier:
                keyid:BD:FF:3D:96:E8:AA:14:1D:22:C4:24:2A:EF:F7:8A:F7:1E:F8:B2:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf89luiqFB0ixCQq7_eK9x74skQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/59/611c7f-b125-4712-9ef7-3c7987c42c16/1/vf89luiqFB0ixCQq7_eK9x74skQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9a:9f:9a:9d:d3:d4:e3:76:3c:3b:b0:80:60:82:2b:78:1a:
         05:5d:9e:29:0e:55:65:b4:9b:bc:6d:5f:68:3a:36:65:8e:78:
         b6:db:52:c6:d8:77:59:3c:b6:47:22:86:31:d4:d3:35:71:7e:
         9d:01:78:a2:07:01:e8:72:ed:88:31:41:c6:05:8b:89:f9:2c:
         2b:fd:10:35:70:6b:b9:ac:24:9b:b7:24:5e:b3:e0:1f:d3:be:
         62:3b:28:d3:c7:ca:57:a7:32:8a:90:83:8c:cb:aa:4b:67:d7:
         5a:f4:16:f5:a7:42:50:96:4b:31:ea:b4:e2:ce:3a:06:aa:6f:
         f1:55:59:e0:45:9d:a5:07:61:e8:ca:7b:60:8d:3a:f2:06:f9:
         0a:16:29:38:50:32:c3:2a:5e:84:6e:d7:ef:3d:52:ac:70:72:
         50:5e:08:07:88:48:cf:95:b4:1f:0f:88:33:e9:2a:fd:11:71:
         40:20:71:c1:83:12:e9:45:1a:bd:e5:a1:e3:3d:11:5e:a7:08:
         4a:8e:5f:33:2d:cd:b9:f6:ca:12:0f:92:97:fc:23:41:ee:7f:
         bd:58:47:ea:d9:22:f4:35:f3:26:da:81:13:c4:f4:75:65:61:
         37:ec:2b:af:38:4a:19:cc:35:ec:87:9a:b4:f7:1e:0c:5b:3a:
         98:36:93:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 06:29:06 2026 by rpki-client