Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          2QEt5wCDTivQJxudPSOH8bZzMfQ+ShQAedB0vEXY/nc=
Subject key identifier:   80:A1:08:D2:C4:53:63:FD:71:92:DF:23:90:86:DF:92:E8:65:CE:8D
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       01A0FC7DFF79C8CBBDF29DC97A53352B5316
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          161B
Signing time:             Fri 02 Oct 2026 12:01:50 +0000
Manifest this update:     Fri 02 Oct 2026 12:01:50 +0000
Manifest next update:     Sat 03 Oct 2026 12:01:50 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: mzkmdD3cG3VSFggnH8JN8TAKOp2TdK6HwSpWJB+bcYc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 03 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:fc:7d:ff:79:c8:cb:bd:f2:9d:c9:7a:53:35:2b:53:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Oct  2 12:01:50 2026 GMT
            Not After : Oct  3 12:01:50 2026 GMT
        Subject: CN=80a108d2c45363fd7192df239086df92e865ce8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a5:14:af:89:de:8a:d1:4c:b8:ba:7a:ba:90:
                    a9:70:b9:92:79:4e:05:1b:f4:e5:25:5c:de:24:ad:
                    2d:e8:0f:01:e9:ff:a7:a1:64:f0:2f:a5:29:ef:dc:
                    96:09:2b:ca:8e:38:a6:48:36:ef:a3:20:16:de:d8:
                    36:39:bd:68:63:12:c3:ab:7d:18:f5:8c:c4:43:53:
                    bc:74:d0:e2:ff:03:14:9a:de:f8:99:c2:4d:e1:e1:
                    fb:da:7e:b2:a8:d7:a7:94:9b:64:c1:1e:2a:e9:ae:
                    00:ec:1a:fb:95:8c:cf:f2:09:bc:ca:53:46:97:fe:
                    1e:c2:c6:1e:ca:09:e6:7a:4d:0a:fd:b5:b3:75:7a:
                    e2:91:e2:c5:f7:39:f8:f7:ce:1b:fa:b9:c9:cc:83:
                    09:8e:9b:90:a7:f2:48:40:9f:d1:99:c0:90:22:08:
                    80:56:da:63:3b:4a:07:2f:5b:65:aa:24:b5:a6:7d:
                    15:20:27:7c:af:58:c4:12:9c:21:f2:00:7c:aa:34:
                    e9:a4:fd:e1:61:e3:24:23:88:c7:24:26:05:4f:f2:
                    32:32:40:e4:8d:04:0d:3a:d4:fe:01:1b:94:75:5b:
                    70:ea:f2:d8:18:59:b7:fc:1b:28:06:4d:b2:8f:1b:
                    f7:97:e9:7a:62:7f:e8:61:4d:31:85:d1:7e:5e:cf:
                    27:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:A1:08:D2:C4:53:63:FD:71:92:DF:23:90:86:DF:92:E8:65:CE:8D
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:16:1f:c2:de:27:86:bf:8b:4f:4b:90:dd:48:99:55:bd:b7:
         ae:f4:e0:d8:d5:18:6a:f1:ce:32:9f:ef:9a:39:f5:35:90:74:
         39:22:82:61:05:7f:f8:e6:d5:94:39:a9:54:72:74:1a:20:b7:
         84:51:44:d9:29:f6:1c:04:37:cb:16:b2:8d:ac:e9:3a:35:5f:
         d0:ec:26:2e:a6:4e:13:41:b2:51:a7:c7:ae:ed:2f:00:93:3d:
         25:c4:5b:4e:75:36:20:ba:df:a1:d6:cb:4d:2a:a0:35:09:46:
         39:29:bb:59:80:ef:6e:33:f2:4e:15:02:41:c3:01:78:01:2d:
         b8:9a:dc:c6:be:7b:2e:a4:b7:8c:13:cf:62:78:c1:34:ec:9c:
         f2:9d:04:49:0e:6d:64:56:0c:07:09:b3:14:00:ac:ad:bb:0f:
         36:7a:d8:64:a4:70:8a:e2:df:1c:8f:fb:f1:8f:2c:f7:86:95:
         dd:c5:70:bc:92:cd:9b:cf:fe:b3:3e:08:be:d7:bf:7b:27:1e:
         3e:8f:6b:85:47:cc:7d:28:2c:fc:34:94:de:bb:c6:f5:d1:c5:
         09:b2:fd:1f:77:b3:95:d1:6e:33:57:3d:fb:33:fe:b8:0f:29:
         25:fe:3e:87:31:88:76:15:8d:51:ff:e5:8d:71:ca:8f:d9:eb:
         73:73:fb:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD8ff95yMu98p3JelM1K1MWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMTA3ZTA3OTUyYzA2OTM1OGNkM2Y4MmFhZWNlYjRjNjk0
ODNjYTkwHhcNMjYxMDAyMTIwMTUwWhcNMjYxMDAzMTIwMTUwWjAzMTEwLwYDVQQD
Eyg4MGExMDhkMmM0NTM2M2ZkNzE5MmRmMjM5MDg2ZGY5MmU4NjVjZThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsaUUr4neitFMuLp6upCpcLmSeU4F
G/TlJVzeJK0t6A8B6f+noWTwL6Up79yWCSvKjjimSDbvoyAW3tg2Ob1oYxLDq30Y
9YzEQ1O8dNDi/wMUmt74mcJN4eH72n6yqNenlJtkwR4q6a4A7Br7lYzP8gm8ylNG
l/4ewsYeygnmek0K/bWzdXrikeLF9zn4984b+rnJzIMJjpuQp/JIQJ/RmcCQIgiA
VtpjO0oHL1tlqiS1pn0VICd8r1jEEpwh8gB8qjTppP3hYeMkI4jHJCYFT/IyMkDk
jQQNOtT+ARuUdVtw6vLYGFm3/BsoBk2yjxv3l+l6Yn/oYU0xhdF+Xs8n7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIChCNLEU2P9cZLfI5CG35LoZc6NMB8GA1UdIwQY
MBaAFL8QfgeVLAaTWM0/gqrs60xpSDypMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2It
NDg2MzNkNzE4NTkwLzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi83ZTI4ZWUtYzY1ZC00NTI5LWE0N2ItNDg2MzNkNzE4NTkw
LzEvdnhCLUI1VXNCcE5ZelQtQ3F1enJUR2xJUEtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvxYfwt4n
hr+LT0uQ3UiZVb23rvTg2NUYavHOMp/vmjn1NZB0OSKCYQV/+ObVlDmpVHJ0GiC3
hFFE2Sn2HAQ3yxayjazpOjVf0OwmLqZOE0GyUafHru0vAJM9JcRbTnU2ILrfodbL
TSqgNQlGOSm7WYDvbjPyThUCQcMBeAEtuJrcxr57LqS3jBPPYnjBNOyc8p0ESQ5t
ZFYMBwmzFACsrbsPNnrYZKRwiuLfHI/78Y8s94aV3cVwvJLNm8/+sz4Ivte/eyce
Po9rhUfMfSgs/DSU3rvG9dHFCbL9H3ezldFuM1c9+zP+uA8pJf4+hzGIdhWNUf/l
jXHKj9nrc3P7TQ==
-----END CERTIFICATE-----
Generated at Fri Oct 2 17:24:21 2026 by rpki-client