Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
File:                     vPPYLGBpUlW7VE_xoawy2w-xFuU.mft (raw, json)
Hash identifier:          ofACJMJcAvVYw9jH17NjS3DIuNcMXELKvtrMBkcx5ko=
Subject key identifier:   6B:74:40:FD:15:3C:3E:26:C7:83:42:59:6F:88:58:96:29:E1:E9:C2
Authority key identifier: BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5
Certificate issuer:       /CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
Certificate serial:       01A0E02AF0DC385A60AC9B282364E70473F4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
Manifest number:          03F8
Signing time:             Sun 27 Sep 2026 00:01:45 +0000
Manifest this update:     Sun 27 Sep 2026 00:01:45 +0000
Manifest next update:     Mon 28 Sep 2026 00:01:45 +0000
Files and hashes:         1: vPPYLGBpUlW7VE_xoawy2w-xFuU.crl (hash: NyhHkm6MDj2s2bb8HpM07yEh4Kfz0jCJIW6qwkhlh9Y=)
                          2: vw2ntvLesz6s464z3Zxlqxg_Jfg.roa (hash: jJvGLsLP1bSLpBaz6ycodyIwzcBAdVDfBxgVTq271mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 00:01:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e0:2a:f0:dc:38:5a:60:ac:9b:28:23:64:e7:04:73:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf3d82c60695255bb544ff1a1ac32db0fb116e5
        Validity
            Not Before: Sep 27 00:01:45 2026 GMT
            Not After : Sep 28 00:01:45 2026 GMT
        Subject: CN=6b7440fd153c3e26c78342596f88589629e1e9c2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:71:31:68:cc:e2:2e:33:88:ba:ab:bf:57:1b:
                    cb:49:0c:b4:fa:ba:00:b2:a0:91:44:d4:c0:35:a7:
                    1f:9d:54:b5:f4:8f:92:e9:4e:db:69:64:02:41:9e:
                    fb:6b:af:71:49:b2:04:5a:77:7d:e5:9b:5d:de:35:
                    2b:36:07:51:6a:67:ba:8b:d3:39:d9:bf:76:87:a3:
                    0f:c1:c4:e1:80:34:00:a1:f9:59:67:0a:dd:75:8e:
                    37:f8:1d:46:12:84:8d:5f:52:25:6b:87:7e:80:65:
                    cb:f3:0c:e2:4b:a1:c0:24:1d:05:59:98:81:7b:78:
                    1a:f8:d9:8a:13:6c:c9:7e:f7:e9:21:a1:d3:59:e1:
                    2c:23:c2:0b:1d:fd:6d:a1:ce:3d:47:c1:0b:3b:6b:
                    41:cc:ea:d7:c5:8c:0d:3c:4a:87:14:8b:00:2e:2e:
                    db:c0:c1:27:33:16:f4:fa:99:35:14:d0:97:43:eb:
                    37:81:37:89:56:60:0f:84:cf:ad:87:45:85:a0:a4:
                    67:f2:7f:8a:3c:77:b2:4c:f9:f2:82:c3:24:1d:6c:
                    1d:30:e0:74:39:42:6e:15:75:59:32:bc:c9:30:86:
                    3e:0c:78:e6:c4:98:76:ee:48:d3:9b:4c:74:d3:f9:
                    9e:7e:db:66:dc:9d:37:e7:c7:34:8b:fc:74:e7:26:
                    dd:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:74:40:FD:15:3C:3E:26:C7:83:42:59:6F:88:58:96:29:E1:E9:C2
            X509v3 Authority Key Identifier:
                keyid:BC:F3:D8:2C:60:69:52:55:BB:54:4F:F1:A1:AC:32:DB:0F:B1:16:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPPYLGBpUlW7VE_xoawy2w-xFuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/70/ea91f9-bb12-4544-9b2f-e570369ee03b/1/vPPYLGBpUlW7VE_xoawy2w-xFuU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:a2:c5:fa:9e:c2:fe:5c:3f:c1:99:b5:3f:90:96:50:32:
         93:72:c5:ce:09:56:11:19:f8:14:22:99:1a:f2:6f:c1:f4:30:
         f4:54:2a:55:a3:f1:69:ac:6a:91:7e:00:99:b0:ce:9e:f4:2f:
         b7:27:78:20:2b:9f:f1:3a:a6:da:f8:6b:23:56:a5:b4:f7:53:
         53:a5:b6:52:e8:7d:75:e7:90:2b:13:49:55:66:32:1c:b7:80:
         31:28:21:6f:ec:1b:75:b7:1a:0a:0d:71:a8:77:1f:69:50:e5:
         06:03:41:90:99:f1:92:84:42:22:ae:ca:21:36:a3:65:5a:4a:
         59:56:78:c8:76:91:ee:5c:83:dc:cc:3f:a5:44:c8:c9:f7:e3:
         6f:25:26:eb:cf:25:ee:08:2a:ed:54:bd:83:85:0d:85:be:5d:
         f9:05:02:fd:dd:44:ec:b3:77:d9:6c:35:b7:e8:7a:60:d5:2a:
         35:a6:ea:63:4a:39:0b:e7:e3:e9:7b:dc:eb:cd:e3:82:35:ee:
         0f:5d:03:a6:c6:e7:ff:db:31:3f:85:69:0b:8d:c1:de:ea:fb:
         4f:59:b3:d6:73:87:02:47:f8:94:07:fd:4c:f8:7c:4f:2a:1b:
         4d:6b:10:0e:e8:60:06:d0:41:8c:84:8e:dc:e2:72:b5:b8:7c:
         e6:76:c8:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDgKvDcOFpgrJsoI2TnBHP0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjNkODJjNjA2OTUyNTViYjU0NGZmMWExYWMzMmRiMGZi
MTE2ZTUwHhcNMjYwOTI3MDAwMTQ1WhcNMjYwOTI4MDAwMTQ1WjAzMTEwLwYDVQQD
Eyg2Yjc0NDBmZDE1M2MzZTI2Yzc4MzQyNTk2Zjg4NTg5NjI5ZTFlOWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8XExaMziLjOIuqu/VxvLSQy0+roA
sqCRRNTANacfnVS19I+S6U7baWQCQZ77a69xSbIEWnd95Ztd3jUrNgdRame6i9M5
2b92h6MPwcThgDQAoflZZwrddY43+B1GEoSNX1Ila4d+gGXL8wziS6HAJB0FWZiB
e3ga+NmKE2zJfvfpIaHTWeEsI8ILHf1toc49R8ELO2tBzOrXxYwNPEqHFIsALi7b
wMEnMxb0+pk1FNCXQ+s3gTeJVmAPhM+th0WFoKRn8n+KPHeyTPnygsMkHWwdMOB0
OUJuFXVZMrzJMIY+DHjmxJh27kjTm0x00/mefttm3J0358c0i/x05ybd/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt0QP0VPD4mx4NCWW+IWJYp4enCMB8GA1UdIwQY
MBaAFLzz2CxgaVJVu1RP8aGsMtsPsRblMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC9lYTkxZjktYmIxMi00NTQ0LTliMmYt
ZTU3MDM2OWVlMDNiLzEvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC9lYTkxZjktYmIxMi00NTQ0LTliMmYtZTU3MDM2OWVlMDNi
LzEvdlBQWUxHQnBVbFc3VkVfeG9hd3kydy14RnVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccKixfqe
wv5cP8GZtT+QllAyk3LFzglWERn4FCKZGvJvwfQw9FQqVaPxaaxqkX4AmbDOnvQv
tyd4ICuf8Tqm2vhrI1altPdTU6W2Uuh9deeQKxNJVWYyHLeAMSghb+wbdbcaCg1x
qHcfaVDlBgNBkJnxkoRCIq7KITajZVpKWVZ4yHaR7lyD3Mw/pUTIyffjbyUm688l
7ggq7VS9g4UNhb5d+QUC/d1E7LN32Ww1t+h6YNUqNabqY0o5C+fj6Xvc683jgjXu
D10Dpsbn/9sxP4VpC43B3ur7T1mz1nOHAkf4lAf9TPh8TyobTWsQDuhgBtBBjISO
3OJytbh85nbI3w==
-----END CERTIFICATE-----
Generated at Sun Sep 27 12:10:08 2026 by rpki-client