Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
File:                     vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json)
Hash identifier:          t/JYh4vlAK0NT87pwz+nP5AQDwYZ10nwLIh03Bn+fts=
Subject key identifier:   25:43:68:70:E3:FB:BA:96:B2:28:7A:89:69:3C:81:34:62:3B:B0:A0
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Certificate issuer:       /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial:       01A1DB38A6AF98A3BA8075FFCF1F7C89E0A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
Manifest number:          04FC
Signing time:             Sat 14 Nov 2026 18:01:25 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:25 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:25 +0000
Files and hashes:         1: 8HPlLJKGC0uGDXpjxVBwb6wa0qk.roa (hash: Ojh5/xBT32ZIv2cbh6f99Qcqv0JCaF6De9sA3ACbGs0=)
                          2: IivqEYycEJ9ENYkDV_x_rR4eFr0.roa (hash: IQVchAwFZI4RDu0XF+MD2n3sIbpJvcGSbjEZGTu8Mwc=)
                          3: X8pouaMpaLsuYErTPUpgqpWeT9Y.roa (hash: psbUeXwDjoOPzcvtNOSx3ERhIjFSIX4yWz6HMVvEcEg=)
                          4: XyAp-ULJDGqQnYw4x0VOKO9WL4A.roa (hash: p7Y5UggA9XaPiUt8v09KTFjc/O7q3EmBodfSudOJ2G0=)
                          5: mvMvzcuR1NgOhwlZXo7XswNReO8.roa (hash: OC7UawU8PzTtEO+txuJgCieiCDiiiwo16T6kmqVkBqo=)
                          6: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (hash: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0=)
                          7: svnpZZsUeH6n-AVu66pE6Y0gA84.roa (hash: Egmdd5f9mV0+ieTkKBLVVxU82bPBiHZ24d2BUYdnki0=)
                          8: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: DS1qY6GcMAmpwoSF62bhybF/M3Gp4CnjrrJBY6XhJBw=)
                          9: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (hash: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 12:00:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:a6:af:98:a3:ba:80:75:ff:cf:1f:7c:89:e0:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
        Validity
            Not Before: Nov 14 18:01:25 2026 GMT
            Not After : Nov 15 18:01:25 2026 GMT
        Subject: CN=25436870e3fbba96b2287a89693c8134623bb0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e7:57:79:ce:0d:e5:fc:78:6e:a8:4e:a2:19:
                    30:be:81:c2:0c:1a:76:cc:0e:59:ff:42:55:b5:ba:
                    88:de:0a:aa:8d:17:19:35:32:39:1a:ae:92:6a:dd:
                    bc:f0:51:32:c6:94:24:0c:c6:6e:38:a0:4e:0e:f8:
                    b5:9e:7a:15:aa:6f:42:05:d7:ac:1e:1b:21:3f:64:
                    3b:4d:a1:d7:09:32:fa:5d:bd:5f:37:fb:1a:6a:08:
                    d7:a8:6a:0c:aa:70:9f:3c:a8:04:59:84:53:f9:a5:
                    4d:50:e3:42:ae:92:d3:da:ed:1d:52:3c:e8:e8:52:
                    ce:b1:6c:1c:9d:27:70:e9:3c:26:2a:4c:3f:73:40:
                    d5:36:be:de:2a:4c:4f:b5:7e:77:0f:2a:61:25:8f:
                    6d:25:82:92:8d:9e:4a:20:b1:b5:ec:9f:a0:6a:bd:
                    e1:b0:40:d4:af:0e:d8:df:22:dc:9f:97:d0:78:1a:
                    6d:f7:71:37:50:f5:3c:38:29:89:fc:e5:bb:c0:d8:
                    5a:4f:3c:33:ea:d0:78:33:24:81:4a:be:1a:a9:cb:
                    a3:38:e4:71:5a:c4:0d:b9:c6:46:13:f9:a1:12:1a:
                    d4:11:d7:df:19:57:fd:82:39:37:a8:69:29:28:89:
                    02:3e:98:0a:b9:20:12:ce:b5:b5:42:52:1a:21:63:
                    fb:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:43:68:70:E3:FB:BA:96:B2:28:7A:89:69:3C:81:34:62:3B:B0:A0
            X509v3 Authority Key Identifier:
                keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:3b:f3:e4:52:ab:1b:ed:3b:a2:ef:2d:8a:7b:0c:15:34:0d:
         ac:2a:23:d3:27:bb:54:13:a7:86:77:19:b1:1f:6b:3e:a5:33:
         bc:1e:58:b5:b9:27:36:fd:f2:ea:43:cd:b2:8e:e4:08:3c:d6:
         fa:45:ec:a9:70:83:d8:d7:ac:fb:9c:a1:1e:26:98:84:9b:ca:
         7e:e4:83:4a:11:a0:77:62:ed:89:56:df:7f:27:58:0f:18:1a:
         06:33:16:bd:4c:a6:27:cb:79:fe:51:aa:a7:3e:fd:c5:da:ba:
         85:4d:75:4a:3d:3c:f5:9f:03:03:00:dd:92:d2:59:f3:66:ff:
         8a:af:20:e1:c2:1f:fe:f9:ed:c4:c0:05:f1:41:fc:b0:16:43:
         45:57:f6:ac:a1:cd:ae:19:4e:28:d6:5b:55:81:10:6d:09:65:
         d8:30:3f:b6:78:8f:d5:6c:0a:11:2f:d7:3b:a3:0d:0a:6b:14:
         e0:30:02:da:77:8c:fc:5d:7f:79:96:8e:00:c0:bd:ba:1c:74:
         01:18:43:a3:9a:5f:4a:46:7b:cd:90:5d:13:d5:e0:32:54:e0:
         20:a8:dd:c3:d3:73:b6:ee:a5:c3:f8:b7:4f:45:56:04:c4:94:
         4c:1f:ef:7d:52:0a:f4:d0:8a:5d:31:48:df:2d:45:57:7a:95:
         fc:0c:21:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 14 22:24:03 2026 by rpki-client