Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.mft
File:                     bppVitVG3MmrwLihMQZ68C5AcAc.mft (raw, json)
Hash identifier:          SB3SAnrlIeerZ2BUP8DarEldva13tCmI8n8n7pkDt5I=
Subject key identifier:   A2:D3:A8:76:17:22:D6:AE:3A:B0:3F:7F:00:72:91:31:96:7A:B8:CC
Authority key identifier: 6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07
Certificate issuer:       /CN=6e9a558ad546dcc9abc0b8a131067af02e407007
Certificate serial:       01A123F85008DBAAEA95E6AEDEFF16F466E5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.mft
Manifest number:          1A9C
Signing time:             Sat 10 Oct 2026 04:00:38 +0000
Manifest this update:     Sat 10 Oct 2026 04:00:38 +0000
Manifest next update:     Sun 11 Oct 2026 04:00:38 +0000
Files and hashes:         1: 1FZi4AVfxAG0c_zfGp_o2T9Ppsg.roa (hash: oIdG0nPfH26GkdGgpcIt19B+XrLmT6pK1I+pgTOJu04=)
                          2: 7aJ2vx7jWwpxgEHKfahIo95P8lQ.roa (hash: AhUWqNQR2kELsGnghtqFgdl7fa7OSUKnSD6Nyk/XinA=)
                          3: bppVitVG3MmrwLihMQZ68C5AcAc.crl (hash: dlJCp3NyrLGTr1O0k09pRDQK2KJiDuWBSqsY0nj3r6I=)
                          4: qVGqFblblQ0Tx0yMPLkAhoph6Og.roa (hash: qcH9kB+D0tpYWI3bM+Fdfy2bR8qWJ9USHYKyRByfQM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:23:f8:50:08:db:aa:ea:95:e6:ae:de:ff:16:f4:66:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6e9a558ad546dcc9abc0b8a131067af02e407007
        Validity
            Not Before: Oct 10 04:00:38 2026 GMT
            Not After : Oct 11 04:00:38 2026 GMT
        Subject: CN=a2d3a8761722d6ae3ab03f7f00729131967ab8cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:f5:ca:1b:42:94:c2:d7:ad:7a:5d:a5:43:
                    f1:3b:f0:05:46:93:31:0f:fb:ee:4f:af:ba:ce:e3:
                    c6:f5:25:2b:53:b1:79:b3:f9:a2:6f:10:f2:5d:04:
                    e1:a7:ae:8d:7b:3d:89:7e:a8:c9:1a:27:0d:43:22:
                    0c:5f:a5:6a:93:32:f9:c4:c4:83:56:65:f2:c2:0a:
                    2b:6e:be:d1:f1:fa:f0:93:5b:2a:97:ab:8a:52:d5:
                    10:09:5e:7d:2f:04:d3:93:85:4e:fa:5d:9e:4d:ed:
                    fc:62:eb:fd:b8:b7:35:b4:7d:de:78:2c:72:56:be:
                    63:20:4a:6a:4e:51:fd:04:a3:20:45:69:8d:d6:09:
                    4b:e1:17:e0:f0:b3:71:96:c2:12:2f:65:28:78:a3:
                    9e:0c:7e:f9:cf:b5:13:2f:70:f0:8a:24:b7:dc:b3:
                    47:4d:6b:8f:37:01:60:df:8c:1b:e8:99:06:42:49:
                    bf:16:92:e8:c6:ae:b1:70:32:f9:7b:9b:79:40:53:
                    aa:ff:21:b2:4f:d8:e5:a7:a8:f5:4e:fa:53:76:8d:
                    b0:11:44:ce:49:bf:84:53:eb:85:1e:77:41:d1:9c:
                    58:06:f6:a1:cf:80:26:11:62:c1:2e:4d:58:af:1f:
                    ba:fb:22:4b:73:2f:19:00:58:e4:50:7d:e6:55:10:
                    6d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:A8:76:17:22:D6:AE:3A:B0:3F:7F:00:72:91:31:96:7A:B8:CC
            X509v3 Authority Key Identifier:
                keyid:6E:9A:55:8A:D5:46:DC:C9:AB:C0:B8:A1:31:06:7A:F0:2E:40:70:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bppVitVG3MmrwLihMQZ68C5AcAc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/84/1529c6-8082-4f3a-bc92-423fca224041/1/bppVitVG3MmrwLihMQZ68C5AcAc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:bf:e2:b0:d8:b9:75:dd:15:2e:23:d7:35:de:04:96:90:6a:
         ee:d3:aa:11:65:37:eb:a3:7b:38:6d:94:61:4d:68:5d:7a:9c:
         8b:c9:68:74:66:d2:f0:48:74:fa:61:7a:39:4f:a4:f4:71:e8:
         e8:8a:b7:89:fa:77:da:6b:27:37:f3:2d:15:01:50:34:56:e4:
         5c:2b:33:97:2f:bc:41:b7:0f:1c:56:0c:04:c0:69:60:54:10:
         62:b5:9e:f7:3e:66:17:c0:af:2f:43:07:0b:eb:4e:7c:bb:8d:
         84:cc:a2:3e:dc:68:bf:a2:e0:8a:d7:8b:2b:cb:ee:97:2a:28:
         45:8d:2d:f3:f6:39:71:26:90:c7:14:4c:d5:44:46:ea:a4:06:
         ea:aa:f8:6c:6f:c2:66:4b:59:14:b7:a8:80:ec:d9:8f:f5:a8:
         4e:b7:da:89:69:59:63:23:64:b2:a5:0d:98:da:d3:18:c3:14:
         7a:2f:73:e7:79:e9:a6:ea:8f:2e:08:ba:a3:c6:3b:9b:4f:f6:
         28:a3:6d:02:93:24:0d:73:f3:68:84:db:94:4c:d5:aa:51:f9:
         a4:3e:df:c8:e7:2a:97:5f:ff:46:b3:1a:b0:d3:21:9f:d0:2c:
         8c:6b:90:1c:ac:84:cf:e2:3a:76:d5:9d:51:b6:f3:2c:72:de:
         c1:51:f8:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 11:45:13 2026 by rpki-client