Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File:                     vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier:          Z6nrAyqnHG+W6JCskRPvBfUcwmNw14QilPtx7magl0w=
Subject key identifier:   12:29:5D:27:E0:FB:CE:EA:A6:52:BF:8D:B5:A8:DA:65:4B:B4:E6:5E
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer:       /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial:       01A0D83C51FE8ACA3AB4812503AB16B4EF58
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number:          18B6
Signing time:             Fri 25 Sep 2026 11:03:46 +0000
Manifest this update:     Fri 25 Sep 2026 11:03:46 +0000
Manifest next update:     Sat 26 Sep 2026 11:03:46 +0000
Files and hashes:         1: 6jWojyxSyaLCVEVrlwUXpc7pdZI.roa (hash: 2OvlAKvq6Z4TSn3m+HkdC95W0frjGZoZLJ+JjdZcHag=)
                          2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: tKqi75hTDBn+BE+/oAClFibfyUd2lYuDDTBtFazxtQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3c:51:fe:8a:ca:3a:b4:81:25:03:ab:16:b4:ef:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
        Validity
            Not Before: Sep 25 11:03:46 2026 GMT
            Not After : Sep 26 11:03:46 2026 GMT
        Subject: CN=12295d27e0fbceeaa652bf8db5a8da654bb4e65e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:59:b0:2f:c8:97:b6:70:fb:51:58:b4:7b:19:
                    cd:75:bf:29:35:c4:6c:3b:27:51:6f:24:88:cd:c4:
                    30:8a:ef:c4:56:4e:bb:3b:ab:21:18:4f:29:cc:14:
                    8e:7a:0a:51:f3:e5:7d:7b:87:b0:03:57:aa:9d:dd:
                    0b:dc:cc:15:1c:e8:6b:e8:a8:57:0f:15:c0:f5:b0:
                    20:04:81:39:c9:9c:19:07:fb:7f:af:34:8e:ab:b7:
                    6f:81:6e:ca:c6:7a:67:0f:09:8b:b1:6e:58:eb:6b:
                    bc:be:2a:3b:31:78:5e:36:79:6a:ef:9c:09:04:21:
                    8a:0a:58:34:49:fe:de:03:0e:eb:31:cd:25:f9:a8:
                    5d:f4:17:ca:96:e5:ba:13:23:28:53:19:bf:98:62:
                    fb:11:1e:2e:d2:6e:73:2f:d7:63:16:61:73:19:c7:
                    be:e7:17:a4:b5:fe:9e:a1:12:7d:12:b7:85:2a:02:
                    81:06:3c:8f:8c:b0:06:56:77:c0:55:c3:fb:fe:84:
                    96:23:1c:7c:ff:71:50:a1:85:0d:58:f8:66:2c:d4:
                    b3:89:61:04:c0:58:34:cc:4b:99:52:b2:21:3d:43:
                    22:3f:54:a1:3e:de:48:c7:41:d5:91:94:46:b5:3e:
                    4f:2f:10:59:23:95:dd:45:ff:77:84:2c:c0:21:0b:
                    f7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:29:5D:27:E0:FB:CE:EA:A6:52:BF:8D:B5:A8:DA:65:4B:B4:E6:5E
            X509v3 Authority Key Identifier:
                keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:a6:8a:61:ff:44:8d:9b:f0:96:7b:61:c4:38:89:57:f6:ca:
         dc:6b:1b:e4:2e:ff:41:18:7c:90:b6:3f:51:20:0a:d6:7f:51:
         00:37:a8:1d:07:86:04:d0:9c:28:bd:4c:a8:fa:61:fe:6e:23:
         c3:6b:ed:ee:b8:23:0e:c4:77:c6:04:14:6f:f2:c4:eb:67:15:
         d6:a4:6c:5f:7c:86:f3:ba:d4:97:3b:11:68:17:86:57:56:76:
         79:f2:01:0c:dd:e4:28:a6:b8:0c:6c:25:fb:cd:7b:3a:b1:64:
         bb:bf:73:73:69:20:59:d3:4f:7d:6d:26:83:d4:c5:47:19:f0:
         43:06:64:f0:8a:5f:8b:9c:d4:35:0e:00:cf:b0:3d:ca:a7:af:
         e0:77:fd:66:6d:fe:ed:e7:5a:ee:e6:9a:e8:81:67:4f:a1:5b:
         e6:68:de:b4:8e:c2:0c:fe:45:b3:30:dc:5b:86:60:71:c0:8c:
         73:b3:46:30:bb:5a:ae:bb:62:5e:d4:d7:0d:3a:ce:15:d5:ff:
         ea:85:74:ba:02:08:26:88:55:67:a3:cf:36:d1:74:60:1c:5d:
         9e:a1:63:b3:00:38:cf:74:1e:bf:01:62:00:6a:d8:ca:7d:d8:
         1f:cb:97:0f:9d:78:9a:2e:4c:66:af:46:7c:ac:1a:dd:ae:a6:
         e2:d9:2e:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:27:01 2026 by rpki-client