Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
File:                     RVfq3Q3asUagq5nAquV40njw9H4.mft (raw, json)
Hash identifier:          eLXR0B1MCDrkRFOzB6Ui1c2ogTX78V6jH8U9SXkBXZU=
Subject key identifier:   DB:8F:CB:C4:A0:37:28:96:72:90:D8:BF:32:33:65:64:D0:F1:C3:92
Authority key identifier: 45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E
Certificate issuer:       /CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
Certificate serial:       01A0EAAE4B3707C411F31720F450B3A81C77
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
Manifest number:          02BE
Signing time:             Tue 29 Sep 2026 01:01:26 +0000
Manifest this update:     Tue 29 Sep 2026 01:01:26 +0000
Manifest next update:     Wed 30 Sep 2026 01:01:26 +0000
Files and hashes:         1: RVfq3Q3asUagq5nAquV40njw9H4.crl (hash: ubIbfJP9tx1JJR2Xn2lZq0PyNjgzyfVVRjBOIPH5jZE=)
                          2: ck2Hnx7YLqfCAwbXnmqrOBQQJXA.roa (hash: z68wCsgmx5LNuVEfhfzGMi/AVsIBR+cwgGs5Q7LfatQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 01:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:ae:4b:37:07:c4:11:f3:17:20:f4:50:b3:a8:1c:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4557eadd0ddab146a0ab99c0aae578d278f0f47e
        Validity
            Not Before: Sep 29 01:01:26 2026 GMT
            Not After : Sep 30 01:01:26 2026 GMT
        Subject: CN=db8fcbc4a03728967290d8bf32336564d0f1c392
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:3b:0b:2d:22:a6:1a:55:18:19:37:a9:1f:63:
                    76:3a:cc:fa:ed:65:40:ce:52:fa:f7:6b:30:46:6a:
                    db:db:51:c6:f7:10:cd:a9:bb:71:3f:e7:cc:3d:b4:
                    f8:4f:5f:21:f4:0d:5c:1e:71:99:e3:d3:2e:d0:48:
                    d7:1f:9e:5c:c7:45:68:2c:cd:3e:98:b9:cc:4b:8d:
                    c8:8d:67:6e:fb:f9:89:76:a3:6c:c5:7c:9d:fe:49:
                    1d:c7:ca:b7:14:6d:78:be:bd:97:cb:0c:c6:1b:59:
                    8f:ce:62:5e:08:a7:68:07:9d:dc:80:b5:cf:79:a4:
                    47:e5:40:18:9b:76:ac:a2:15:48:65:93:89:f4:15:
                    2d:97:dd:4e:69:b9:0d:0c:dd:74:cb:22:bc:45:fa:
                    ce:4f:86:8c:55:41:ac:e1:2d:49:eb:9d:b8:48:ed:
                    9c:1b:e2:89:2f:7d:2c:a6:b2:7d:d1:38:8b:6a:58:
                    fd:01:c4:31:dc:4c:22:ee:f1:28:2d:00:25:99:63:
                    84:cb:9c:02:5a:07:62:59:63:d0:36:5e:cc:a3:f3:
                    df:4d:bb:18:97:48:99:50:55:a9:26:19:a9:4e:3a:
                    69:3e:70:b9:32:fb:6e:07:16:34:36:70:7c:f9:cd:
                    5d:58:e1:9e:ab:8b:ef:20:48:f1:68:28:39:6d:94:
                    a5:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:8F:CB:C4:A0:37:28:96:72:90:D8:BF:32:33:65:64:D0:F1:C3:92
            X509v3 Authority Key Identifier:
                keyid:45:57:EA:DD:0D:DA:B1:46:A0:AB:99:C0:AA:E5:78:D2:78:F0:F4:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVfq3Q3asUagq5nAquV40njw9H4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/bc2d26-dcf7-4695-88ee-932bb4867c2b/1/RVfq3Q3asUagq5nAquV40njw9H4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:bc:a0:19:1f:60:64:f0:6d:e8:2a:7f:3c:10:73:ec:2b:2b:
         11:ed:e0:fd:9f:bd:94:66:b8:08:ff:7e:45:41:44:18:50:a0:
         5d:97:d2:35:a8:b1:96:bc:db:5f:ec:07:00:54:e6:9f:de:43:
         e4:de:60:c8:92:1e:bf:1a:26:11:b4:40:22:3d:b0:f9:53:03:
         d6:7c:56:95:b2:14:5f:02:c4:7b:6e:d8:aa:1c:f9:75:75:fb:
         08:62:80:32:a2:a6:3f:8a:00:65:e4:24:fd:90:b0:2e:dd:cc:
         93:7a:73:63:a7:71:81:be:a2:ed:c4:35:11:c5:b1:87:9a:d4:
         69:cc:4f:18:15:ee:7a:c3:c5:bd:3e:df:5f:c2:d3:ed:08:c3:
         ec:0e:6d:61:90:62:19:02:2c:fa:c0:71:5a:1f:22:a3:cc:8f:
         c7:2a:da:2e:f9:e0:52:4a:72:a8:e4:cd:e5:33:7c:89:0b:79:
         29:fb:ec:46:e9:88:6b:ef:68:3b:12:d6:69:f5:02:2b:1b:8f:
         d0:b7:ff:e1:a9:23:70:81:51:9d:d3:47:6c:5a:83:07:89:19:
         aa:56:ce:6d:6d:dc:8f:53:cc:69:6b:ce:b4:1b:f4:83:e7:89:
         1e:70:90:42:2b:63:4e:b3:11:fa:fd:b2:72:f5:02:28:b2:9d:
         05:db:bd:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 10:54:59 2026 by rpki-client