Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
File:                     vf3CTv25YU3JPpd3TOicHJcw5mU.mft (raw, json)
Hash identifier:          I9LLT3acbzbbuF10jAbRjsNczt2OfYTfWhTCkc225tI=
Subject key identifier:   9C:81:45:6A:13:DB:B6:9A:AF:0C:AD:4C:A5:A9:F6:DC:FB:6C:52:0D
Authority key identifier: BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65
Certificate issuer:       /CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
Certificate serial:       019E1F4780C1A3DABAB3A891894F2AC88055
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
Manifest number:          026A
Signing time:             Wed 13 May 2026 03:00:39 +0000
Manifest this update:     Wed 13 May 2026 03:00:39 +0000
Manifest next update:     Thu 14 May 2026 03:00:39 +0000
Files and hashes:         1: gAWk_30h7y4VaoOZxcAdDFowjFc.roa (hash: odqu0T0Eb3GJ36/dwAalvTu2Dwy1IIPBya2kP6/fxjk=)
                          2: vf3CTv25YU3JPpd3TOicHJcw5mU.crl (hash: EZqdZJzta9Jv7gkVyq5pi4ueDDOPR6MZImVHJWb5AIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 03:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1f:47:80:c1:a3:da:ba:b3:a8:91:89:4f:2a:c8:80:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfdc24efdb9614dc93e97774ce89c1c9730e665
        Validity
            Not Before: May 13 03:00:39 2026 GMT
            Not After : May 14 03:00:39 2026 GMT
        Subject: CN=9c81456a13dbb69aaf0cad4ca5a9f6dcfb6c520d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:83:99:ae:3a:28:d2:a0:c9:31:45:d4:d4:dd:
                    73:80:c5:35:e4:32:2c:b8:22:d4:17:93:fb:e2:d2:
                    6f:ed:d8:fe:c5:57:a1:69:0e:13:0d:b4:df:66:32:
                    72:ed:a3:43:3b:6d:81:c0:43:3b:8b:28:56:27:29:
                    70:c2:83:08:3d:da:86:ef:87:10:c2:57:ab:e1:95:
                    bf:9f:08:5e:8a:2f:fb:46:82:1e:c6:42:81:e1:cc:
                    69:f8:f4:23:99:dc:74:32:c4:cc:38:32:a4:39:6f:
                    11:d4:82:4e:4c:d0:e7:74:a7:f8:13:3b:df:ed:ca:
                    64:81:20:2f:66:26:50:e4:d5:14:e8:b7:cd:8e:40:
                    54:48:50:45:e2:19:d7:8d:a2:67:9b:96:d7:e2:39:
                    5a:6f:41:a4:97:f2:36:90:ef:3c:f7:98:69:c2:b9:
                    da:49:47:59:7d:ec:df:25:b1:02:1a:de:40:50:b5:
                    d6:87:e0:24:03:04:b3:a3:f3:77:1c:2a:39:7a:8a:
                    7f:2a:14:14:99:54:0c:62:7b:1a:cb:fe:9b:c3:73:
                    85:08:be:b3:5a:c0:fe:21:27:0f:15:54:26:99:12:
                    20:36:69:87:30:ee:87:6c:dd:6e:12:15:b5:cc:94:
                    cc:89:3e:da:c4:b2:13:55:a5:48:41:70:d7:37:5e:
                    2f:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:81:45:6A:13:DB:B6:9A:AF:0C:AD:4C:A5:A9:F6:DC:FB:6C:52:0D
            X509v3 Authority Key Identifier:
                keyid:BD:FD:C2:4E:FD:B9:61:4D:C9:3E:97:77:4C:E8:9C:1C:97:30:E6:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vf3CTv25YU3JPpd3TOicHJcw5mU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/978547-e101-4f4a-95f7-4f3a5343a04f/1/vf3CTv25YU3JPpd3TOicHJcw5mU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:bb:51:ac:fb:b0:06:16:f0:ae:59:8e:ec:7d:0c:b9:06:bd:
         21:df:d7:e1:08:c7:a9:ba:1f:f3:13:41:08:d4:02:a7:ee:b2:
         b5:9e:83:1a:38:91:43:a9:d2:e3:c0:80:96:01:8f:4b:3e:21:
         1f:a7:95:a3:37:6a:4b:0d:dd:db:aa:65:ff:93:29:e9:4f:8a:
         b9:56:cb:c6:74:ee:ed:77:5e:27:86:29:73:c1:78:bc:f9:df:
         8b:81:6a:16:91:05:c7:e9:d9:c2:17:5b:b0:e3:a2:c6:77:2d:
         84:ed:09:f2:ef:a8:c6:5e:d7:0d:64:1c:cb:39:f4:4e:9c:ad:
         fb:3e:a1:aa:2e:85:84:1b:c2:17:91:0b:18:ed:8a:85:5f:99:
         02:53:12:30:d9:c4:78:be:af:1f:ac:3a:af:60:47:91:ad:0b:
         44:0c:f0:b6:f4:cf:58:2a:b6:97:64:db:26:ca:e3:85:4a:58:
         a2:4c:5e:fa:4c:f3:88:9a:50:5f:12:bf:93:3f:8b:be:04:7c:
         e3:85:c0:2b:33:60:39:c4:ba:1f:3f:52:8d:31:e4:4c:f3:76:
         aa:a9:f3:37:da:07:0b:26:89:2b:4a:a2:a1:8c:21:25:2c:6d:
         d7:45:f4:ae:9a:31:39:90:dc:c7:b8:34:36:84:51:72:00:bb:
         07:20:33:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:59:51 2026 by rpki-client