Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          iqRlN1TT8MvqfiA+g6cScGa11IDu19DwEFK76r7ZvKU=
Subject key identifier:   6A:2E:E2:79:40:8B:6D:69:CF:89:28:35:24:12:10:CE:72:B8:C9:A8
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       01A10E4CCB709C4980306C9C297126008E9C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          1A8C
Signing time:             Mon 05 Oct 2026 23:01:15 +0000
Manifest this update:     Mon 05 Oct 2026 23:01:15 +0000
Manifest next update:     Tue 06 Oct 2026 23:01:15 +0000
Files and hashes:         1: DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa (hash: J9f3+3+bZCVO4pdaXJk73MjSTfHDh7PUS0/X3EifbYI=)
                          2: FVHHHiStYazQcaMR-6kWtYOxbzs.roa (hash: pJULO84lcrM/sFgnoFFGZDLPLbAu3bVxvObeTRPi3ds=)
                          3: H8dMsf8QtugmggF2iMoFflOsZM8.roa (hash: PZPW581Oe5q4Dva6P0wu0eLhLStSSj+Ttl8NhZ/xkvU=)
                          4: Y4k6hZFhvCoHiB7h05680H5APKM.roa (hash: BGmp+q30ZAASUmPPXR43EIv6VKKM1vrOmCdZ6rG6eeg=)
                          5: ZX0valTvB4XUFb2t2MvkLevuS6o.roa (hash: mqjFEPpJKWkFc8eYY9RB4MA5DD2L0uPMPEokQ0eKgy4=)
                          6: eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa (hash: S3PsF2cp96qNKXQpWngG/gA+/rgdkiompOBnIfGv5D8=)
                          7: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: SuIyfxiSQMdPyXQBcZt4hQWlyn3Au8RApk9dOvNezCY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0e:4c:cb:70:9c:49:80:30:6c:9c:29:71:26:00:8e:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Oct  5 23:01:15 2026 GMT
            Not After : Oct  6 23:01:15 2026 GMT
        Subject: CN=6a2ee279408b6d69cf892835241210ce72b8c9a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6e:d9:8e:36:d3:32:e1:d8:aa:2b:9f:af:9e:
                    d0:3c:e3:24:ee:f6:6e:4e:6a:7e:fe:60:a2:50:f4:
                    b3:9c:58:0c:fe:a0:98:ee:3c:e3:68:c3:e8:73:c3:
                    f3:47:7e:7b:13:09:71:39:92:3f:a1:e9:b8:2e:22:
                    1b:83:17:3c:44:a7:79:c4:66:d7:f3:cf:89:ba:f7:
                    b8:5e:ea:86:01:6b:3b:89:29:1d:c1:b5:8d:c8:7e:
                    48:cc:d2:a3:d7:57:d2:d1:c2:c9:43:47:2d:3b:e8:
                    e2:7c:6f:97:64:1e:bd:9c:37:a9:3f:7e:be:38:b3:
                    f3:18:60:91:76:d0:1b:9f:9d:c3:cb:79:79:0a:c7:
                    aa:4d:9e:21:48:ac:8d:a2:fc:8b:eb:08:d9:5e:de:
                    a3:96:ba:1b:42:c1:96:52:8c:af:10:0b:83:87:81:
                    56:5c:73:70:8d:1f:0c:2e:df:72:9c:95:5c:70:ae:
                    96:5f:e8:23:46:7d:2b:a7:82:de:44:69:a0:db:11:
                    0f:86:53:86:a5:ed:66:c1:e6:84:9d:f6:8d:2c:67:
                    74:ea:13:57:47:79:5d:46:78:4b:28:84:3f:ea:33:
                    5e:76:79:a6:0b:fd:7a:5f:92:5f:92:cb:59:af:a9:
                    2d:36:b2:01:a8:90:5d:c5:11:93:f4:fe:6c:74:74:
                    b9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:2E:E2:79:40:8B:6D:69:CF:89:28:35:24:12:10:CE:72:B8:C9:A8
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:54:5e:7c:39:ad:4a:c1:ee:c6:36:a0:dd:59:75:31:47:11:
         f6:ad:61:ed:5e:50:9c:c2:92:fc:e6:cb:74:61:8e:47:8c:f6:
         7f:0a:10:46:be:2e:c0:81:9e:56:23:cf:ee:7c:2b:a2:e1:59:
         44:8d:d1:ab:80:ec:aa:13:e0:7e:b0:15:7a:f1:8e:60:58:32:
         87:ad:58:3a:cf:7d:81:d8:96:c6:96:fa:67:ca:c5:cd:27:39:
         cc:6d:39:f1:73:78:96:aa:66:d2:6f:28:d2:0a:be:d3:7f:ca:
         6c:d9:d3:17:99:50:b7:91:20:95:b2:c0:8b:95:d2:62:ee:88:
         ac:c6:c3:8c:e1:b7:4d:20:82:ff:5d:99:28:0c:4d:fe:be:f3:
         eb:dc:57:66:12:0a:24:10:42:30:b6:ad:a0:3a:42:ee:8e:c8:
         45:82:ab:a1:1b:f7:d0:a1:c3:20:ba:46:ad:f4:63:62:7a:56:
         97:d9:0d:b3:27:65:fc:87:4e:93:e6:64:78:bd:ca:d8:9a:b5:
         1d:cd:f8:b9:b7:b8:cc:da:63:cc:c9:fd:85:57:77:b8:f6:67:
         e6:7b:f6:19:a9:d3:70:a5:7b:ce:15:e5:89:3e:39:4d:7f:96:
         24:87:c8:ad:9e:6c:7c:64:b4:a8:3e:a3:24:a5:dc:e4:7a:16:
         42:21:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 03:40:45 2026 by rpki-client