Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          wEzgSxDb64zDYKllOpz6G9v8uojYToWzQpVDaDq5Ibo=
Subject key identifier:   C3:73:38:71:D3:4B:CA:2A:60:50:0D:23:97:4A:CB:09:31:48:73:ED
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       01A0F1FAA8B6AFD65B64DE7AB6A5FA2CB3B5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          026E
Signing time:             Wed 30 Sep 2026 11:02:11 +0000
Manifest this update:     Wed 30 Sep 2026 11:02:11 +0000
Manifest next update:     Thu 01 Oct 2026 11:02:11 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: qTX8Wdxf2GoF7ISbgYW5N8RXOBOsn4pWLKb37troJfY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 11:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f1:fa:a8:b6:af:d6:5b:64:de:7a:b6:a5:fa:2c:b3:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Sep 30 11:02:11 2026 GMT
            Not After : Oct  1 11:02:11 2026 GMT
        Subject: CN=c3733871d34bca2a60500d23974acb09314873ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:62:84:39:95:07:52:9b:b9:41:90:e5:a1:85:
                    33:21:16:b6:d8:11:e7:d1:be:7b:32:ab:b2:d6:ce:
                    b2:e0:b5:cf:36:64:cc:8c:df:76:4b:10:54:ac:7d:
                    2f:d6:99:7b:c5:23:20:8e:22:58:a5:4a:bb:6a:46:
                    dd:5f:c5:66:69:59:67:6d:c1:78:47:e0:7f:07:1e:
                    76:8c:11:ec:a7:fa:3b:69:c2:84:62:e5:c4:6a:41:
                    79:a4:03:23:ad:da:28:24:8c:89:58:48:c8:64:61:
                    b6:9d:0c:e8:79:07:55:02:a9:57:93:4a:b2:05:89:
                    ad:33:87:22:c1:5d:87:eb:eb:18:47:9c:e4:18:28:
                    ff:bc:4f:95:cc:ff:6b:65:74:10:0d:b7:72:2e:18:
                    09:1d:fb:f9:85:c7:66:85:46:3b:b3:0e:60:6f:82:
                    2a:49:56:78:2e:77:4e:5d:cf:25:3a:8a:4e:d6:95:
                    a1:f3:16:77:30:bc:33:5b:9c:6c:94:d0:37:fa:d7:
                    b2:2f:c4:21:5b:a0:0c:44:21:ab:d4:b1:83:a0:1a:
                    62:d1:ef:71:6c:43:6d:5d:c3:ff:91:fb:7c:b5:ad:
                    47:3e:02:5d:67:d8:da:50:5b:86:7c:f5:3c:a0:9e:
                    ea:c1:f5:57:7e:64:ef:b8:0f:77:28:86:29:3e:51:
                    73:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:73:38:71:D3:4B:CA:2A:60:50:0D:23:97:4A:CB:09:31:48:73:ED
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:00:dc:4f:f2:29:1d:a9:5b:a4:85:6d:2c:b0:c6:4c:41:06:
         c2:dc:e6:07:f0:3d:51:b1:d3:0f:10:d0:1a:e1:74:49:70:41:
         a0:0c:e6:5b:9a:18:5c:70:49:7d:42:1d:fe:9f:af:ee:54:ef:
         19:1c:54:8e:30:15:83:7f:14:49:b7:da:2c:c5:f3:dd:13:09:
         56:5e:69:07:ff:d6:f6:23:d4:dc:0d:82:81:88:b3:e1:74:c5:
         2f:5e:d8:17:77:3f:e5:ae:77:30:57:ee:99:57:d4:55:61:7e:
         9f:fe:28:88:6a:a6:be:65:c6:64:b8:4d:19:2f:ae:a1:70:66:
         87:a8:a9:4c:f7:b9:07:48:01:86:c0:33:3c:dc:4a:de:3c:77:
         63:c2:54:94:45:cd:d7:d5:2f:0b:15:ca:a1:e0:78:bb:69:96:
         7e:61:dc:54:ac:8a:3d:7b:96:54:9d:7f:c5:5b:70:7f:90:f1:
         91:00:94:ac:1f:39:52:9d:8b:0e:73:cf:0e:b8:c5:21:ee:27:
         90:f4:11:de:5c:ef:3d:68:bb:e2:b3:a2:01:ce:d0:ed:d1:29:
         9c:d9:c3:4b:19:8f:5e:89:e5:2d:25:e1:5f:fd:87:58:ff:43:
         0b:df:b6:d5:08:cc:dd:b3:9f:f7:a4:e2:06:33:c4:4e:6c:2f:
         3b:44:9b:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 19:53:35 2026 by rpki-client