Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
File:                     bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft (raw, json)
Hash identifier:          WwMtBKMVCjgxuS6bv3t5ciwnVyDAKiWeSQr3lcKX1lY=
Subject key identifier:   4B:18:F4:8D:74:04:17:E5:6C:B1:DD:8D:B7:20:7D:E5:B4:59:11:5A
Authority key identifier: 6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74
Certificate issuer:       /CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
Certificate serial:       01A10324091077BF6B83B028770E8BBA4F94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
Manifest number:          1A8A
Signing time:             Sat 03 Oct 2026 19:00:55 +0000
Manifest this update:     Sat 03 Oct 2026 19:00:55 +0000
Manifest next update:     Sun 04 Oct 2026 19:00:55 +0000
Files and hashes:         1: Cr0RQRKzgG4qFNJ_ZHR9LApOt7s.roa (hash: PQ2lV/0rJnBxGzMeVbwosavOwaNa8w1RqDybViJk+zk=)
                          2: I9YhkXL4_92lYMiJza_GlL1PdnA.roa (hash: lMZ99O89kjhiz5I4kqtb1qY19GvOflbfo65zzKkcDAE=)
                          3: bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl (hash: RCisAzgWPjS+UVopIXHwxiIuzHZwJ/POdIB6ecCW8Jc=)
                          4: o_3lAgqXcbFprFYWvyjKWlzU04A.asa (hash: RAbtbDHXzelIU8WOvPD7mFGQcfSBJ3nYLK1egwMGMXo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 04 Oct 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:03:24:09:10:77:bf:6b:83:b0:28:77:0e:8b:ba:4f:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dd1dc4d2eb7bf2a3f08d545755477055143f174
        Validity
            Not Before: Oct  3 19:00:55 2026 GMT
            Not After : Oct  4 19:00:55 2026 GMT
        Subject: CN=4b18f48d740417e56cb1dd8db7207de5b459115a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:94:57:91:d5:48:39:e8:77:ca:1a:d0:0c:
                    f8:2b:19:4e:71:0b:45:b6:29:d5:6d:cd:19:bc:20:
                    f8:2d:05:ca:24:69:a3:67:c1:95:4a:7a:44:9d:99:
                    80:ef:f7:3c:a4:f6:75:77:47:56:c4:58:d3:f2:1f:
                    ba:26:6f:5b:da:ee:53:9e:a4:dc:5a:78:e2:7b:b3:
                    3f:c4:29:11:2b:09:d8:a6:9c:a1:7a:55:85:8f:79:
                    07:4b:0d:f0:0f:fe:6b:7c:d0:a6:f2:d8:8c:76:3b:
                    a6:18:f0:15:0a:27:fc:62:7a:28:ca:a1:8a:17:e8:
                    72:57:64:fc:2f:30:4c:2a:f6:82:a0:9b:d4:00:ba:
                    c1:5e:94:6d:b1:7f:50:d4:af:fe:9c:5e:a0:12:03:
                    60:4e:f5:33:18:00:36:5b:72:44:47:f2:0a:8a:ed:
                    55:bf:b3:4d:e6:fa:c4:04:a3:e0:2d:20:fb:86:95:
                    7f:ac:38:a6:40:c5:a6:ec:45:20:06:88:f2:4d:29:
                    c4:65:a0:10:91:51:10:7c:5a:14:4c:e1:7d:85:a5:
                    39:17:e6:d1:23:dd:33:54:85:da:2e:6a:20:d9:70:
                    cf:5f:89:b9:14:a5:35:58:37:5a:29:0c:c0:25:5c:
                    1f:8e:0a:49:a6:24:7a:6b:1c:23:c9:d3:6e:f3:44:
                    aa:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:18:F4:8D:74:04:17:E5:6C:B1:DD:8D:B7:20:7D:E5:B4:59:11:5A
            X509v3 Authority Key Identifier:
                keyid:6D:D1:DC:4D:2E:B7:BF:2A:3F:08:D5:45:75:54:77:05:51:43:F1:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bdHcTS63vyo_CNVFdVR3BVFD8XQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/bee483-eeb3-4c53-a456-fb4c54b6733a/1/bdHcTS63vyo_CNVFdVR3BVFD8XQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:ab:f4:4d:60:2c:ad:6a:e7:6d:b7:9f:6b:be:0d:4a:7c:c2:
         39:aa:7f:fd:ae:66:6e:7a:e0:e5:91:2b:81:d1:f0:a5:c6:e2:
         7c:32:ad:6a:42:10:94:63:b3:5b:8d:97:35:af:5e:9e:cc:89:
         09:16:a5:df:5c:6d:68:5c:51:53:ef:61:c0:7d:fa:14:9c:12:
         20:f7:a6:81:e1:5b:f3:ae:b6:ee:50:09:34:57:9d:27:da:bf:
         7f:4c:4a:16:52:74:5f:8c:59:9b:93:a3:c7:26:06:fa:82:fd:
         da:f7:64:4e:6d:f9:6d:cd:48:f8:5d:17:49:f9:a7:ec:b2:81:
         7e:dc:ff:91:76:42:5f:46:8c:92:f8:dc:eb:ab:84:6d:84:d5:
         ea:11:5a:b2:71:ec:87:3c:a9:94:88:0a:33:99:99:31:2c:83:
         0e:5a:64:cc:aa:fe:86:34:a9:e5:bc:e5:4d:df:e3:37:5b:78:
         70:85:3d:4c:39:f7:ed:fc:02:6e:c3:ad:be:10:2f:d8:f1:75:
         f3:be:0c:09:fd:d4:7b:1f:e4:db:2b:9f:9d:8a:7b:52:99:55:
         ea:0e:0d:42:79:b7:0d:93:0e:14:92:c1:94:e9:a2:b6:41:bf:
         54:f1:ee:43:fe:09:f7:08:0f:4c:e3:4f:87:df:0e:ed:92:67:
         f1:50:e9:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 00:49:37 2026 by rpki-client