Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
File:                     V3bZoLVb1JWhvjxcA_olHT3ouMU.mft (raw, json)
Hash identifier:          iGSwfIkgHNIotLF0XSQhBwKGGvhCvf7ByA6FZ4/8GCU=
Subject key identifier:   BD:FA:E8:17:AA:C7:3E:93:15:EE:DE:96:A3:4B:A2:67:A8:EC:04:4B
Authority key identifier: 57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5
Certificate issuer:       /CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
Certificate serial:       01A0D7964CD3436CA012E83DCF5CCCE35815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
Manifest number:          1630
Signing time:             Fri 25 Sep 2026 08:02:26 +0000
Manifest this update:     Fri 25 Sep 2026 08:02:26 +0000
Manifest next update:     Sat 26 Sep 2026 08:02:26 +0000
Files and hashes:         1: 5O4WJBayXN8-T5sAxCOVSxDJECk.roa (hash: 1xrSDNWEV4bb8nFWycmGbVzjtMS9SCVl02w2LA86yYc=)
                          2: G1Ty4WndBpOGD61GKAs-CwP5c2w.roa (hash: l0eAmw+GJHiz9ePv9I+0pPo3dWb64rnkIyzrqbPQk6o=)
                          3: KJ_UKUidS9-7KSDGLThVTELwDhI.roa (hash: dHBmhOaPvkrCjpSOzFqmoqtogZjlMERH8Hhj6/qx0yI=)
                          4: NuEtWDfqstg6Pj9E1KeSos8IDaw.roa (hash: wtuhCZ4o02QJy1QmedWkrl+M7I3hD/AeGG3bB2Srdj0=)
                          5: V3bZoLVb1JWhvjxcA_olHT3ouMU.crl (hash: j59uF+tPmRMMELd6AOY7P7kjG8YPFRL0OWPxvMCOtFE=)
                          6: kMsITRvtaXC741Y_7AjN_jGGmv4.roa (hash: gbq77+xKSdpHzBJMY7zv47/LbqIo3f6akkibyM35M7Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d7:96:4c:d3:43:6c:a0:12:e8:3d:cf:5c:cc:e3:58:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5776d9a0b55bd495a1be3c5c03fa251d3de8b8c5
        Validity
            Not Before: Sep 25 08:02:26 2026 GMT
            Not After : Sep 26 08:02:26 2026 GMT
        Subject: CN=bdfae817aac73e9315eede96a34ba267a8ec044b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a9:bd:5d:21:d8:82:6e:97:a6:13:2a:ae:cd:
                    c4:42:3b:46:5c:18:25:bd:56:da:c1:f5:fd:b2:6e:
                    ec:c7:09:3d:07:c7:0b:7c:36:d5:88:3b:ef:b7:bd:
                    15:38:cc:a7:01:d5:95:50:9e:0c:7e:9f:43:df:89:
                    b4:ea:27:8c:14:56:0b:e3:3e:21:d7:e2:d2:39:dd:
                    48:5a:43:24:32:cc:fd:5a:89:cf:34:06:31:b1:bd:
                    28:ec:fd:5c:20:e1:fe:9e:dc:05:bd:19:0c:84:8f:
                    62:8f:48:ab:8b:5d:48:67:43:56:b2:5f:3f:8f:66:
                    ad:85:0d:ff:c6:44:ee:8d:02:33:42:23:7f:46:aa:
                    81:1e:ad:d9:84:1f:98:1b:7f:71:57:53:0d:77:eb:
                    e5:76:53:94:a5:ff:e9:59:3a:59:f2:6e:f7:5e:e1:
                    fe:c1:29:7b:be:49:e2:4d:d4:5d:13:77:55:94:80:
                    3b:8a:e2:2d:16:9f:07:61:65:53:a2:15:06:4a:6b:
                    06:c3:21:be:c2:67:ec:ae:e8:38:d4:bf:b8:a8:62:
                    f6:a6:e0:47:0c:28:61:7a:14:a1:68:3f:6b:6e:25:
                    35:49:6f:a7:3b:cb:19:2a:a5:a9:89:3a:46:11:a4:
                    25:d2:47:05:de:d1:dd:55:3b:8d:92:2a:06:d8:50:
                    db:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:FA:E8:17:AA:C7:3E:93:15:EE:DE:96:A3:4B:A2:67:A8:EC:04:4B
            X509v3 Authority Key Identifier:
                keyid:57:76:D9:A0:B5:5B:D4:95:A1:BE:3C:5C:03:FA:25:1D:3D:E8:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3bZoLVb1JWhvjxcA_olHT3ouMU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/5b21e3-3944-4ce6-aaf5-c0ba2f3fc72a/1/V3bZoLVb1JWhvjxcA_olHT3ouMU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b5:99:77:cb:06:e4:89:dc:62:df:05:90:9d:67:30:9d:37:18:
         06:4f:fc:7c:68:09:fb:30:4f:b8:6a:56:b7:51:be:55:b4:39:
         28:94:27:dd:76:e4:69:f2:4e:fd:f5:69:94:41:fc:3e:81:97:
         47:7d:1a:9d:16:1c:17:60:8c:84:b0:a1:6c:5b:74:eb:ae:38:
         7d:27:05:e2:06:04:e9:33:7d:8a:c8:d1:15:a4:cd:6d:80:09:
         ea:b6:a8:0e:8c:41:bb:39:06:71:de:b3:0b:2c:30:b3:aa:45:
         b7:66:41:55:eb:17:16:24:b5:20:c5:6e:9b:ee:b5:05:f0:bd:
         f6:5a:d4:3e:0d:19:ea:24:8f:72:de:56:06:a4:d6:9b:81:14:
         e9:02:d2:09:61:34:da:c4:8f:bd:7d:4a:b5:53:ed:e8:22:32:
         61:20:f7:ba:0e:33:24:71:d9:0c:cf:af:4b:0b:15:ca:2a:9a:
         af:89:c1:e4:c9:4b:93:b0:e1:d6:70:97:0a:88:84:38:c2:93:
         76:89:8c:23:87:f4:aa:0a:ab:8d:3d:c7:a5:49:0a:26:f5:77:
         c7:ae:57:9f:2e:8c:50:97:7d:2f:45:6c:d7:70:3d:65:c5:c2:
         16:c9:c9:49:03:43:ac:a1:cb:0a:0e:9a:28:cf:8f:96:63:33:
         26:80:4f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:47:02 2026 by rpki-client