Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
File:                     vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft (raw, json)
Hash identifier:          QZqirnakpxKDTEOQkVU3iTsdtH+xjGp8IeyoAGaPt3g=
Subject key identifier:   CB:00:4C:AD:B3:76:21:D7:DB:1C:91:8E:4F:13:1F:B4:17:9E:D8:5F
Authority key identifier: BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13
Certificate issuer:       /CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
Certificate serial:       01A071E03EACE8D6FA7F81CC35BE2BE45921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
Manifest number:          1A3B
Signing time:             Sat 05 Sep 2026 14:01:56 +0000
Manifest this update:     Sat 05 Sep 2026 14:01:56 +0000
Manifest next update:     Sun 06 Sep 2026 14:01:56 +0000
Files and hashes:         1: DJb3q9QP0vjgpfyVEHNjpwFGK0o.roa (hash: J9f3+3+bZCVO4pdaXJk73MjSTfHDh7PUS0/X3EifbYI=)
                          2: FVHHHiStYazQcaMR-6kWtYOxbzs.roa (hash: pJULO84lcrM/sFgnoFFGZDLPLbAu3bVxvObeTRPi3ds=)
                          3: H8dMsf8QtugmggF2iMoFflOsZM8.roa (hash: PZPW581Oe5q4Dva6P0wu0eLhLStSSj+Ttl8NhZ/xkvU=)
                          4: Y4k6hZFhvCoHiB7h05680H5APKM.roa (hash: BGmp+q30ZAASUmPPXR43EIv6VKKM1vrOmCdZ6rG6eeg=)
                          5: ZX0valTvB4XUFb2t2MvkLevuS6o.roa (hash: mqjFEPpJKWkFc8eYY9RB4MA5DD2L0uPMPEokQ0eKgy4=)
                          6: eGujzhF-Jb5JLWOfYhW-VM1JmXk.roa (hash: S3PsF2cp96qNKXQpWngG/gA+/rgdkiompOBnIfGv5D8=)
                          7: vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl (hash: 5spY59e6kKw47DsibyUVfa/wEq2ZVvBq2Qa9c/Cn7Mg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 10:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:71:e0:3e:ac:e8:d6:fa:7f:81:cc:35:be:2b:e4:59:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcce590711ae7fcb016eeb7376b0a7fc7661cb13
        Validity
            Not Before: Sep  5 14:01:56 2026 GMT
            Not After : Sep  6 14:01:56 2026 GMT
        Subject: CN=cb004cadb37621d7db1c918e4f131fb4179ed85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:42:9c:ca:da:91:8b:f6:3a:10:c1:f6:2e:07:
                    39:bb:06:12:39:22:96:a4:c3:f6:2e:99:d7:9e:49:
                    b5:95:b1:4d:d7:51:c4:25:11:0f:f5:f3:45:20:d4:
                    c3:38:9b:e1:e0:56:cc:b3:b6:c5:12:f6:b6:41:4a:
                    0a:38:0b:53:98:74:0b:f7:09:b5:51:5b:43:2d:ff:
                    42:86:be:85:5f:36:e8:dd:04:a2:0b:1b:68:16:8b:
                    49:fe:f9:9d:57:18:7f:a1:3c:03:23:a9:b6:64:9f:
                    58:b9:ac:d8:da:52:c5:a7:01:01:bc:a5:61:40:5f:
                    2e:5f:fa:3a:5e:de:b0:13:8d:a7:a1:16:7c:e3:3e:
                    de:8b:03:69:f7:db:ff:ee:8b:52:08:3b:45:dd:aa:
                    3a:95:d6:16:83:b2:0d:92:8e:1e:5e:b6:50:bf:cc:
                    06:8d:1c:6e:f2:35:16:1e:f2:c3:cb:35:9f:f7:68:
                    01:18:f6:38:b2:b0:30:49:1c:11:83:b4:d4:4d:d3:
                    4e:30:f9:52:20:be:dc:73:55:2c:ff:4e:3c:d1:4d:
                    a3:22:57:d6:7b:2c:b3:53:38:4a:6f:0a:f2:bd:82:
                    56:39:3c:ae:93:f3:e6:66:6b:1b:cb:aa:e1:11:d6:
                    2e:ab:80:45:bc:e0:be:80:86:4b:5a:8e:d4:20:51:
                    81:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:00:4C:AD:B3:76:21:D7:DB:1C:91:8E:4F:13:1F:B4:17:9E:D8:5F
            X509v3 Authority Key Identifier:
                keyid:BC:CE:59:07:11:AE:7F:CB:01:6E:EB:73:76:B0:A7:FC:76:61:CB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM5ZBxGuf8sBbutzdrCn_HZhyxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/ac6b91-edaf-4486-934e-05db497ac455/1/vM5ZBxGuf8sBbutzdrCn_HZhyxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:13:17:2d:3f:6e:06:86:0c:fa:b5:c6:c5:16:64:b0:65:53:
         98:d3:2b:75:53:14:06:eb:a6:05:1b:9d:f8:03:22:43:09:be:
         9b:90:f4:09:39:43:5d:f9:de:fd:e0:1d:f8:a2:65:90:f9:c1:
         3d:52:2b:20:6e:1d:11:85:39:51:6e:a9:71:b4:59:cf:80:0b:
         96:ca:94:10:2b:5e:4e:fd:11:b9:97:8f:01:a8:9b:c0:bf:3f:
         c9:7c:03:b3:ba:2f:99:75:38:d5:14:27:07:09:c6:34:4f:9b:
         e0:6d:c0:49:92:0c:27:b6:5b:06:e5:32:7d:47:77:6d:54:6d:
         74:4c:a1:f7:5e:70:61:03:f5:c8:70:a7:dc:2f:30:c4:0b:79:
         4d:5e:08:7f:2c:15:b3:af:15:8c:68:16:f1:da:d7:a7:e8:3b:
         c3:14:5b:26:84:94:1a:a3:37:4c:80:fa:f6:f0:09:42:fe:8b:
         94:0a:59:44:63:44:80:34:ed:96:a5:51:d2:14:7c:e3:39:2f:
         e2:19:42:30:6c:db:37:fb:1c:46:63:85:fa:3c:42:3e:5e:87:
         ea:c4:4d:59:34:42:84:ee:8e:44:4f:c3:8d:4a:95:f2:62:10:
         b2:08:e6:c0:05:b5:ac:d9:79:d3:6e:ec:61:16:c0:ed:5b:e6:
         84:76:b6:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 18:36:20 2026 by rpki-client