Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
File:                     vTZoYo8N950EfsoNmtz8C2aT4wk.mft (raw, json)
Hash identifier:          1ycF3EtpIxTkJZB3z/C4EDdwAfnwWYB67FA1t+PiXYE=
Subject key identifier:   51:32:BE:3E:07:18:20:8F:C9:22:DC:54:E9:BD:1C:AD:24:72:C2:AD
Authority key identifier: BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09
Certificate issuer:       /CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
Certificate serial:       01A15553690F36E572E8F345094BC0F5341E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
Manifest number:          1631
Signing time:             Mon 19 Oct 2026 18:01:32 +0000
Manifest this update:     Mon 19 Oct 2026 18:01:32 +0000
Manifest next update:     Tue 20 Oct 2026 18:01:32 +0000
Files and hashes:         1: 8JHe7AaBIPNauRvBmwgzSlc2Olk.roa (hash: +p1NTN9tpOnp47raavb228o9/rb5/ylv96jkBXGbTHQ=)
                          2: 9IR5KaD-b8BYGhx4OuxnD_0zfnk.roa (hash: nBNjrBaYUqrOCrF+/FR62x6XTWdXCs1MeSMbxH9/U3o=)
                          3: AEunzLWh3gsHOrYJNXhTSiOnqEU.roa (hash: a+6FwmOlMr9S4qz3PdaxvAJ+0nFrNrSk/lgCkrtBWLw=)
                          4: H1emVUICE2XmoUB3lCjzmQnd6Ak.roa (hash: OQbtHQhbOceKidpOYtukQNjTxgTngWpdYul9lp5ld+E=)
                          5: HoTv0sdQLHBWRiUvVVDaAHr5gZE.roa (hash: DIU7NFLXWQYLWOK2aoJC+a/KoOz45jlF8l8WQecGPFM=)
                          6: IADu_a3hKXhr1Hf3Wxg7vE9pXSw.roa (hash: y5tfLHXKWazA7AwML4TwjE9ej8TsMaQiHDfSzy/WlnI=)
                          7: MSktJCjRKQDGOhyyr4mKUY-X9I0.roa (hash: YB2yhni5jmhv5LOS3OBNxLtMUZLfwVnpogHoPFW8JJc=)
                          8: OJCWpsxNbupszt0IJQ7GmjOPuU4.roa (hash: emoVCpaFA4Kcns27J7+DwGk3hNm6T2TOcgu0xzbdja8=)
                          9: Q7sGk7ECwFV3meUPYImkro5mZn8.roa (hash: yPT2eaBvSLQfJfLB4jWSat0V9vFdL71JwO3EoW7qPCQ=)
                          10: QkokzrYDGI69z71ocapb49HcmMw.roa (hash: BPEQLv+L5DDtagemk+MXVy03tCKM+xoA01OlIV162OU=)
                          11: Qpqd5hHnjqSsp3sn5RVpGOfpq2g.roa (hash: usudWUM+M6fpK5Kxq+vyQ1DEZbBsRF3RxCtpG9oZ+NM=)
                          12: TBbYZVnRjlYXHQAtPcfmE7zFNhc.roa (hash: gwN06t/I7Jawt3LQMpSh1ruXZaJYB/QUXUCidscAwp0=)
                          13: ThdY1NGqdEAlbacIpCzIWWjl8-M.roa (hash: VhQ5Tvljs/taZI++HCXLozJ3N8a0YMuM7YHVXeQMk0Y=)
                          14: ZDSoVMaxuelayYkHDT1Cece0cLM.roa (hash: YJ9/iqfEmNXXNYGq5w6yN8VfwFD7csp8PUDUTe1uRmA=)
                          15: _w6riE4OlRprr7MI-yGnTko28Sg.roa (hash: Gwzb8KH6//hbsd3+z42M1mtGTl+aF6C5ToJY0z33ZFs=)
                          16: eeAdU61dAEl487F3Ap6OJwVb3nY.roa (hash: Oh4fcwbJQjn9UMX01F08qYKp+6j3kQnbTRmMOn57gYE=)
                          17: jlOSteO5B4HlUDCHpcrOn1tZyw8.roa (hash: PNBhGbv1owj//wNV6ueV101gABFDOCaZFzVqrXAhf8s=)
                          18: oBNWk0ANrXJFnqpqi8qJWun9bTg.roa (hash: ersLK1F7q7UrsdCXpRyyrcybt+NPvXoXFfuofv9kyjc=)
                          19: pW8tLTuchAg2ENsSB_m1O9IFRMk.roa (hash: DPFg9BfL6u//Ewp7gKsR79UQBua9iboqwpz2s8NPVM8=)
                          20: vTZoYo8N950EfsoNmtz8C2aT4wk.crl (hash: xo25JZsd3bSdzKn/iIniz0Q/KNY1ROXIcZVEcd5ndwU=)
                          21: w3qodbcoa2ZvgoDJeO5ygCI2aAk.roa (hash: LAkyIylHnXBQNUrOi88pTzQDfdyi1/aUJB7HDCmUEbo=)
                          22: wfh-UOAZf8zXcfnGgtljGrgtW4Y.roa (hash: v/XrCw+3zSPx3FlcLzuKPWemLUh1+me4/h0qQHJfqdU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 20 Oct 2026 14:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:55:53:69:0f:36:e5:72:e8:f3:45:09:4b:c0:f5:34:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd3668628f0df79d047eca0d9adcfc0b6693e309
        Validity
            Not Before: Oct 19 18:01:32 2026 GMT
            Not After : Oct 20 18:01:32 2026 GMT
        Subject: CN=5132be3e0718208fc922dc54e9bd1cad2472c2ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:ec:fa:b3:28:1a:9c:ba:00:0b:d9:a7:5f:c6:
                    e9:bc:cd:b5:3f:d4:8d:7c:23:f8:8f:cc:6b:b3:05:
                    da:bb:fc:6a:3f:46:3a:d0:ab:0a:5c:da:64:80:f7:
                    14:ae:f5:0f:63:e1:8f:26:64:e7:84:dc:74:88:ac:
                    68:b0:4e:f0:15:14:85:42:81:61:c8:5a:e3:f4:a8:
                    bc:b3:a4:c7:38:db:fe:24:2f:7f:b3:a4:c0:d3:b7:
                    5c:d4:8c:14:0f:13:44:de:92:11:3b:a1:1f:a3:d0:
                    9e:ef:55:55:8c:e5:93:c9:24:17:6a:92:97:0e:6f:
                    7d:51:43:c2:e5:61:80:2e:98:b5:8c:e2:3c:47:73:
                    40:13:9c:56:4f:80:fb:ac:a3:f9:03:34:ff:a8:6d:
                    c0:59:db:fa:a5:7f:37:f2:c5:69:6e:3b:57:17:36:
                    27:1a:91:9e:df:21:8c:6e:84:e7:95:d0:86:dc:5e:
                    22:48:32:94:3f:15:e1:29:f7:29:e6:df:c1:9a:05:
                    7c:d5:fc:4e:ac:61:80:ac:47:d5:5f:b3:5e:4a:57:
                    88:a9:89:cc:45:9c:64:bd:2f:30:1d:f3:d2:57:97:
                    70:08:45:79:eb:dc:92:53:df:1a:9a:57:48:85:59:
                    51:1b:1d:95:03:e0:8d:8e:3d:61:6b:9f:b4:9b:4f:
                    d5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:32:BE:3E:07:18:20:8F:C9:22:DC:54:E9:BD:1C:AD:24:72:C2:AD
            X509v3 Authority Key Identifier:
                keyid:BD:36:68:62:8F:0D:F7:9D:04:7E:CA:0D:9A:DC:FC:0B:66:93:E3:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTZoYo8N950EfsoNmtz8C2aT4wk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/1b5722-1dda-4df3-a45c-e6bf316c94a1/1/vTZoYo8N950EfsoNmtz8C2aT4wk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0f:58:25:37:f9:5d:e2:db:2d:88:5e:cd:de:ee:fd:48:33:
         89:ae:6c:df:f7:c0:09:ad:87:cb:52:d4:37:d8:85:e3:d4:45:
         2e:13:53:5f:5f:07:05:f2:55:77:84:e2:87:60:8d:bf:e8:aa:
         c9:ff:96:c3:b1:7d:03:e6:79:92:f3:32:94:c9:c8:99:b1:e9:
         39:56:4a:ae:d2:11:d0:22:86:4a:dc:6d:6f:55:35:24:2e:e8:
         0f:6d:a2:03:f8:28:7f:39:99:4a:1b:9b:a2:7b:f3:a1:fc:f3:
         26:cd:7a:f8:a7:86:70:3b:b0:20:40:2a:f6:1d:88:2c:ac:20:
         eb:df:b9:2b:1b:1b:0b:c0:c3:d5:d8:cc:a0:75:09:0e:1d:ad:
         7e:cb:8c:2b:4f:07:06:82:6d:2d:aa:8d:4d:fe:28:55:81:b3:
         39:bd:0a:81:18:76:47:00:b0:0b:44:47:e0:75:db:5b:7a:25:
         c4:64:0f:bc:d9:bf:4a:30:74:b2:ce:10:05:82:65:51:f4:cb:
         14:30:3b:70:97:eb:5f:f9:d9:03:d2:5f:e8:0a:ba:5e:62:ac:
         0a:d3:09:6f:1a:04:6d:aa:29:61:3c:78:33:0e:e6:c8:8d:29:
         fe:14:a4:97:f8:d2:82:8a:1f:16:fd:77:fe:5c:63:3b:1d:64:
         47:c3:52:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:29:53 2026 by rpki-client