Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
File:                     v_9Blln1TfN4eStgLACSw1OYjsg.mft (raw, json)
Hash identifier:          rxupZXReZRmPQ4stNk+EPTfKyanCJsmu0TlvviTohIY=
Subject key identifier:   A5:7B:DD:CD:B8:DD:6B:6F:E3:BF:D6:81:D2:3E:E4:B5:C4:A0:CB:5B
Authority key identifier: BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8
Certificate issuer:       /CN=bfff419659f54df378792b602c0092c353988ec8
Certificate serial:       01A0EFD4C1D6F9373DE1814823D038148C3A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
Manifest number:          0EC1
Signing time:             Wed 30 Sep 2026 01:01:32 +0000
Manifest this update:     Wed 30 Sep 2026 01:01:32 +0000
Manifest next update:     Thu 01 Oct 2026 01:01:32 +0000
Files and hashes:         1: 5POQaq2FIBregxvYNKnQ0LZ68eA.roa (hash: 3ZBwuPJNCoHXmfqEKRXgDso3hRBamUObQVJiGRHt5+M=)
                          2: qdDk0UCI7yKoHISVxuAvDt7ubkY.roa (hash: fOL7bC2/gVsejbMGdZIPK51yUoyiGdvxfMzybuHtZ1c=)
                          3: v_9Blln1TfN4eStgLACSw1OYjsg.crl (hash: o7rpMex8P5cTRseYCtN+r7UDes/F9U2k9rSgodSr6pc=)
                          4: wWjX3G1u8VVJrZxUXxszdZPmLOQ.roa (hash: r4GR8IEEVmZoiDV/k0vnJZnERNrwiOO08DpOlDa1gSM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 01:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:d4:c1:d6:f9:37:3d:e1:81:48:23:d0:38:14:8c:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfff419659f54df378792b602c0092c353988ec8
        Validity
            Not Before: Sep 30 01:01:32 2026 GMT
            Not After : Oct  1 01:01:32 2026 GMT
        Subject: CN=a57bddcdb8dd6b6fe3bfd681d23ee4b5c4a0cb5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:af:98:5f:92:71:78:ce:b0:4a:d8:c7:97:fa:
                    4d:cf:7a:9b:dc:82:15:48:3b:8b:e0:49:39:eb:a8:
                    ad:2f:28:68:b4:93:f2:de:01:a7:67:3f:76:b3:9a:
                    1c:26:25:c5:c3:e1:36:63:31:26:84:53:fd:51:dc:
                    f6:77:0a:62:07:b3:ee:c4:7c:6a:ca:b2:70:f4:20:
                    86:19:56:6c:28:71:9e:bb:43:c5:e0:48:c3:5f:63:
                    43:0b:df:b6:92:43:32:4e:a6:ce:26:48:2c:a1:56:
                    29:8f:0a:88:5c:ab:eb:ac:ac:37:dc:29:f9:55:e1:
                    80:ef:8f:81:8d:f6:5a:86:1d:47:15:52:78:21:5a:
                    db:c6:a8:81:c8:c9:92:6a:62:5e:aa:0c:7e:3f:4d:
                    47:14:e8:3d:21:65:41:c5:62:8e:ba:0a:12:22:fb:
                    c8:1b:b1:34:d0:60:a4:85:67:86:1a:4d:26:11:11:
                    87:5e:66:93:41:8b:18:c5:00:5d:94:2c:b6:70:37:
                    93:63:45:d0:a9:80:d5:9c:26:2e:2c:e5:aa:54:78:
                    fa:3f:82:6a:34:d7:15:18:ec:08:64:a2:da:df:01:
                    19:ec:b3:74:1e:b0:dd:d9:45:0e:e7:bf:63:34:ea:
                    8a:c6:16:28:61:9c:98:fb:15:c5:61:38:b2:c3:b4:
                    d7:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:7B:DD:CD:B8:DD:6B:6F:E3:BF:D6:81:D2:3E:E4:B5:C4:A0:CB:5B
            X509v3 Authority Key Identifier:
                keyid:BF:FF:41:96:59:F5:4D:F3:78:79:2B:60:2C:00:92:C3:53:98:8E:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_9Blln1TfN4eStgLACSw1OYjsg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/08/2ba138-1737-4714-960a-70bdf15dd619/1/v_9Blln1TfN4eStgLACSw1OYjsg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d8:b2:a0:af:71:17:b5:1b:85:b0:13:4e:55:74:b6:18:82:6f:
         9f:ef:79:f6:c7:e7:f6:21:6e:9f:52:1d:2d:ac:97:bb:bd:98:
         c5:8d:86:da:be:98:cd:81:a5:34:76:78:1a:59:d6:e0:33:50:
         3f:d1:96:79:3a:ab:bf:1d:25:08:a7:b4:48:61:c8:83:74:b2:
         7d:3e:0a:e4:82:20:d0:8f:ae:f8:5c:35:2c:27:c9:be:81:b4:
         4b:2f:21:f6:84:b8:e0:c7:e0:79:ca:4b:49:2a:10:5e:65:4b:
         9d:d6:3c:20:e3:c5:ff:ec:3a:50:97:c0:97:6a:5b:40:0c:b3:
         80:86:c4:38:dd:3f:9e:0b:97:07:4c:82:8d:d9:2b:e6:9b:8c:
         8e:a2:0f:cc:04:28:c9:d9:30:b7:22:54:dc:49:4c:b1:f1:5a:
         35:09:61:c2:24:d9:6a:cd:bd:80:d3:1f:7e:12:26:b9:f4:b5:
         40:73:a4:a1:aa:ee:cb:93:61:76:f2:d2:0e:b6:98:e2:cd:87:
         7f:19:2b:f8:43:70:56:e7:93:ce:e8:06:49:04:29:9d:e3:57:
         97:8b:d8:4d:17:d4:6d:1f:83:1c:43:ec:2b:e3:b5:61:fb:87:
         4a:6a:77:44:cd:54:a0:e3:a6:67:22:31:d2:bb:c8:39:ee:a9:
         87:fe:e3:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 09:34:57 2026 by rpki-client