Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
File:                     v-x0OQub_hRrfpPpLpiVBCCY5kM.mft (raw, json)
Hash identifier:          g9ch1GxZUbtdbXKlEtKgvXNsMQ+NrvPsHie4KniGO/g=
Subject key identifier:   68:59:75:BD:81:A0:AB:8C:6A:D0:F9:C9:53:F5:80:C4:C2:26:72:88
Authority key identifier: BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43
Certificate issuer:       /CN=bfec74390b9bfe146b7e93e92e9895042098e643
Certificate serial:       01A145A8F13E2E74BE1481350DA6874BE800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
Manifest number:          021D
Signing time:             Fri 16 Oct 2026 17:01:02 +0000
Manifest this update:     Fri 16 Oct 2026 17:01:02 +0000
Manifest next update:     Sat 17 Oct 2026 17:01:02 +0000
Files and hashes:         1: 2uyn9-rt4qXDQnJ_RuBqhpLfNFE.roa (hash: h7g9VGs3XqpFOw06DvMhbAXgfcpKbwQItbjDo8Cg+8U=)
                          2: 51iSXNXbLmvTLItGRvoRtGfr2K4.roa (hash: mxwbG4mvPMTjMzVFCzi4Qb5/YZ7wF3FzdOkJfABIOVo=)
                          3: sNjzoH83uTZc3yqrwLs2fTToJ44.roa (hash: Q8V0Cj1vOvzVJGr92WZPenUgBMLqHvMDwmn67TqH9gM=)
                          4: v-x0OQub_hRrfpPpLpiVBCCY5kM.crl (hash: UTdHG5Jhh2jU8Qf/JPTlTjtOiIdwoFIwR3W6n+OhzC8=)
                          5: wLvmDuYgph_xW_HmKa5TI2eFe8g.roa (hash: qmBeschUBslaG7/fRSSItMAUXj1DcvRjrdWGWCgrhXg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 17 Oct 2026 17:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:45:a8:f1:3e:2e:74:be:14:81:35:0d:a6:87:4b:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bfec74390b9bfe146b7e93e92e9895042098e643
        Validity
            Not Before: Oct 16 17:01:02 2026 GMT
            Not After : Oct 17 17:01:02 2026 GMT
        Subject: CN=685975bd81a0ab8c6ad0f9c953f580c4c2267288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b0:2a:9d:c2:45:f0:60:c4:e7:3a:79:10:91:
                    97:2e:49:85:73:e0:17:7b:8b:38:b7:b8:cb:e3:45:
                    17:44:09:0f:86:66:1e:3c:f6:f3:b4:aa:09:28:0c:
                    74:90:0c:d3:e7:72:14:de:68:1e:4c:85:27:aa:75:
                    d9:2f:d8:31:95:15:f6:72:92:e1:c3:2f:cd:04:1b:
                    1a:de:e2:a3:c5:25:be:05:40:7d:ce:56:49:cc:48:
                    10:a9:f3:87:8d:f2:00:5b:d1:d5:8a:d6:fe:c2:62:
                    76:28:96:d3:1f:80:27:8b:a6:fd:d5:1d:35:4d:39:
                    f4:13:35:a7:5b:ee:e1:f6:4f:24:22:e1:7b:40:56:
                    ef:0a:d1:33:50:f5:e6:41:25:4e:8c:b8:56:c5:bb:
                    1a:d7:3e:af:52:2c:ff:7a:ca:f3:1d:0f:03:df:ff:
                    e6:d0:8b:97:97:77:3b:54:72:fa:e4:e2:49:a2:0b:
                    04:38:fe:14:8c:9e:b6:f6:40:22:23:71:85:a4:66:
                    87:8b:77:fc:eb:87:12:d4:bc:3a:0b:39:20:a7:67:
                    ee:78:15:65:ad:69:56:c4:69:8e:0f:81:21:f2:f5:
                    f3:c2:ca:2a:b8:dd:88:10:6d:6e:14:10:0e:fa:32:
                    13:2d:f2:31:1f:e9:85:da:75:8a:ff:08:29:3d:7b:
                    f7:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:59:75:BD:81:A0:AB:8C:6A:D0:F9:C9:53:F5:80:C4:C2:26:72:88
            X509v3 Authority Key Identifier:
                keyid:BF:EC:74:39:0B:9B:FE:14:6B:7E:93:E9:2E:98:95:04:20:98:E6:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-x0OQub_hRrfpPpLpiVBCCY5kM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/8f064e-09b4-472c-9aa4-52c9af660b37/1/v-x0OQub_hRrfpPpLpiVBCCY5kM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:68:65:12:79:31:f0:a4:95:ff:bc:b2:93:00:bf:ae:56:d1:
         3f:32:89:58:08:ca:b4:f8:f2:2a:9b:64:27:5c:49:b5:e5:1e:
         d6:5d:e8:85:62:a1:64:66:75:2c:2d:cb:24:c0:51:04:bb:d5:
         7a:58:0a:91:02:01:2e:bc:cb:ec:22:0b:44:53:30:40:29:3e:
         00:de:65:33:e5:cb:c2:c1:27:7a:ca:ca:ae:9e:c4:e0:49:4f:
         47:c5:d3:62:04:78:50:ed:7d:bd:8f:98:50:54:89:be:6c:cb:
         4b:1e:ba:45:5d:ef:8c:21:cd:80:e6:25:37:72:48:16:a5:77:
         9d:e9:76:96:8d:cc:fc:00:23:ea:b3:c2:63:2e:cb:4f:d2:a6:
         96:fc:d9:6f:20:e1:6b:b3:94:46:a9:ec:91:47:ef:b2:e9:6c:
         dc:64:be:27:14:51:ea:1f:8b:42:b2:8a:89:4d:a6:d7:17:4a:
         43:b1:56:52:68:c0:74:16:91:4d:4e:23:10:0f:11:1c:5b:db:
         0f:e4:b3:e7:35:af:73:2c:2e:30:32:72:be:b0:c5:54:a2:6a:
         19:1c:2b:6c:37:bb:62:8b:a0:7a:de:2a:c8:12:a2:d6:9e:85:
         08:60:11:07:d0:ed:91:1f:5c:3d:b1:00:57:a5:06:13:ac:0d:
         f9:86:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 17 05:54:37 2026 by rpki-client