Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File:                     vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier:          lS3XYQtPMcAvAIYjLR7vVABo7vhfAD1JUlz71VzaBJs=
Subject key identifier:   9C:32:8C:06:53:E6:98:86:F2:35:DB:3D:57:58:AB:49:3C:96:98:D3
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer:       /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial:       01A1133BDC4286CFCADB437B9B0E49BD5924
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number:          1A8A
Signing time:             Tue 06 Oct 2026 22:00:52 +0000
Manifest this update:     Tue 06 Oct 2026 22:00:52 +0000
Manifest next update:     Wed 07 Oct 2026 22:00:52 +0000
Files and hashes:         1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
                          2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
                          3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
                          4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: XFWHYMi8UPIHdERYhos8F3US850EK88h7M+/2CMt1fA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 22:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:3b:dc:42:86:cf:ca:db:43:7b:9b:0e:49:bd:59:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
        Validity
            Not Before: Oct  6 22:00:52 2026 GMT
            Not After : Oct  7 22:00:52 2026 GMT
        Subject: CN=9c328c0653e69886f235db3d5758ab493c9698d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:30:8b:f1:5e:07:c9:45:e8:79:00:d1:b4:46:
                    44:5f:d4:23:44:9a:15:ad:06:5f:87:00:4b:91:a6:
                    ad:df:89:19:bd:09:79:bf:89:5c:af:36:dd:aa:86:
                    6a:eb:e1:30:6b:3e:d4:35:f4:22:55:a6:45:44:a4:
                    99:d0:03:a3:db:22:49:db:d5:dc:c7:7c:56:ac:e6:
                    ee:4b:00:83:e6:ac:c4:9a:3b:b7:67:a5:49:f4:7e:
                    74:cd:41:f0:a1:61:65:e8:c8:d0:cc:ee:c3:5a:d0:
                    42:db:a8:20:3d:02:74:c5:68:9a:a2:e7:de:9a:ec:
                    8c:59:a3:1c:62:28:b9:f8:b4:8f:81:17:a3:19:13:
                    bd:a7:7d:a1:85:f9:05:d5:d9:4d:a5:ad:b9:ad:cc:
                    f7:37:67:17:db:37:7d:3c:6f:ae:6e:c8:ee:b3:e4:
                    92:c0:9a:0b:05:0a:c2:67:5a:2a:cf:0b:cb:03:2d:
                    15:58:cd:6c:2c:80:73:1d:df:8a:77:b0:56:7b:e7:
                    86:33:f1:e8:e2:c2:67:68:0c:16:c3:83:c0:a6:cd:
                    df:83:db:75:41:c6:55:91:bb:c9:b4:19:a5:c6:93:
                    e3:98:38:14:70:c8:96:dd:9d:f9:fb:6f:1d:9a:a6:
                    3d:bd:3e:6c:34:2b:3a:9b:1d:28:bc:b5:79:e1:38:
                    12:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:32:8C:06:53:E6:98:86:F2:35:DB:3D:57:58:AB:49:3C:96:98:D3
            X509v3 Authority Key Identifier:
                keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:e8:b2:50:ac:9b:4f:9e:04:f2:cc:2d:ed:93:11:97:17:58:
         03:f4:5a:2f:86:c8:77:31:f2:6f:6b:36:f7:ca:6c:0b:1f:d3:
         85:24:07:51:d5:3e:e5:42:73:68:f9:dd:95:54:be:b4:3d:dc:
         68:76:d9:49:44:0f:bb:c2:08:ca:ef:3d:05:c2:6f:1f:ef:f3:
         44:f5:27:77:f2:d4:cc:63:ac:65:32:cc:e9:81:2e:62:8b:78:
         8e:ea:4e:aa:c2:f2:4c:dc:33:5e:c9:0f:94:a5:ef:8a:f6:fd:
         f5:6b:81:f7:b6:93:11:fd:79:8c:25:49:f5:a3:c5:7b:10:80:
         d9:bb:1e:ed:27:33:2c:47:6c:84:ca:0d:9c:c0:52:92:67:b1:
         94:02:e0:c4:9f:64:ff:7b:17:41:bd:e9:19:b6:fd:0a:d7:98:
         7b:72:05:8d:3e:f2:3d:5f:67:14:b4:69:b5:74:b2:c9:00:ed:
         61:2c:9c:58:5f:cd:6d:24:d5:19:9b:b1:62:a8:60:5b:e3:04:
         e6:1c:da:de:19:04:85:fe:20:e1:5e:ef:79:71:16:41:12:d2:
         ff:ca:67:d0:df:a2:aa:62:0d:49:26:13:9c:4b:e1:6f:b6:1b:
         68:b6:a9:b1:23:64:fe:ff:4a:21:63:18:ae:21:a5:f2:c9:fa:
         56:47:37:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 07:49:32 2026 by rpki-client