Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File:                     vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier:          6veeenkv9weplfh+Obu3RDbGfmB6uIhuMnUjqcTQSAk=
Subject key identifier:   93:58:43:77:F6:34:C5:48:05:1E:B8:25:FD:89:1C:7F:54:CE:0C:BC
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer:       /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial:       01A17E4F79496E9FA394D734DEF8A81004CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number:          118E
Signing time:             Tue 27 Oct 2026 17:01:39 +0000
Manifest this update:     Tue 27 Oct 2026 17:01:39 +0000
Manifest next update:     Wed 28 Oct 2026 17:01:39 +0000
Files and hashes:         1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
                          2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: eXF4Qu9/kJ0gLStwmDn/yYt8OPv6sx+w1/yITxIQEV4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 17:01:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:4f:79:49:6e:9f:a3:94:d7:34:de:f8:a8:10:04:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
        Validity
            Not Before: Oct 27 17:01:39 2026 GMT
            Not After : Oct 28 17:01:39 2026 GMT
        Subject: CN=93584377f634c548051eb825fd891c7f54ce0cbc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3f:22:0f:d4:45:a5:04:ef:fd:a6:1c:3a:1a:
                    13:bb:3e:48:5c:45:6b:be:ee:b5:16:5e:3b:bb:da:
                    b8:c9:cb:13:ab:96:74:1b:6f:4e:a5:ca:96:9a:d4:
                    dc:92:18:63:0b:a3:87:14:06:ef:f0:5a:fa:ec:76:
                    4b:0c:d7:6d:bf:ec:f8:2c:0a:76:39:99:90:52:c8:
                    0a:b2:78:11:61:19:a9:05:a1:e7:94:a5:6f:8b:b4:
                    db:d4:8c:25:f4:f7:40:67:54:db:9f:91:a1:69:37:
                    00:9f:2f:28:8e:21:ce:55:38:d4:c6:0c:fb:6e:d9:
                    16:1b:8a:f7:ba:cf:ce:31:0e:54:fd:0b:1c:ae:3a:
                    a7:3a:da:aa:53:23:0c:ec:c2:7e:be:ed:0a:eb:ca:
                    49:a6:14:12:af:a0:5e:ea:71:7b:26:cd:19:e9:c8:
                    54:16:6e:18:4c:1f:b0:ae:7e:c5:2c:7a:bd:95:31:
                    cc:30:36:e7:e5:6e:73:e6:68:f2:3a:08:87:e6:72:
                    74:0b:f6:10:64:06:ed:0d:30:b7:cd:b9:b1:bc:1a:
                    7d:d3:d3:5a:e8:33:82:e3:1b:ca:2f:04:eb:8b:07:
                    95:6a:47:26:e0:4f:6f:22:c1:6d:64:68:ca:89:7f:
                    27:16:68:8c:cd:4e:7c:27:31:23:7c:e8:36:83:84:
                    66:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:58:43:77:F6:34:C5:48:05:1E:B8:25:FD:89:1C:7F:54:CE:0C:BC
            X509v3 Authority Key Identifier:
                keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:32:f8:db:11:cc:49:e1:61:f6:8c:53:61:06:28:df:db:
         6b:ee:31:01:a3:e8:ff:f6:5f:b1:aa:f2:7b:66:67:4c:fc:65:
         6f:1d:26:56:66:7f:1b:8b:65:70:0c:b3:cb:21:ac:22:43:95:
         41:0c:66:7d:89:67:d8:08:2f:02:99:b8:4f:42:71:c4:92:c8:
         f1:be:14:a2:8d:25:b2:3d:99:95:1a:22:ba:20:c6:24:f1:95:
         b6:e5:99:32:7b:f3:15:da:6e:e7:4e:a3:fd:90:c4:1b:e1:c9:
         c9:19:d9:5f:ff:d9:55:38:c8:8a:fb:a5:00:4a:ce:79:2e:89:
         f5:5c:b7:68:2b:51:d7:8c:ca:e2:cd:17:84:da:2b:e9:b2:f5:
         82:46:4a:bd:66:7d:de:6c:f5:6e:55:6f:eb:86:70:53:80:68:
         8b:0d:6d:58:4b:90:93:37:7d:13:bc:31:3e:f0:ae:86:4d:d3:
         c2:c4:5f:d2:b9:b5:47:9b:3e:1a:9b:38:75:22:91:2a:d5:9d:
         71:f0:c9:12:80:18:56:b9:55:7d:d2:e6:61:71:e1:2d:d3:2f:
         76:d0:ce:56:93:79:09:5e:88:98:62:94:1e:aa:e6:e4:3d:04:
         88:22:89:a4:5c:62:e4:cf:76:92:fe:11:2c:af:57:21:9c:5d:
         13:48:6e:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:42:40 2026 by rpki-client