Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File:                     vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier:          ecjsEvE73vNHzm0U+Omgu71qkxBU3dVsreT8Vo+6J5M=
Subject key identifier:   51:61:D3:C4:B8:C6:F8:EB:4C:77:4A:10:F9:5F:EE:14:3B:F2:59:54
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer:       /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial:       01A17C5FBED2B35008A13568C034FDEC2B11
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number:          118D
Signing time:             Tue 27 Oct 2026 08:00:11 +0000
Manifest this update:     Tue 27 Oct 2026 08:00:11 +0000
Manifest next update:     Wed 28 Oct 2026 08:00:11 +0000
Files and hashes:         1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
                          2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: N6+tFRqEApkakMMRSdoipgvOf7MVTdfORObxUc+q/GE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7c:5f:be:d2:b3:50:08:a1:35:68:c0:34:fd:ec:2b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
        Validity
            Not Before: Oct 27 08:00:11 2026 GMT
            Not After : Oct 28 08:00:11 2026 GMT
        Subject: CN=5161d3c4b8c6f8eb4c774a10f95fee143bf25954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c0:f7:de:dd:f4:ea:f6:46:89:b4:ac:c2:e7:
                    ef:05:2d:2b:16:39:12:61:33:91:1b:9b:fa:45:8c:
                    3e:8d:91:e2:04:4c:b6:da:df:99:9f:b9:92:8a:ad:
                    15:05:33:10:a7:fa:91:57:61:0e:37:0e:55:e6:11:
                    cd:2a:d1:da:d3:83:2f:5e:bf:fa:4d:60:09:a2:a2:
                    5d:cd:00:21:25:5b:a1:11:c9:36:66:1b:6c:0d:f5:
                    b0:84:bb:00:13:7d:54:e8:db:42:ef:fb:7c:97:e2:
                    78:75:fb:a9:24:70:b8:ae:bc:f8:24:13:ea:30:da:
                    20:08:dd:a2:0e:84:b8:a0:9e:83:0a:74:9b:80:2f:
                    34:af:fb:2d:8c:f6:81:0f:b5:4e:23:e7:8b:2f:88:
                    d2:e2:d6:93:04:f8:5d:07:c2:f4:a4:1f:a8:08:63:
                    53:06:dc:da:46:1e:ae:63:1c:dc:91:54:94:05:1c:
                    35:ad:a6:52:9c:8f:25:15:99:4d:cb:ae:12:21:0a:
                    37:55:61:08:53:c6:91:f8:52:cc:c9:da:39:09:15:
                    89:73:66:9b:92:5d:ba:c9:93:40:de:ab:b8:b7:07:
                    87:4e:23:34:a2:f9:fc:62:e7:ef:b4:18:f4:c3:f8:
                    ba:00:74:4a:5b:02:ec:42:d1:2f:cf:58:68:fb:4f:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:61:D3:C4:B8:C6:F8:EB:4C:77:4A:10:F9:5F:EE:14:3B:F2:59:54
            X509v3 Authority Key Identifier:
                keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:30:9f:42:dc:43:a2:55:45:68:2e:21:1a:75:e0:41:ac:36:
         94:8d:8c:5c:4d:e0:ab:30:90:bf:f3:91:6b:37:d8:5f:22:6c:
         8d:f0:7b:c4:1a:dc:72:d8:d8:85:7a:04:5e:83:9b:00:7a:de:
         8f:74:16:5e:1f:0f:6e:67:e7:3b:d7:56:4e:18:43:9b:46:55:
         e7:6d:31:15:54:0e:57:66:42:e8:99:e9:f6:4b:b7:b3:44:be:
         d1:16:01:99:f7:29:5a:f5:4f:30:ce:b7:9b:70:30:80:1f:ef:
         7b:ec:55:5e:68:f8:b9:e2:eb:d6:48:65:40:37:f9:8d:97:9c:
         ba:cb:d8:c3:02:5c:b8:ca:e9:a9:12:b8:0f:b0:e1:eb:bb:cb:
         29:ab:4f:8b:f9:72:d5:c2:33:d7:36:1f:88:c9:bd:ac:e8:d2:
         21:93:64:23:f1:1b:57:fb:c1:eb:77:1d:44:d9:b0:a8:e2:e0:
         a0:ef:b9:00:93:72:b0:12:2a:67:64:6f:84:c2:52:ce:20:b3:
         15:79:97:ea:d1:8a:ca:db:e8:ee:36:55:c7:da:5d:47:12:20:
         f4:9f:0f:f5:04:21:63:5c:ec:ba:f1:88:15:0f:5f:c6:49:de:
         14:e2:b1:fb:e0:92:11:21:49:72:94:78:e3:22:85:bd:c6:b9:
         c0:1c:e1:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:42:38 2026 by rpki-client