Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File:                     _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier:          cowlYExn+Fl7vMJ4Xp7zL+xIR7cJzhGsJO9ZqrIZXQI=
Subject key identifier:   91:AF:A3:D2:99:33:F2:BE:DB:16:5B:24:A5:33:7F:2D:B5:0B:3C:94
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer:       /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial:       01A11D511BA4EB48F56D6BCC0FA1E2A6A51D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number:          042E
Signing time:             Thu 08 Oct 2026 21:00:17 +0000
Manifest this update:     Thu 08 Oct 2026 21:00:17 +0000
Manifest next update:     Fri 09 Oct 2026 21:00:17 +0000
Files and hashes:         1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: Ay//rlOLmUpMsnTEA+Geni1pUbBmZo6orLqBxoMUpbQ=)
                          2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
                          3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 21:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1d:51:1b:a4:eb:48:f5:6d:6b:cc:0f:a1:e2:a6:a5:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
        Validity
            Not Before: Oct  8 21:00:17 2026 GMT
            Not After : Oct  9 21:00:17 2026 GMT
        Subject: CN=91afa3d29933f2bedb165b24a5337f2db50b3c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:85:9d:24:26:1a:c3:5b:84:de:d6:f2:82:eb:
                    12:ee:b0:29:ab:30:9e:79:9a:5e:f0:68:1a:c2:b4:
                    65:33:6d:79:85:b8:9f:64:08:4f:2c:62:6e:b3:df:
                    22:cf:d1:d9:e5:56:ee:3f:24:89:a2:d3:a2:a6:6a:
                    48:a7:9b:07:3b:58:a8:bf:22:30:83:d5:be:56:ee:
                    5d:8f:fa:fa:0a:6e:2e:c3:f0:b5:eb:dd:77:0b:3a:
                    74:dd:3b:4f:42:59:c1:3c:00:b3:b4:09:f9:88:64:
                    14:b2:98:b9:02:1c:2e:07:f4:dd:90:e7:75:d4:56:
                    32:3e:76:9d:a7:28:7f:3e:3f:ce:d2:a2:7d:93:26:
                    e0:2d:4b:f3:3f:4c:ee:43:d2:c3:d7:fc:bb:a1:7f:
                    7b:60:40:1c:72:4c:d0:b7:75:c8:69:65:50:d4:9f:
                    f8:b2:0a:79:cc:5a:3b:23:4d:64:0b:a6:38:20:77:
                    85:8a:66:4a:12:e9:53:8d:4a:ab:49:06:7e:de:f1:
                    0e:00:e9:45:dc:11:c9:1a:ec:8f:34:9e:37:68:c3:
                    44:8c:c0:ba:d6:25:6b:6c:b0:49:a1:58:43:2e:84:
                    c9:b3:8a:70:62:18:c9:4d:fb:be:fd:ea:c2:f9:2c:
                    8c:4f:3a:a5:04:18:47:cf:2e:5b:31:e5:e8:76:65:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:AF:A3:D2:99:33:F2:BE:DB:16:5B:24:A5:33:7F:2D:B5:0B:3C:94
            X509v3 Authority Key Identifier:
                keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:22:52:23:55:8b:c2:a1:50:2c:6b:66:ce:98:6c:72:91:5b:
         20:8d:64:64:f7:af:2d:13:1f:ae:4d:2e:1d:cc:50:44:0e:13:
         b4:b4:6e:1e:e2:ab:b7:33:01:5c:41:31:dc:6c:8f:4a:59:06:
         51:5c:07:95:83:5a:98:cc:56:8e:3c:bf:a8:88:53:39:94:6a:
         31:39:f4:44:9c:b2:7c:17:43:cd:3c:b1:e8:9d:4e:53:c2:9a:
         0d:a4:96:2f:84:71:6d:df:bb:06:08:21:30:1d:4c:e4:1f:97:
         83:dd:6e:58:9a:34:c2:66:56:a7:b1:c2:b5:1a:d9:c8:16:d6:
         e2:07:c4:58:95:89:a5:9b:0a:2d:a5:56:3c:85:4a:92:f5:74:
         65:b3:07:37:87:86:cd:8c:65:de:b2:a3:75:57:ea:a2:04:89:
         88:8a:ca:69:9e:70:aa:cf:d2:46:1b:eb:78:65:05:64:fd:8c:
         f9:ee:cb:71:1f:7f:b7:bb:a3:e4:fe:e2:af:c6:f1:30:be:03:
         65:d9:b1:93:2e:57:9b:d8:98:72:c6:79:1f:2f:28:ad:cc:8f:
         01:e9:fe:47:04:58:7e:b0:8f:18:a1:5f:d7:a9:91:b3:e2:28:
         dd:1b:8f:f8:ce:0c:4c:d1:77:df:1f:4b:46:8e:41:98:2c:88:
         4c:7f:c4:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 08:33:05 2026 by rpki-client