Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
File:                     vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft (raw, json)
Hash identifier:          RWB9B114mxbtaEUxLqzXRkCiSnS5YMx5t0HbqfUHSp0=
Subject key identifier:   0B:20:B7:85:5B:4E:7A:4E:FB:FC:DC:D1:55:79:3C:16:5C:2D:7A:56
Authority key identifier: BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A
Certificate issuer:       /CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
Certificate serial:       01A0EA532CC039A888B9B7A51DCA4F269C35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
Manifest number:          0255
Signing time:             Mon 28 Sep 2026 23:21:54 +0000
Manifest this update:     Mon 28 Sep 2026 23:21:54 +0000
Manifest next update:     Tue 29 Sep 2026 23:21:54 +0000
Files and hashes:         1: 2MkkGiaWngpj3U_s10szg-C2G3E.asa (hash: tRTEi9Wv285mhFd9p2e1WBPXHzXR6/hZi7ygRmANF/A=)
                          2: vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl (hash: rrGE0JaCyH48sCVnHV09qsj8b5YMc230xDo04sIpMy0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ea:53:2c:c0:39:a8:88:b9:b7:a5:1d:ca:4f:26:9c:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd610fb165b27f8aa7621909eb8378ab16fb8d0a
        Validity
            Not Before: Sep 28 23:21:54 2026 GMT
            Not After : Sep 29 23:21:54 2026 GMT
        Subject: CN=0b20b7855b4e7a4efbfcdcd155793c165c2d7a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:a4:5a:8a:26:94:10:7b:f0:87:b2:49:eb:
                    ed:20:d1:10:7f:77:19:b8:e2:78:92:16:41:b9:6b:
                    f5:d1:b8:fb:76:3f:e5:5e:28:7d:b7:bc:5f:d7:d4:
                    0f:3c:19:4c:84:6a:71:ed:c9:c4:95:6e:f5:bb:dd:
                    d7:92:49:ee:59:bd:d4:0a:17:37:5d:03:8f:b7:b2:
                    43:77:4e:6a:f3:b6:64:02:84:c0:89:07:34:19:5b:
                    e6:c3:ad:c4:12:73:1b:a1:f6:07:bf:bd:90:67:76:
                    fb:1c:31:84:cd:6b:70:97:4d:c7:16:e4:92:d3:90:
                    12:48:42:31:67:1a:a6:73:fd:29:0f:e3:7e:78:14:
                    9c:7f:50:14:fa:a1:ed:0f:76:4a:04:fb:05:cc:f4:
                    df:41:fe:aa:af:9d:2f:2f:77:3e:30:85:34:6d:92:
                    38:ec:74:ea:74:c8:e1:64:00:5b:0e:8b:35:ee:8f:
                    8c:cd:31:48:02:86:ad:a7:54:f1:51:dc:09:fb:f5:
                    b6:b2:6a:ea:ed:b5:58:59:2e:8e:46:45:ea:ce:68:
                    7a:5b:bb:7a:c4:d9:53:f1:a9:a4:dd:d3:d0:2a:13:
                    54:c8:c6:6d:4f:5e:dd:2b:df:6c:db:9f:86:21:c0:
                    0b:c5:1b:af:28:e9:87:0a:70:cc:a2:9e:da:11:05:
                    f4:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:20:B7:85:5B:4E:7A:4E:FB:FC:DC:D1:55:79:3C:16:5C:2D:7A:56
            X509v3 Authority Key Identifier:
                keyid:BD:61:0F:B1:65:B2:7F:8A:A7:62:19:09:EB:83:78:AB:16:FB:8D:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWEPsWWyf4qnYhkJ64N4qxb7jQo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/90adc5-5c51-4f92-b0dc-889296916203/1/vWEPsWWyf4qnYhkJ64N4qxb7jQo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:e2:6b:43:91:20:8d:c3:88:a9:e6:ed:58:d2:26:0c:f6:47:
         b1:aa:0c:52:59:ac:84:c0:e5:58:a2:2c:6a:46:f2:e9:aa:f8:
         b9:a2:3e:5b:7e:39:a6:01:bf:6e:1f:da:f9:d6:8c:0a:fa:c3:
         64:48:da:11:7f:c2:7c:66:23:16:d9:08:5d:5a:f4:7e:88:33:
         00:1d:3b:1d:de:2b:02:3e:41:cd:24:cb:39:21:d2:fa:20:ad:
         b6:97:dc:0e:88:5d:85:6a:6c:b0:0a:bd:54:40:55:ec:1d:bb:
         7a:5f:68:cd:78:b2:29:1f:c3:83:54:08:b9:6b:d0:be:47:a1:
         88:1a:48:e2:a9:b8:ca:37:c5:c4:d8:78:71:ae:be:09:35:7a:
         08:d6:0f:18:d9:bf:1a:8d:9f:30:55:58:71:4e:2d:06:00:9e:
         80:fa:6d:36:7a:ff:49:b9:cc:0f:8f:29:52:d7:3c:c8:fd:99:
         a2:9e:1a:da:c0:98:23:b2:f6:aa:e8:d6:0f:4d:91:9d:cc:66:
         15:35:27:f6:25:24:81:a7:b8:09:e1:cd:d0:83:6a:8d:c3:dd:
         2b:53:b5:06:de:66:80:27:21:b1:2d:df:6a:a0:74:10:a3:09:
         6b:52:19:a6:68:7b:1a:fd:0c:b5:a4:f1:e1:e2:0a:35:3f:94:
         b7:b6:0f:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 08:23:50 2026 by rpki-client