Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
File:                     vaYQQ1QkhQlrDfQ1HMDal383cN0.mft (raw, json)
Hash identifier:          ruUjdr5r+9qEVhtdUa+iofw87LfRl6l2KTfjWUWpTvs=
Subject key identifier:   83:65:E4:26:EB:46:DB:D6:17:BC:23:2D:1D:70:20:C8:30:0D:4D:EC
Authority key identifier: BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD
Certificate issuer:       /CN=bda61043542485096b0df4351cc0da977f3770dd
Certificate serial:       01A1412805C01DC5E82F6B255D0899E89653
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
Manifest number:          1AA9
Signing time:             Thu 15 Oct 2026 20:01:44 +0000
Manifest this update:     Thu 15 Oct 2026 20:01:44 +0000
Manifest next update:     Fri 16 Oct 2026 20:01:44 +0000
Files and hashes:         1: RP8MgkKEHlqeBOnUZe0z_Y0SQKk.roa (hash: Ptm5tesi9injee8NYFqMkun/MxMMcArohdb5avPOa5I=)
                          2: vaYQQ1QkhQlrDfQ1HMDal383cN0.crl (hash: zhI/qUF/+YM9ljPrQI1D9rnZkKmP9mPpzfboelY8Bqs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:41:28:05:c0:1d:c5:e8:2f:6b:25:5d:08:99:e8:96:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda61043542485096b0df4351cc0da977f3770dd
        Validity
            Not Before: Oct 15 20:01:44 2026 GMT
            Not After : Oct 16 20:01:44 2026 GMT
        Subject: CN=8365e426eb46dbd617bc232d1d7020c8300d4dec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:69:f2:48:11:a7:a0:04:c5:f0:4b:63:df:f3:
                    8e:75:1c:36:31:be:4c:a5:3d:90:03:5f:85:c2:db:
                    0b:cb:32:43:0b:44:55:33:79:a3:bd:f1:15:e4:73:
                    d3:1c:c4:81:e6:ad:d1:93:d2:72:47:c0:3b:5a:f8:
                    a8:06:ba:dc:47:24:90:84:62:96:98:c2:23:82:9f:
                    a0:d6:3c:e7:e2:34:4b:e8:82:c8:ba:03:e8:80:3b:
                    0b:28:c1:f6:72:4b:fc:27:47:f4:8c:1a:12:a1:30:
                    d4:f2:25:7d:c3:fb:bf:80:19:5e:bd:c3:43:7f:dd:
                    4a:35:ce:61:2e:78:65:4f:ae:e3:6a:e2:e3:33:74:
                    33:29:78:6a:58:0b:a8:5d:f6:47:ed:23:d5:6f:05:
                    0a:b5:e3:2d:b3:dd:8c:9f:c9:b8:a8:46:11:44:1b:
                    20:ff:08:d5:b2:f3:8d:d1:03:c1:56:37:02:eb:26:
                    1b:ef:8f:f8:cd:93:f7:7d:fe:2d:b2:a4:0c:ec:72:
                    2e:c9:be:b6:a2:df:38:99:54:a9:20:63:b5:08:61:
                    87:0e:94:46:77:c1:a5:61:76:0c:22:d1:89:1c:89:
                    47:b7:35:ab:f5:b6:a9:a0:c8:9b:2a:bc:cf:00:da:
                    fa:b1:8f:1c:fb:8c:3c:61:49:90:20:bb:cc:89:2f:
                    86:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:65:E4:26:EB:46:DB:D6:17:BC:23:2D:1D:70:20:C8:30:0D:4D:EC
            X509v3 Authority Key Identifier:
                keyid:BD:A6:10:43:54:24:85:09:6B:0D:F4:35:1C:C0:DA:97:7F:37:70:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaYQQ1QkhQlrDfQ1HMDal383cN0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/196689-2db7-4e80-b92c-3a2ad88deade/1/vaYQQ1QkhQlrDfQ1HMDal383cN0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:8f:85:f1:c3:ca:1e:2e:4d:65:24:ee:85:5c:71:1b:3b:d4:
         83:ac:72:3c:24:15:a3:17:b4:5d:66:bb:cf:ef:41:eb:f1:d0:
         71:a2:aa:e2:a5:7f:92:8a:82:2a:00:68:f6:09:50:85:b9:5f:
         57:6b:5f:c4:6a:88:81:01:c3:75:44:de:7a:b2:e2:3a:d1:2c:
         f1:e9:bc:b6:be:fa:56:87:b6:dc:f5:a6:de:ba:31:16:56:8c:
         35:59:42:e7:1a:5f:60:44:ed:c7:1c:1b:71:b1:8b:6e:d4:5b:
         84:e7:4f:20:c9:9d:30:bd:6a:8a:19:8b:83:b6:95:c6:cb:cc:
         bc:aa:9a:80:d5:38:8b:79:c1:b4:c7:34:a8:60:ab:69:39:25:
         94:8e:fb:62:78:cf:99:17:f0:cd:c9:88:e2:fe:c7:b4:41:5a:
         37:26:91:04:da:1c:f8:2a:ca:85:34:21:fb:04:76:0f:c9:6c:
         bf:16:00:a5:79:bf:39:81:c1:df:02:5a:f9:19:1f:fe:e1:73:
         ec:93:56:bd:46:9b:e3:52:ab:18:9e:5f:9e:b3:51:ff:0a:27:
         a9:3e:42:dd:34:c5:7e:9e:99:7c:3b:5d:af:e8:05:4f:f3:29:
         97:9b:09:4f:73:7f:23:46:aa:3b:c7:5b:11:ea:ed:ea:a0:5d:
         68:7f:46:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 16 02:39:00 2026 by rpki-client