Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.mft
File:                     viFnCIm4ac00N6nNH6shi444Cg8.mft (raw, json)
Hash identifier:          2UHqzy8lbS8Fc/uLIONDp2xIQJUoNqPEbNTkIMRjtKA=
Subject key identifier:   BA:A6:FF:DE:34:E8:A3:6C:D5:9F:07:B8:39:DE:DE:14:30:DD:D2:31
Authority key identifier: BE:21:67:08:89:B8:69:CD:34:37:A9:CD:1F:AB:21:8B:8E:38:0A:0F
Certificate issuer:       /CN=be21670889b869cd3437a9cd1fab218b8e380a0f
Certificate serial:       01A1592FA1A40FF61B7ACEC13C968A699815
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viFnCIm4ac00N6nNH6shi444Cg8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.mft
Manifest number:          012C
Signing time:             Tue 20 Oct 2026 12:00:55 +0000
Manifest this update:     Tue 20 Oct 2026 12:00:55 +0000
Manifest next update:     Wed 21 Oct 2026 12:00:55 +0000
Files and hashes:         1: W26aEVjZFE9MGtx3eSUXWGkeOHI.roa (hash: UJJ5K0pMeNAy0ZZP+fZKk59NZeigXIwdWmRo5EEsR+A=)
                          2: viFnCIm4ac00N6nNH6shi444Cg8.crl (hash: +dZ7UfDk8ggx66mP9L02IyMcZkNnLvD80mVsCwE7Xdo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viFnCIm4ac00N6nNH6shi444Cg8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 21 Oct 2026 12:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:59:2f:a1:a4:0f:f6:1b:7a:ce:c1:3c:96:8a:69:98:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be21670889b869cd3437a9cd1fab218b8e380a0f
        Validity
            Not Before: Oct 20 12:00:55 2026 GMT
            Not After : Oct 21 12:00:55 2026 GMT
        Subject: CN=baa6ffde34e8a36cd59f07b839dede1430ddd231
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ba:c6:b3:fc:0b:14:ac:ea:1d:40:e5:88:a0:
                    60:0d:18:df:aa:f1:d2:35:28:93:95:8c:7d:a6:be:
                    db:27:74:47:c2:64:5a:62:b3:7c:82:f4:2b:8a:b0:
                    62:38:5b:0d:e0:b2:d1:1c:a2:7c:ee:6b:0a:bc:0c:
                    38:84:4d:1b:af:e9:0d:ce:f7:6a:56:78:d6:a5:4b:
                    45:a0:9f:47:6e:72:50:94:4f:e2:d9:3a:55:98:9b:
                    6a:82:30:17:2a:b1:cc:b4:31:e0:61:6b:c2:23:45:
                    5a:35:0b:53:3a:ae:b6:d2:e1:ad:58:4d:f9:75:49:
                    64:44:55:fe:7f:62:d0:24:71:c7:b1:40:41:4b:ca:
                    2d:e1:d8:ae:e3:9c:37:f7:ee:14:d9:ff:a2:5a:7f:
                    01:e1:e0:b0:6c:24:61:81:c8:b7:f0:4f:d2:46:ab:
                    49:d1:49:94:de:a4:5e:3c:f7:5b:21:1f:ac:85:de:
                    30:d4:0d:09:f3:37:4f:72:d9:5d:79:03:73:b9:1f:
                    19:c5:b3:a2:dd:13:28:56:0d:22:4f:92:21:ce:c7:
                    5e:e8:8b:7b:aa:76:4e:f2:a8:d5:a7:16:de:6d:0f:
                    7a:74:12:b0:46:e6:4b:4b:db:a3:63:51:4c:5d:7a:
                    bf:54:87:a8:6c:dc:fb:9b:1a:ab:70:7b:7f:6a:bb:
                    17:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:A6:FF:DE:34:E8:A3:6C:D5:9F:07:B8:39:DE:DE:14:30:DD:D2:31
            X509v3 Authority Key Identifier:
                keyid:BE:21:67:08:89:B8:69:CD:34:37:A9:CD:1F:AB:21:8B:8E:38:0A:0F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viFnCIm4ac00N6nNH6shi444Cg8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/818142-c138-44bb-922b-d305730b5368/1/viFnCIm4ac00N6nNH6shi444Cg8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:bc:51:f5:b5:b9:02:0d:54:db:06:36:e3:ac:10:9a:d2:1f:
         35:b2:8b:e8:ea:a7:17:e5:f6:f4:79:e3:87:52:52:3d:de:de:
         03:3d:03:b3:41:31:37:54:3e:0b:50:26:e3:2b:8a:5b:a0:33:
         a2:5b:91:b3:b8:e4:ac:45:4f:08:e8:62:43:b7:d6:ef:14:34:
         27:1a:b4:c4:cf:9d:91:c8:f7:7d:7b:5e:bc:83:d9:8b:d3:ca:
         cf:b1:bf:c8:41:88:66:48:11:b5:11:5b:81:67:c0:6e:eb:06:
         06:da:40:8c:cf:ad:e3:3c:df:12:a1:b9:7a:e2:dd:db:09:e8:
         ec:8f:fb:9c:92:c5:f4:c5:4d:ec:97:e3:4a:fc:94:83:92:73:
         7e:83:dc:bb:85:52:b7:5e:06:5e:ec:de:28:00:9f:e0:c8:aa:
         84:d6:0f:ad:46:2d:d5:75:ea:89:0b:34:a9:9f:f4:a8:0c:a2:
         7f:e3:18:6b:ba:8f:21:79:dc:c1:01:f6:ae:03:4a:89:b6:6a:
         d7:90:a2:ac:3d:38:8f:75:3b:d8:be:62:ee:18:53:ed:2f:23:
         06:b5:cd:b3:66:87:22:08:90:f5:28:77:f7:b2:3a:e6:71:8d:
         a5:e5:f8:0a:5d:ec:d3:f0:a2:f4:2d:19:5a:10:2b:9e:d4:31:
         5a:f2:f1:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:18:28 2026 by rpki-client