Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          QPdKMM0R5SuBPp8MpKIotCo2xl9BFPAKgEqzTEKl6Wk=
Subject key identifier:   1D:29:89:EE:06:6F:53:FA:24:1E:2A:B0:64:E5:F3:7A:BD:59:DD:18
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       01A16EA50AAD9F4DF379FEDB346E6ED1BB4F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          1AC6
Signing time:             Sat 24 Oct 2026 16:01:12 +0000
Manifest this update:     Sat 24 Oct 2026 16:01:12 +0000
Manifest next update:     Sun 25 Oct 2026 16:01:12 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: CbfIZzNh74cXLZo6ulnVW2WqNnjMlDx/p1StxzVVR9A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 25 Oct 2026 14:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:6e:a5:0a:ad:9f:4d:f3:79:fe:db:34:6e:6e:d1:bb:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Oct 24 16:01:12 2026 GMT
            Not After : Oct 25 16:01:12 2026 GMT
        Subject: CN=1d2989ee066f53fa241e2ab064e5f37abd59dd18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:94:18:f4:a2:31:21:86:bc:66:29:d2:d9:a9:
                    19:73:90:38:be:30:cd:ea:85:1f:d3:2a:a1:5f:59:
                    a8:9c:4a:a1:b3:95:f7:5f:6c:fe:18:20:59:f5:53:
                    c4:68:e5:0e:03:39:d8:45:71:4e:b5:19:8a:e5:38:
                    43:1b:62:c7:d5:90:59:04:9c:b6:52:de:9d:60:39:
                    44:66:77:2f:60:0b:63:cf:42:c2:0f:b1:0b:c5:f6:
                    a9:0f:35:8f:bb:d7:46:f2:8b:7b:2f:0e:9e:ab:97:
                    11:84:67:74:8b:2e:17:9e:00:e2:bf:76:c4:5f:83:
                    39:97:44:70:61:f2:95:66:35:5b:4e:87:50:7f:35:
                    2b:d7:fd:da:ee:85:7f:0e:d2:0e:66:6f:58:35:f8:
                    79:8c:1c:c2:5a:d2:98:53:be:3c:be:50:6c:ed:44:
                    ff:3b:c6:11:c3:ed:ec:cf:ab:f4:09:13:d0:82:66:
                    69:33:3c:15:4c:69:bb:26:b7:26:8f:21:5e:2d:88:
                    2c:33:ad:a8:b7:de:89:21:b7:8b:da:97:96:3b:38:
                    fa:74:76:c6:70:6e:21:dc:e6:10:9e:19:dd:f9:ed:
                    86:d2:e3:0b:0f:14:40:59:3c:f4:8a:97:9e:d7:e8:
                    5b:11:57:51:51:16:1a:0b:6c:2a:03:c1:f4:a8:74:
                    1b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:29:89:EE:06:6F:53:FA:24:1E:2A:B0:64:E5:F3:7A:BD:59:DD:18
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:65:a7:e2:44:45:3d:01:9d:33:2a:54:ee:5b:d5:31:cd:7b:
         4c:6e:7b:d4:11:ef:19:75:34:61:c1:1a:04:03:07:02:dd:90:
         75:e4:58:67:98:4c:d6:49:c0:17:96:14:cc:15:68:82:47:8c:
         de:3f:b1:79:1a:d1:56:41:02:64:ea:bf:08:4a:eb:4a:e4:eb:
         39:d1:42:9b:d5:5d:af:a2:d7:fa:c5:91:15:6d:d3:39:65:91:
         67:94:62:87:10:96:8a:8a:a1:c5:79:47:65:88:35:9c:2b:1b:
         bc:16:98:d7:04:19:7e:da:bf:48:93:4c:c6:1c:cb:b5:fc:17:
         2f:1b:37:95:3e:d9:22:1f:ae:b5:67:b9:fb:25:44:30:c4:b3:
         36:f4:8a:74:ff:65:77:74:78:e7:b9:00:09:22:0e:75:24:c3:
         15:d3:eb:08:6e:a1:1c:33:6f:4b:dc:0a:03:3b:8b:e5:b0:b6:
         19:ef:de:b2:18:39:a1:c2:fb:89:33:ea:07:53:12:b2:34:33:
         ed:11:13:58:4a:a2:07:bf:09:a4:a8:c5:70:f2:6f:2c:b4:74:
         15:1e:40:67:91:0b:68:cd:b9:25:26:ef:c8:d8:4b:0a:a4:90:
         9f:ab:78:d8:1b:93:d3:01:26:91:ed:c0:e3:b3:f4:10:e0:0c:
         56:b7:56:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 20:45:09 2026 by rpki-client