Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
File:                     vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft (raw, json)
Hash identifier:          sd7jFkzsJTVx/5l16DaBSyHzonG3OR2NVbU3kO0R+TU=
Subject key identifier:   DB:F9:B4:72:D9:A9:8D:0F:95:68:25:82:C7:80:71:D7:B5:9D:6B:61
Authority key identifier: BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F
Certificate issuer:       /CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
Certificate serial:       01A18676244CEB75516F4AD2C8EAAF873201
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
Manifest number:          1ACA
Signing time:             Thu 29 Oct 2026 07:00:51 +0000
Manifest this update:     Thu 29 Oct 2026 07:00:51 +0000
Manifest next update:     Fri 30 Oct 2026 07:00:51 +0000
Files and hashes:         1: 1JOaqNM9A3nCFLqF-iNDuqob3ts.roa (hash: qr9TO0T1nkwwLSyPbZ6XdvaujTVE8opngK+YtQym/kk=)
                          2: WeUtp_Wo1t_B3_kDLfw7hscjYRk.roa (hash: GpBHGUwjt/PtYZx7u3aJW4dofQfCg23mdeFjGaXOPrA=)
                          3: fDiCNg82Ceatc0-Kb7qP2rEq54Q.roa (hash: OXn/GJfiGWG/hkB4epjpbpxfqCnDFVPW115sflUVJ1Y=)
                          4: vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl (hash: 2iUhvzBNPhdtL+H3rA4o8HY2+VYZuMSnJvmXZ7QKhtE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 30 Oct 2026 07:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:86:76:24:4c:eb:75:51:6f:4a:d2:c8:ea:af:87:32:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc87b9cfc3ee0c44965ea209c04fd8e8f48fa42f
        Validity
            Not Before: Oct 29 07:00:51 2026 GMT
            Not After : Oct 30 07:00:51 2026 GMT
        Subject: CN=dbf9b472d9a98d0f95682582c78071d7b59d6b61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:f3:44:29:8d:52:1f:3d:9b:c7:6d:e1:3b:03:
                    b1:43:20:3a:6b:f7:5a:2b:e9:61:20:3d:86:e0:f5:
                    be:d9:9b:08:76:df:81:df:b2:60:c9:f2:cf:4a:bc:
                    67:a4:40:f6:ff:ce:f0:f9:e0:08:73:14:d8:c0:bf:
                    ae:cd:11:3f:29:1d:96:4f:ce:a0:9f:4f:90:95:28:
                    45:75:fd:0d:f8:b3:04:4a:fd:e1:7e:e3:06:a3:8b:
                    1b:f7:e2:f0:88:da:23:60:4d:3f:b2:25:6d:4f:ca:
                    7d:4e:29:42:c8:1a:49:e8:65:39:bc:99:88:33:0b:
                    d5:d7:09:6b:e8:90:46:19:e0:97:a9:68:35:2f:e9:
                    3b:e3:f1:c0:f9:92:c9:31:4d:0e:58:79:f4:b6:49:
                    db:86:83:e1:0d:bd:b6:f8:38:dc:a3:0e:1e:de:f8:
                    00:20:c0:0f:1b:b3:44:7e:90:67:35:de:66:ee:da:
                    da:42:45:fa:19:65:8c:16:87:f0:a8:08:32:78:9f:
                    f9:23:03:07:70:3d:09:de:97:94:3b:df:50:b8:d2:
                    cc:d6:5d:4e:97:94:b9:12:2d:48:89:12:62:5f:ad:
                    32:72:08:bc:5c:9e:b9:2b:13:c2:e5:a6:31:72:ba:
                    c4:37:b1:c6:cb:b2:cc:42:ed:69:a0:ef:0c:0b:c6:
                    53:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:F9:B4:72:D9:A9:8D:0F:95:68:25:82:C7:80:71:D7:B5:9D:6B:61
            X509v3 Authority Key Identifier:
                keyid:BC:87:B9:CF:C3:EE:0C:44:96:5E:A2:09:C0:4F:D8:E8:F4:8F:A4:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIe5z8PuDESWXqIJwE_Y6PSPpC8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/57e8d7-49ab-4d1e-a808-45fabe3f9f33/1/vIe5z8PuDESWXqIJwE_Y6PSPpC8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:80:bb:36:3e:d7:7a:83:3e:6c:8c:7f:90:96:b3:14:a1:1d:
         f0:d2:9b:38:98:cb:c4:f1:7a:9f:c5:ee:08:70:b7:f0:0c:1b:
         26:0a:c2:8c:db:e6:bc:57:77:5a:62:6e:ac:11:5e:02:12:bc:
         e8:0f:10:aa:b2:00:ff:79:1d:a6:4a:cd:e5:fc:0f:bd:89:26:
         6e:91:17:6d:91:79:eb:50:86:f1:b1:ff:f2:9e:28:78:b6:ca:
         fb:05:67:7c:ef:df:1f:e4:b9:a1:d1:01:7e:bc:39:c6:cc:88:
         5c:77:b5:f4:48:1f:80:4c:40:2d:14:aa:4e:7d:17:4e:ab:94:
         f1:f4:67:48:77:3f:fa:94:e0:86:0a:20:ce:be:da:d0:df:75:
         9f:b6:a3:c9:07:61:86:ce:85:2b:e7:3e:15:86:4b:1d:99:a9:
         84:0f:85:a7:07:cd:a2:8a:23:cb:61:4a:3e:3e:93:54:29:05:
         33:dd:6e:99:6b:2a:d6:a7:b0:28:83:c2:7a:96:37:a3:8c:d1:
         21:ab:e5:9c:62:18:18:f2:f1:be:2d:1a:b4:4f:d2:43:90:e3:
         d7:49:d5:7f:2c:bd:a0:bf:8d:15:49:55:30:79:d4:e9:85:72:
         b4:b0:71:7b:cd:0d:38:2b:9b:b6:01:79:51:73:b1:53:ed:f7:
         d8:84:01:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 15:58:25 2026 by rpki-client