Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File:                     vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier:          Rmv1HHC3OfveYPBAzyRF47BweGmWYbouoFgjqVqCOiI=
Subject key identifier:   8C:39:04:01:8C:EB:D3:07:78:F3:C1:69:D9:39:46:43:8D:B8:34:D9
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer:       /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial:       01A18C41D2FD37AFC25CA9FF906BEF49A029
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number:          0582
Signing time:             Fri 30 Oct 2026 10:01:26 +0000
Manifest this update:     Fri 30 Oct 2026 10:01:26 +0000
Manifest next update:     Sat 31 Oct 2026 10:01:26 +0000
Files and hashes:         1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: ecL6q7JvHnCxVkY7uR3uWRm+fvi6MAU1ux6L7VhkFcQ=)
                          2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 31 Oct 2026 08:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:8c:41:d2:fd:37:af:c2:5c:a9:ff:90:6b:ef:49:a0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
        Validity
            Not Before: Oct 30 10:01:26 2026 GMT
            Not After : Oct 31 10:01:26 2026 GMT
        Subject: CN=8c3904018cebd30778f3c169d93946438db834d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:6d:b6:23:7e:54:7d:1b:94:c9:38:3f:e7:13:
                    94:b1:27:30:db:0b:ed:9d:6b:20:c3:9a:c1:1c:a8:
                    19:55:ff:9b:32:5c:75:e0:db:92:8f:8b:54:6b:a7:
                    17:69:2c:35:cf:91:71:c6:60:93:cb:95:10:b8:a7:
                    b4:e2:d1:6a:09:c4:15:34:b2:8f:29:e7:7d:ff:37:
                    ca:71:c6:23:06:ba:e5:d0:70:d4:02:cb:e4:4f:00:
                    98:6d:02:dc:82:3e:3a:3d:a7:06:07:ab:cf:77:d9:
                    32:75:7f:df:51:5d:8f:d5:9e:61:47:48:ca:30:a3:
                    7e:75:43:87:14:3a:72:4d:33:c5:fb:f9:33:f7:ad:
                    eb:fa:d4:1b:5f:17:7b:39:3e:bc:19:fe:7c:a2:2e:
                    e6:aa:70:f8:70:71:bf:2a:d4:64:af:d7:e0:2f:b8:
                    7a:9d:b3:b2:c1:32:5b:c2:43:c3:15:90:43:ea:d5:
                    99:96:8d:d6:3b:17:ea:64:09:64:b8:55:fd:83:f0:
                    cd:7f:41:9c:b5:5e:df:e9:8c:9d:0a:d3:70:0c:38:
                    38:93:36:2e:c8:c4:70:ad:fd:d7:69:1e:e3:d7:21:
                    c3:27:50:ac:18:c9:57:e3:0f:a8:44:2f:66:26:23:
                    c4:87:85:a4:07:fd:dd:65:87:3a:03:56:05:6a:02:
                    d0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:39:04:01:8C:EB:D3:07:78:F3:C1:69:D9:39:46:43:8D:B8:34:D9
            X509v3 Authority Key Identifier:
                keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:a9:e9:31:ac:ae:28:db:ce:39:f7:91:1f:ac:84:b4:77:89:
         da:16:f9:47:58:b9:87:7d:7a:c4:ab:13:8a:54:26:02:02:79:
         55:ad:22:64:32:93:37:65:38:78:a6:15:ae:40:e8:68:72:a4:
         ad:59:da:e7:23:4a:52:bd:d4:89:95:da:0e:3b:d6:c2:84:2f:
         50:a3:09:44:c8:28:f6:7c:1e:f1:e6:35:11:15:f4:c2:45:26:
         64:15:54:12:cc:0b:0d:07:37:59:44:a6:ac:af:c9:96:93:5a:
         a7:24:a3:0e:e8:f7:0c:b4:d0:50:ce:0c:ac:af:e6:99:28:f6:
         c5:24:ff:61:dc:8d:1b:c7:ca:40:27:76:58:aa:9c:cb:f8:a0:
         fd:39:fd:c4:b1:e0:e4:b0:5e:73:89:05:b0:01:31:22:6d:fb:
         2a:65:14:68:8b:a7:80:f4:58:cb:3d:dd:ae:8c:27:6c:25:2e:
         1f:1d:f6:cd:ca:3a:92:d5:3e:4a:c2:df:09:98:9f:5c:fd:5d:
         c6:5d:ae:33:31:6c:ab:e7:e0:1b:77:db:ef:c8:f2:d7:b6:4b:
         c0:21:0a:d4:05:d8:08:a1:19:5d:52:4d:3d:55:43:5e:c7:e8:
         4f:e9:cb:6d:b0:2f:d2:c4:a8:ce:bf:e4:ea:98:69:f8:0a:18:
         a2:25:ac:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 30 18:03:03 2026 by rpki-client