Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
File:                     2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft (raw, json)
Hash identifier:          6d2Vh8k/6zHAG5sDBxugthE+ih/DwmfKFvCgEA67oMo=
Subject key identifier:   FD:B0:3E:99:15:66:F4:81:AC:CC:0B:B0:03:65:7D:E8:F4:B4:40:A9
Authority key identifier: DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A
Certificate issuer:       /CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
Certificate serial:       01A11C07ACF820613EB30717A8619606E462
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
Manifest number:          0166
Signing time:             Thu 08 Oct 2026 15:00:27 +0000
Manifest this update:     Thu 08 Oct 2026 15:00:27 +0000
Manifest next update:     Fri 09 Oct 2026 15:00:27 +0000
Files and hashes:         1: 2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl (hash: W2JnwD2qs1SyxPFeeoAwogyn1/1ujq/Rm0iQ0iLZAgg=)
                          2: 4gw6ivUlx5RhKF01WchRSIyjw6k.roa (hash: yvGXQJHvCvBUZwEB+2AUU7LQeWkM7iGBhAxvrY3Xm9M=)
                          3: D9_btYwl0fQhOMvvEzfg91IZ8P0.roa (hash: WuI7JG/DTFeMuDLWYMfuwcvhxvoBD8M0//z426pEYRE=)
                          4: PDgj4Wl1YZudxOMnm6iJcOVDohw.roa (hash: a78RSsZm6nyQiDBrqehTSBxMPpTBDq/oFvqHEIehalg=)
                          5: cjj-j23xq1RyQ_bUrNGmu-cXcwc.roa (hash: HfAl0A5AiNIVARTp9kRpB/+bCfiAhWqWqe+w3HwHAKM=)
                          6: gKLAibmeyTSp0b81TE3SOvnf55s.roa (hash: m7hkN2gXNToHsdJ6LUtn1bIpxlleCfQZ6vbkrSxeCIo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:07:ac:f8:20:61:3e:b3:07:17:a8:61:96:06:e4:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dbe47e559d2a82cf50b4151965e36937e3ff767a
        Validity
            Not Before: Oct  8 15:00:27 2026 GMT
            Not After : Oct  9 15:00:27 2026 GMT
        Subject: CN=fdb03e991566f481accc0bb003657de8f4b440a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:ed:05:e3:7e:29:20:d0:d1:3e:2b:fa:bf:4c:
                    75:f5:24:30:61:4f:31:49:bf:b9:0a:78:9f:a4:28:
                    db:e0:0b:1c:ae:2b:34:b0:1b:74:3a:d2:ab:89:1a:
                    3f:2d:b7:9d:fc:c0:41:0f:b1:c8:10:fa:ba:1e:a1:
                    f5:e3:2d:31:dd:9b:d0:8c:f9:47:82:bb:8d:fa:11:
                    b2:cb:e4:7b:50:ba:d4:7c:e0:11:7f:d2:d8:fe:1b:
                    df:2f:98:9e:03:6d:d4:a8:fb:18:c1:a8:71:ba:66:
                    83:58:eb:df:f4:b3:81:cf:5a:4a:0a:cf:fd:61:d2:
                    f1:ac:7c:45:c1:de:68:0c:9a:b0:e8:d5:93:cc:08:
                    76:0c:b1:69:de:3f:8e:9b:bb:70:57:c4:9c:5b:2d:
                    0f:65:3c:9f:3d:db:94:39:e6:8f:b0:60:59:d7:6e:
                    a9:d3:c2:d1:c4:5f:2f:a8:fd:88:fc:f4:e6:5b:69:
                    dd:e1:b9:07:73:a3:25:52:a7:da:e3:ce:d4:13:dc:
                    fb:94:b2:9b:55:b4:7e:c0:4f:11:03:09:90:f6:cf:
                    6e:d9:b3:af:76:73:00:17:69:bb:a9:e3:4d:65:6b:
                    51:6b:28:dc:06:04:5c:9f:7e:a9:09:48:c3:d4:c0:
                    16:ee:d9:1b:59:0c:f7:9b:4b:af:19:51:20:12:1a:
                    cf:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:B0:3E:99:15:66:F4:81:AC:CC:0B:B0:03:65:7D:E8:F4:B4:40:A9
            X509v3 Authority Key Identifier:
                keyid:DB:E4:7E:55:9D:2A:82:CF:50:B4:15:19:65:E3:69:37:E3:FF:76:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2-R-VZ0qgs9QtBUZZeNpN-P_dno.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/e41999-c0c9-49db-bdfa-792f29eb13f8/1/2-R-VZ0qgs9QtBUZZeNpN-P_dno.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         dc:44:7b:cd:db:b7:4c:eb:50:56:73:a9:4f:4d:b8:ad:6d:9b:
         c6:5f:a2:74:d1:35:50:5e:8f:45:c3:54:fe:1d:b5:6b:89:1a:
         79:a6:a5:05:31:6a:8e:4d:c2:07:ce:da:8a:e6:fb:df:ee:d1:
         e0:16:0b:92:c7:95:3f:ff:9f:57:66:4b:2e:d4:e6:07:00:6e:
         b2:c7:5e:fc:8f:4b:93:f3:f7:95:63:e1:23:97:26:47:eb:f7:
         2f:de:02:81:f7:4a:87:0e:47:43:42:65:3f:48:30:ae:52:b2:
         3f:5f:ba:68:18:43:43:8c:10:70:c0:42:b6:c0:ff:70:ac:8c:
         be:ab:9f:20:57:d7:ee:16:29:e8:19:77:29:fb:39:53:29:c0:
         66:75:8c:2e:54:e4:ea:87:f8:01:3f:fc:87:8a:26:8a:0b:fd:
         1e:62:70:f5:c4:24:f3:2c:b6:6c:ef:92:50:32:6f:66:97:e1:
         be:f8:c5:6d:47:56:f3:64:e9:53:c6:21:74:84:e5:f0:67:5b:
         15:3f:b6:a2:18:1e:c8:75:dd:0f:80:3f:06:c5:6e:aa:7c:c7:
         49:52:54:5f:50:6f:96:e8:53:94:a1:a1:1d:ee:58:a6:46:23:
         1e:62:b6:79:e4:cb:cb:f0:ff:b1:a4:f0:cf:6d:f9:9b:ad:0b:
         bf:66:32:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:49:53 2026 by rpki-client