Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
File:                     vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft (raw, json)
Hash identifier:          8WCVuLx27S85S+PKnO73YhyPNnqc6CshK36nQAE3gqw=
Subject key identifier:   30:4A:57:74:D5:10:B0:65:2A:71:D0:D4:EB:BB:9E:1C:66:A9:DC:7B
Authority key identifier: BD:0B:08:01:71:8A:0B:A7:56:58:2D:60:54:6C:F0:4A:0C:4A:51:41
Certificate issuer:       /CN=bd0b0801718a0ba756582d60546cf04a0c4a5141
Certificate serial:       01A161C497BFE5CE4B4958173B68EEE6941E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
Manifest number:          E1
Signing time:             Thu 22 Oct 2026 04:00:36 +0000
Manifest this update:     Thu 22 Oct 2026 04:00:36 +0000
Manifest next update:     Fri 23 Oct 2026 04:00:36 +0000
Files and hashes:         1: reeSo543-iiV_hwwXrGw1Fvughg.roa (hash: n9+iAAB1GwbtnN2Cb2yq5/uQtkeoVL1fosqNhMcu7iE=)
                          2: vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl (hash: /qcrpCvWM1+sV3QTFEOo2ZIv/8fy2MLUFtDvjw7P6BM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:61:c4:97:bf:e5:ce:4b:49:58:17:3b:68:ee:e6:94:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd0b0801718a0ba756582d60546cf04a0c4a5141
        Validity
            Not Before: Oct 22 04:00:36 2026 GMT
            Not After : Oct 23 04:00:36 2026 GMT
        Subject: CN=304a5774d510b0652a71d0d4ebbb9e1c66a9dc7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:1f:9b:00:08:b9:f0:46:67:d6:52:4c:29:a8:
                    34:f3:a0:73:df:55:7d:5d:05:27:a9:8b:7c:20:48:
                    ec:b9:03:0f:77:12:ce:4f:18:d3:63:ff:87:ef:a8:
                    33:9d:31:46:24:b7:95:74:72:83:2c:88:d5:23:08:
                    09:87:fb:80:2c:b4:d8:d2:80:a2:45:ef:6e:9f:9d:
                    e7:d1:97:27:63:0a:11:35:39:fb:97:86:6b:53:65:
                    84:d0:49:30:c2:7d:33:57:e3:50:62:e3:69:f1:ef:
                    bd:fc:60:c6:f3:bb:5b:f6:a2:83:97:ba:1a:c5:60:
                    98:a5:e8:83:26:1e:df:8a:21:02:34:3e:c6:b1:a3:
                    95:5c:ae:d2:90:b7:da:61:df:24:c2:1f:95:ac:ab:
                    52:49:61:d2:ae:16:1b:ed:6c:d9:c1:28:69:da:43:
                    8f:c7:69:4f:ac:03:d6:49:1f:f0:cd:16:aa:d1:e7:
                    6a:bd:65:94:3f:ea:de:e4:33:9d:48:e6:72:41:4f:
                    3d:87:4a:0d:f4:ad:44:c3:69:d8:9c:11:24:29:13:
                    83:62:54:1f:bc:37:4c:62:f1:f0:68:d2:d3:87:a8:
                    a6:f6:33:55:a9:44:ce:ed:56:40:27:fa:09:b3:9d:
                    47:82:86:39:60:a1:77:71:6f:f2:b3:37:90:7f:a5:
                    a0:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:57:74:D5:10:B0:65:2A:71:D0:D4:EB:BB:9E:1C:66:A9:DC:7B
            X509v3 Authority Key Identifier:
                keyid:BD:0B:08:01:71:8A:0B:A7:56:58:2D:60:54:6C:F0:4A:0C:4A:51:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQsIAXGKC6dWWC1gVGzwSgxKUUE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/e9cbd7-cabd-4298-8ad5-f75b3348f685/1/vQsIAXGKC6dWWC1gVGzwSgxKUUE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:3b:2a:5f:b8:0b:69:93:7b:9c:e2:39:8e:07:01:f9:b4:fa:
         50:01:1f:06:36:3c:d1:d9:b0:1b:f7:e8:96:71:ec:13:97:fe:
         8f:c5:96:da:2f:35:74:bd:9d:6e:86:09:e8:b0:fb:a9:a6:ca:
         d3:77:6b:dd:29:50:6e:ec:10:d5:76:f0:d4:08:fd:e7:64:16:
         22:43:37:db:0c:54:ae:4e:02:10:6f:5d:6c:91:a4:cd:fc:d0:
         39:5e:6e:91:83:fa:c3:fd:69:9e:fd:82:e9:2a:39:40:f4:ab:
         9d:6e:7e:80:37:ce:e6:7b:d7:43:f4:63:67:79:89:e4:c6:10:
         74:45:2e:94:19:fd:95:4b:ca:d7:9b:1a:72:54:26:84:fd:4b:
         02:71:c1:0d:da:7b:0d:ae:a2:da:a5:65:38:d2:8b:ad:2f:e0:
         71:1e:6d:9e:4e:c2:f3:70:6a:b8:af:6e:e6:32:a4:5d:8d:f0:
         c4:ec:da:ea:2a:95:bc:c3:70:d0:b3:91:5d:f0:18:df:35:eb:
         7c:8b:e9:72:42:43:d6:0b:e0:1d:dc:43:a7:28:c4:07:3b:83:
         e2:58:b9:b1:44:7b:ee:76:06:87:74:d5:4b:62:79:ea:d1:6e:
         f9:a5:a2:7f:93:9c:db:f3:83:7e:6c:ad:68:27:b6:21:15:d0:
         7f:58:06:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:53:51 2026 by rpki-client