Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
File:                     vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json)
Hash identifier:          mNWpCYj8VhxgqUVWKq6jJeTNsrsOj7IJQFxIbSixHX0=
Subject key identifier:   8B:4D:AE:50:8B:46:16:13:C8:C2:E7:2F:17:A9:D6:06:CF:49:A6:D8
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Certificate issuer:       /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial:       01A001DD1416770C2B0FBE3922835804FA66
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
Manifest number:          0406
Signing time:             Fri 14 Aug 2026 20:01:00 +0000
Manifest this update:     Fri 14 Aug 2026 20:01:00 +0000
Manifest next update:     Sat 15 Aug 2026 20:01:00 +0000
Files and hashes:         1: 8HPlLJKGC0uGDXpjxVBwb6wa0qk.roa (hash: Ojh5/xBT32ZIv2cbh6f99Qcqv0JCaF6De9sA3ACbGs0=)
                          2: IivqEYycEJ9ENYkDV_x_rR4eFr0.roa (hash: IQVchAwFZI4RDu0XF+MD2n3sIbpJvcGSbjEZGTu8Mwc=)
                          3: X8pouaMpaLsuYErTPUpgqpWeT9Y.roa (hash: psbUeXwDjoOPzcvtNOSx3ERhIjFSIX4yWz6HMVvEcEg=)
                          4: XyAp-ULJDGqQnYw4x0VOKO9WL4A.roa (hash: p7Y5UggA9XaPiUt8v09KTFjc/O7q3EmBodfSudOJ2G0=)
                          5: mvMvzcuR1NgOhwlZXo7XswNReO8.roa (hash: OC7UawU8PzTtEO+txuJgCieiCDiiiwo16T6kmqVkBqo=)
                          6: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (hash: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0=)
                          7: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: HukmGXN7wIvwWaDopmAM2DWQycemMCbXXB2DYkUYWRk=)
                          8: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (hash: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:dd:14:16:77:0c:2b:0f:be:39:22:83:58:04:fa:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
        Validity
            Not Before: Aug 14 20:01:00 2026 GMT
            Not After : Aug 15 20:01:00 2026 GMT
        Subject: CN=8b4dae508b461613c8c2e72f17a9d606cf49a6d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:42:e6:9f:bf:19:b6:ea:34:2b:75:2f:7a:d1:
                    89:84:31:0f:e1:30:38:b0:e7:8f:d3:9e:c6:89:63:
                    ae:55:be:99:b9:ea:9d:18:2c:39:78:7c:81:0b:be:
                    8f:f1:0c:4c:11:e7:53:56:2d:b6:6f:69:ee:e2:0d:
                    f6:7a:d3:2f:60:0c:46:4b:c8:02:f7:0e:8b:e9:b1:
                    16:dd:c0:3f:d7:8e:de:d5:e9:24:5a:5b:3d:6a:2d:
                    d1:08:42:74:a1:f8:c8:e5:83:06:81:06:11:90:da:
                    0c:ad:e8:c3:81:de:f9:f0:e6:61:e7:63:39:8c:b1:
                    7b:09:0a:e6:8d:2c:5f:7b:80:37:0b:50:64:86:ee:
                    0f:01:d3:f1:c8:43:67:42:78:1a:24:05:6e:b1:89:
                    92:e3:0a:e9:0e:dc:0b:bb:f4:29:ed:fd:e7:44:ce:
                    43:e5:68:69:ba:dc:7f:ac:6b:29:ff:8a:15:74:ee:
                    a9:f1:80:36:1d:5c:2c:4f:3d:46:23:fb:21:18:eb:
                    ab:4c:57:ca:40:6c:5f:53:80:d2:d7:ba:f2:9d:b7:
                    d1:10:d7:3f:2c:ff:bb:ea:0b:13:3f:14:c4:3f:92:
                    fd:56:a4:51:49:19:a8:05:f1:20:24:89:7e:2b:05:
                    a2:14:6b:05:ff:49:95:29:f0:97:da:8d:e5:13:7d:
                    cc:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:4D:AE:50:8B:46:16:13:C8:C2:E7:2F:17:A9:D6:06:CF:49:A6:D8
            X509v3 Authority Key Identifier:
                keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:a3:ee:d6:17:12:c8:67:12:73:9c:6a:6e:27:7b:65:fe:00:
         1b:21:42:1a:78:5f:db:87:85:00:54:eb:70:08:c9:73:7d:d4:
         2e:05:23:6d:a8:37:13:7e:66:ac:ba:ae:d1:6b:8a:68:0c:63:
         dc:49:b0:ca:17:fc:64:6b:f1:a2:ed:5d:8b:a2:41:24:3a:a6:
         e7:7d:c2:5d:ae:27:2a:ab:f0:4f:73:0a:cc:d6:ef:2f:0e:7c:
         fa:ec:2a:4e:e9:b4:7f:04:17:11:08:d4:8d:e4:e5:6f:09:c8:
         58:9c:05:06:7d:ab:36:4d:96:6c:2a:cc:86:ef:97:7b:1d:36:
         ed:7d:e5:08:cb:51:19:84:0a:74:77:24:57:fd:9d:55:3a:64:
         4f:da:35:6a:a4:cf:47:33:25:b2:64:a1:ec:70:3f:7e:87:92:
         9a:e6:6a:5d:c1:e4:58:94:ed:83:9b:ed:5e:2e:8f:b2:bb:3c:
         2e:a3:5a:a4:61:81:96:75:41:f4:ab:bc:70:00:ce:fd:17:4b:
         67:dd:d3:e4:de:74:ce:29:0a:8e:ed:fe:f3:74:c9:30:9a:4c:
         de:1a:c1:23:b2:3f:82:f6:3f:76:88:7a:87:8b:2f:b3:48:5e:
         cf:87:e6:e1:f2:4c:72:ad:66:01:83:8e:c2:f4:da:85:11:65:
         65:e3:e4:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:06:07 2026 by rpki-client