Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File:                     vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier:          F2hwTnFTnk0ZhFn4RvM3ZKDAZ1VzLSwHLe/BR1BYbAA=
Subject key identifier:   16:EE:10:90:C2:E0:87:6F:2B:3C:EE:A1:C2:22:1D:12:D1:F9:31:70
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer:       /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial:       01A08D1F9F38390C342616EB896A2D52D904
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number:          1A4B
Signing time:             Thu 10 Sep 2026 21:00:54 +0000
Manifest this update:     Thu 10 Sep 2026 21:00:54 +0000
Manifest next update:     Fri 11 Sep 2026 21:00:54 +0000
Files and hashes:         1: 473COPKd9olJMqE4kR25XOWDFnY.roa (hash: monMcaQ2KeRWOvX/C8J08SlGKpHbfXIEgRkLvwPSBPI=)
                          2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: E9rW1xwWBWZdwVJ3nODAMVnKBbSOghlYqiD1m4v6SP0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:1f:9f:38:39:0c:34:26:16:eb:89:6a:2d:52:d9:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
        Validity
            Not Before: Sep 10 21:00:54 2026 GMT
            Not After : Sep 11 21:00:54 2026 GMT
        Subject: CN=16ee1090c2e0876f2b3ceea1c2221d12d1f93170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:6f:27:42:5e:3a:f3:10:0a:05:c7:15:5a:
                    07:52:53:eb:83:d0:65:c1:35:62:e7:19:fd:e4:18:
                    35:39:72:04:84:53:da:4c:20:10:de:91:57:21:45:
                    a9:6a:0a:fc:38:40:09:a4:25:a3:e2:16:3c:f9:a2:
                    d2:5f:cf:dc:9b:12:7f:dd:1c:6d:a8:90:ea:0b:e1:
                    9c:c9:b9:f7:97:3f:e7:c7:aa:9b:44:28:32:78:56:
                    50:d4:a7:43:fb:d2:40:35:d6:8a:45:a0:48:03:83:
                    9a:6a:e9:ed:77:22:cd:82:8f:7c:75:03:39:08:78:
                    86:b4:91:15:ba:7e:b3:da:de:1e:8d:92:4c:8c:77:
                    7b:72:b9:a5:9c:b1:ff:73:34:03:a6:ba:db:13:3d:
                    1a:42:21:71:6f:aa:17:e2:66:87:15:94:35:6f:99:
                    48:12:79:de:73:8a:11:4f:e4:8c:15:cb:d2:1a:a6:
                    6b:3a:05:0f:05:70:23:fa:d4:36:4c:fe:64:0d:58:
                    6d:67:5f:00:e8:8c:3f:37:43:81:bf:27:44:d3:7e:
                    17:bd:10:ad:60:68:97:bf:91:c9:b6:01:2d:2d:c6:
                    3a:c2:fc:0c:99:50:5e:b6:63:a5:0a:75:e6:97:36:
                    db:c0:5b:31:67:1e:19:bf:39:54:10:d1:a7:64:63:
                    e9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EE:10:90:C2:E0:87:6F:2B:3C:EE:A1:C2:22:1D:12:D1:F9:31:70
            X509v3 Authority Key Identifier:
                keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:65:b1:37:63:28:61:2d:2d:12:b0:4a:90:75:04:48:0f:82:
         84:f5:78:9b:65:23:4c:fd:65:17:ad:4b:a8:d8:fd:84:11:48:
         76:18:98:84:68:26:fa:9c:bc:a9:47:1d:43:88:5d:cc:33:a0:
         ef:8f:9e:ce:49:ad:d1:e3:7d:2c:24:0d:15:d7:4a:ba:fe:4d:
         59:d0:34:c4:d8:8b:a0:60:97:55:85:56:b8:6d:21:75:91:64:
         5e:71:ba:c7:f0:42:9a:31:aa:93:82:a1:9a:c2:ea:fd:c1:97:
         b2:28:dd:1f:37:9f:a6:d2:00:ff:ce:58:8a:c3:7f:64:40:46:
         93:d7:22:6d:c6:dd:73:8a:d1:54:7c:8a:b4:20:d2:7a:f0:5e:
         27:88:78:4d:cd:0b:54:17:48:61:78:af:74:8a:0e:8c:0e:69:
         61:d5:29:96:bd:17:36:19:f5:c9:a5:59:16:2b:7b:25:11:68:
         31:e7:32:69:c0:36:7b:88:bf:ef:a1:8b:ae:1e:5e:55:26:a9:
         62:75:0f:9a:30:9b:32:0d:d5:e3:35:28:ec:e2:34:4d:9d:de:
         91:40:33:7d:f9:53:a8:4c:db:14:f0:3b:7d:36:9e:37:ac:8c:
         8a:1e:81:fd:b9:20:f0:26:a4:9d:ea:81:88:d4:a3:2f:f8:61:
         d0:cb:21:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:18:35 2026 by rpki-client