Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
File:                     vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft (raw, json)
Hash identifier:          gujh1gWBow2ShkIeKdlFwqda863+L+0KkXpKSRFkm3Q=
Subject key identifier:   7E:05:0D:2E:E2:9D:25:EE:A9:F2:C4:E3:E9:47:85:C0:FA:14:9E:40
Authority key identifier: BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
Certificate issuer:       /CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Certificate serial:       01A129FB2F3C49438A59299796E9BC25B7D7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
Manifest number:          C4
Signing time:             Sun 11 Oct 2026 08:01:29 +0000
Manifest this update:     Sun 11 Oct 2026 08:01:29 +0000
Manifest next update:     Mon 12 Oct 2026 08:01:29 +0000
Files and hashes:         1: 1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa (hash: BXk8ninGeDuuF8CYBQR72p10jh3CVqnPWA05JGML8xw=)
                          2: vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl (hash: hHQFs08Hci3imkUDAPZrPRJnirn0wYH3VXbAp/+qlBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 12 Oct 2026 05:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:29:fb:2f:3c:49:43:8a:59:29:97:96:e9:bc:25:b7:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
        Validity
            Not Before: Oct 11 08:01:29 2026 GMT
            Not After : Oct 12 08:01:29 2026 GMT
        Subject: CN=7e050d2ee29d25eea9f2c4e3e94785c0fa149e40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:de:be:ba:1b:be:46:52:ad:61:af:07:c9:71:
                    8e:88:a3:d2:d9:f7:23:e6:a9:ee:6d:b6:a5:58:67:
                    78:5b:b8:6c:c2:89:9c:4c:f9:83:fd:ba:13:74:09:
                    ac:b8:a6:f5:2f:63:96:66:ca:45:73:58:97:e3:39:
                    ef:51:d6:f7:ff:13:b0:39:8a:2f:6d:e7:d9:fc:01:
                    97:f4:fe:27:bb:f6:4a:30:c0:af:bc:e4:78:f1:42:
                    12:52:92:17:4d:dd:68:12:33:48:70:43:d3:dc:96:
                    08:c7:cd:97:1b:1d:e9:4c:f9:79:07:63:2b:05:6a:
                    81:79:e7:38:01:01:64:8c:fd:d0:9e:4f:3e:21:18:
                    e8:16:af:4a:09:6c:21:63:f7:87:f6:0d:01:7e:65:
                    0e:f4:62:7a:53:6e:72:43:ba:4a:4a:a0:68:af:b2:
                    f9:c7:4a:4f:ed:ce:2d:ff:fc:a6:c3:db:68:ef:5b:
                    0b:f2:3e:7a:8b:64:ab:9a:6f:f8:58:1b:d5:20:ff:
                    95:05:15:a3:3c:7c:a5:95:3e:81:51:b8:7c:24:40:
                    33:2e:38:f4:eb:d6:d9:c7:18:9d:65:68:48:4f:11:
                    8f:49:88:0f:b9:30:c7:d5:35:42:2d:70:fb:fa:11:
                    69:c4:cf:79:86:8e:49:95:19:5f:e7:e2:c5:59:74:
                    9a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:05:0D:2E:E2:9D:25:EE:A9:F2:C4:E3:E9:47:85:C0:FA:14:9E:40
            X509v3 Authority Key Identifier:
                keyid:BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:b4:cc:ac:5f:e0:e1:4e:76:34:28:83:26:ce:f7:56:39:9a:
         bf:5c:2d:89:8e:69:c9:56:4f:a9:93:83:bc:7c:45:c5:e9:b5:
         a0:b2:f8:ff:7e:b9:b7:27:70:fc:df:56:13:75:a3:06:63:b9:
         92:9a:b8:22:97:cc:ac:2e:e6:27:d6:04:85:eb:09:06:bb:e1:
         20:f6:4d:60:09:d7:c4:21:cf:9b:0e:5e:9c:9e:cf:a1:2e:a9:
         ad:f9:86:3b:92:92:5b:ae:19:48:d3:80:6d:b5:b6:d7:17:4e:
         65:4e:c7:9a:08:1a:a8:35:a5:5c:d2:70:ff:d8:91:b2:e1:63:
         80:bc:93:d9:98:44:1e:7d:c1:bc:aa:01:c8:fd:7b:5e:6e:28:
         be:09:f5:62:6d:4f:4f:d2:3a:9a:22:21:92:37:e1:3c:9a:fc:
         f5:88:a8:3e:03:9a:45:8f:e3:1e:c3:7e:82:ae:00:f4:b7:7f:
         d4:1f:20:88:a2:68:54:37:c8:8c:5c:84:58:96:ea:0c:73:90:
         b0:9f:30:6e:b1:13:29:e9:10:d3:12:3e:e3:c3:4e:ef:e8:04:
         96:91:5b:4d:ae:55:7a:60:70:50:a5:85:b7:f2:bc:34:9a:1a:
         f1:41:f9:7b:ef:22:96:01:f0:75:dd:69:b9:e4:3c:f2:52:cf:
         cf:6e:6b:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 13:36:05 2026 by rpki-client