Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
File:                     vVXPhK_d4xgniNwAdjqCMINM7FI.mft (raw, json)
Hash identifier:          tUIQF+XEBDkdtjAMRcFNwcvNfJ5E482ziT4CYoSNAXQ=
Subject key identifier:   0E:FE:F6:5D:A9:36:D6:7F:E5:D4:B1:A0:4E:2A:C3:9E:7E:63:DB:6F
Authority key identifier: BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52
Certificate issuer:       /CN=bd55cf84afdde3182788dc00763a8230834cec52
Certificate serial:       01A06E7102B909C69162AF3BD45982BF1B47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
Manifest number:          01DC
Signing time:             Fri 04 Sep 2026 22:01:35 +0000
Manifest this update:     Fri 04 Sep 2026 22:01:35 +0000
Manifest next update:     Sat 05 Sep 2026 22:01:35 +0000
Files and hashes:         1: m2i02yDWoa9OicV27GMj8Y2x37c.roa (hash: PcpljpVFgub8o7xEhsLEYIzvRxfNpdllqdeZVEQzjwg=)
                          2: vVXPhK_d4xgniNwAdjqCMINM7FI.crl (hash: U3PeoyCIR3BbkVtLvpPRAyli+1HWAlVsDJQmIDdZoAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:71:02:b9:09:c6:91:62:af:3b:d4:59:82:bf:1b:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd55cf84afdde3182788dc00763a8230834cec52
        Validity
            Not Before: Sep  4 22:01:35 2026 GMT
            Not After : Sep  5 22:01:35 2026 GMT
        Subject: CN=0efef65da936d67fe5d4b1a04e2ac39e7e63db6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a8:8b:01:2f:8a:d5:dd:4f:e9:a3:6d:a1:f3:
                    6d:92:31:bf:58:f8:f4:e7:d2:d3:8b:8d:08:4a:13:
                    f3:25:59:a4:da:4b:13:0b:1e:c7:84:06:c7:3e:22:
                    a1:d6:35:7e:6b:fa:6c:20:85:56:8a:63:d4:fc:56:
                    ff:6b:3f:70:3e:54:36:fc:3b:ef:6d:98:23:bf:ba:
                    d5:06:a8:86:32:4e:3f:ac:40:85:67:3d:70:5a:7f:
                    6f:5e:9d:06:8a:f0:41:8d:19:7a:01:b8:d3:2d:c3:
                    24:57:f0:f9:17:95:af:c4:44:a2:b6:be:5d:65:9b:
                    31:db:b3:c0:57:26:a0:e5:fb:71:ee:91:f2:ca:bc:
                    56:e8:36:07:16:d0:1a:ac:1f:d9:40:d5:3c:da:67:
                    b3:d9:ac:a7:49:3f:f2:55:88:10:58:eb:12:25:17:
                    8c:3e:1b:54:f7:72:23:5c:06:73:14:d9:e0:fa:58:
                    38:71:12:27:d6:b8:7c:1a:bb:3d:39:7e:27:0f:8b:
                    95:4c:23:b8:b0:f0:49:7f:e5:2b:25:7d:b8:f0:ff:
                    6a:50:94:d9:28:61:45:e3:bd:7a:6f:99:6f:84:82:
                    4a:28:60:e0:63:8f:53:34:31:8c:65:06:3c:d2:0a:
                    d6:85:3a:31:94:4a:fe:1d:6a:3d:6a:55:81:ef:91:
                    e2:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FE:F6:5D:A9:36:D6:7F:E5:D4:B1:A0:4E:2A:C3:9E:7E:63:DB:6F
            X509v3 Authority Key Identifier:
                keyid:BD:55:CF:84:AF:DD:E3:18:27:88:DC:00:76:3A:82:30:83:4C:EC:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVXPhK_d4xgniNwAdjqCMINM7FI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/61d258-111e-48c5-b0ae-7b28c25d44c6/1/vVXPhK_d4xgniNwAdjqCMINM7FI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:79:93:1d:ee:58:ca:2f:16:85:0b:bb:f3:85:d0:17:c6:
         05:92:eb:b5:40:c7:2e:00:2a:7e:c8:eb:77:cf:fc:a1:8c:2f:
         ab:a4:d4:c4:d8:b2:fb:a8:9a:b8:a4:8a:92:97:b0:25:cf:c8:
         eb:0c:59:d8:b9:aa:a2:e6:b5:ee:19:a6:30:d3:1f:c3:f7:55:
         89:94:6f:5c:a6:f0:68:21:66:09:1a:fb:5f:e9:b2:90:54:f2:
         cf:2f:42:47:dd:50:ed:3c:c8:95:a7:c5:d7:fe:a2:1e:c2:bf:
         92:8d:1c:fe:be:e9:10:f3:fc:ce:7f:e3:91:ec:80:8a:18:25:
         db:f6:0c:fa:89:15:1b:7c:23:8c:4c:46:7c:9c:14:2a:ac:d8:
         d0:ab:37:15:84:02:cf:b9:30:cd:63:f9:cb:11:f1:9c:14:2c:
         08:2a:74:11:b3:77:b4:ba:fd:a9:31:7e:34:15:23:4e:f4:68:
         40:3d:0f:b1:d8:fa:6d:f6:23:47:ee:c7:ae:a2:37:92:05:e4:
         de:fd:9b:16:44:45:bb:b8:21:f5:e7:ad:61:21:62:0a:d3:ac:
         cb:5c:b3:4c:79:0a:66:05:40:1a:52:76:71:6b:42:78:3c:5a:
         01:9c:f4:86:12:93:47:78:ab:26:7b:50:4f:25:66:d5:41:cb:
         dc:fe:80:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:27:38 2026 by rpki-client