Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
File:                     vttqTtOT2KO3UH-Wo4vuDEyLR38.mft (raw, json)
Hash identifier:          sGJLSoXhdzKQlgmpYkloJsLDPkkq8Onn6gDKHJe8Pa0=
Subject key identifier:   59:B5:6C:A8:A2:54:1C:47:A2:CD:16:46:7E:7E:80:FA:E1:91:65:96
Authority key identifier: BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F
Certificate issuer:       /CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
Certificate serial:       01A113054AA74F43521EA59D45D1C5A3C882
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
Manifest number:          1A8D
Signing time:             Tue 06 Oct 2026 21:01:16 +0000
Manifest this update:     Tue 06 Oct 2026 21:01:16 +0000
Manifest next update:     Wed 07 Oct 2026 21:01:16 +0000
Files and hashes:         1: 2gOMElZpuYjYWwfxZPDkr57xubA.roa (hash: VyukPCJwz31E+u5Ce9cCzwq/Lsn1oqGSgyO+hsnU0ek=)
                          2: vttqTtOT2KO3UH-Wo4vuDEyLR38.crl (hash: sQrtwWtjGWf6LnZf15GycoYmP6tSHsH1zRF+32SWppY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 Oct 2026 21:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:13:05:4a:a7:4f:43:52:1e:a5:9d:45:d1:c5:a3:c8:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bedb6a4ed393d8a3b7507f96a38bee0c4c8b477f
        Validity
            Not Before: Oct  6 21:01:16 2026 GMT
            Not After : Oct  7 21:01:16 2026 GMT
        Subject: CN=59b56ca8a2541c47a2cd16467e7e80fae1916596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:4e:cc:6c:51:1b:5f:ad:0c:54:11:ed:7a:
                    8a:b9:56:c5:e7:cb:52:b6:43:ea:f3:91:e8:5c:a5:
                    56:70:30:46:40:ce:c8:57:b8:de:36:9f:9e:0e:fb:
                    39:8e:5b:ca:92:2a:3d:44:98:6f:f4:a8:60:7e:6a:
                    b8:4b:37:a4:45:62:a7:84:e3:e1:17:f2:5b:72:54:
                    6b:dc:45:f6:a0:da:a2:1a:2e:e3:73:79:3a:7d:82:
                    f5:ee:c1:91:c0:87:f2:ca:e8:a9:da:a8:4e:c0:ea:
                    b4:a2:df:43:4c:1f:0c:17:6f:28:90:c7:4c:27:12:
                    f1:64:94:38:15:36:35:26:5b:1c:da:2b:6e:c0:64:
                    87:09:ad:49:af:7c:6b:8a:89:56:cf:d1:74:09:34:
                    64:39:6a:0f:8c:02:f6:4a:de:44:96:bb:20:ae:e9:
                    52:32:87:77:22:7c:bf:f9:b9:9f:0a:24:9e:17:4f:
                    d2:65:e5:56:16:c1:d9:dc:39:f6:6f:6d:48:f5:ed:
                    e5:e6:23:ee:9a:72:c0:40:f8:a5:21:c5:dc:39:b4:
                    a8:87:e5:f6:db:b5:a7:52:7e:5c:f2:c1:f8:48:ca:
                    65:cb:9c:cb:ee:e0:c0:51:4b:7f:9c:4c:5c:c9:9d:
                    bc:67:6d:4e:96:2b:93:01:c6:cb:12:6f:35:be:8c:
                    97:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:B5:6C:A8:A2:54:1C:47:A2:CD:16:46:7E:7E:80:FA:E1:91:65:96
            X509v3 Authority Key Identifier:
                keyid:BE:DB:6A:4E:D3:93:D8:A3:B7:50:7F:96:A3:8B:EE:0C:4C:8B:47:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vttqTtOT2KO3UH-Wo4vuDEyLR38.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d4635f-2195-4d94-8d16-470a93b3d3e7/1/vttqTtOT2KO3UH-Wo4vuDEyLR38.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:a3:95:c4:d3:76:bf:f5:0b:9e:8c:a1:cc:05:6b:be:3a:0d:
         7d:50:c5:63:94:cd:ad:86:02:9f:93:60:a2:6b:5e:83:f7:00:
         ce:2c:50:9a:f0:62:4e:02:64:bc:a9:16:8a:06:f2:3c:6d:9f:
         7b:c6:35:70:39:97:98:6c:13:3c:9c:3a:df:d5:20:6e:ee:1f:
         b7:92:7d:bd:d2:5d:e4:80:83:fd:13:b2:4b:0e:b4:82:c7:19:
         90:fb:e5:3d:0f:39:d6:e8:8f:2c:6b:55:ec:a1:7f:ad:ea:e1:
         bf:ac:f8:3a:75:f8:a4:f2:c0:33:26:50:4b:bd:8e:cd:e0:29:
         d8:c5:31:df:6e:7e:cd:a1:09:97:5e:60:6b:1d:06:b6:4d:46:
         fe:dd:0d:56:da:9e:aa:82:00:a0:bb:59:12:34:a4:9c:71:c7:
         17:22:f4:a2:46:7f:a0:d2:c1:41:e3:b7:bd:27:86:1b:41:58:
         65:44:99:67:23:40:42:f9:ec:69:91:61:b4:7e:85:86:86:40:
         bb:ef:62:df:e8:8e:fb:77:82:58:d4:50:fe:c1:61:a6:17:41:
         e3:56:08:ae:2b:06:d5:72:55:0f:3f:bc:76:02:e3:f6:79:aa:
         e5:5f:e3:f3:e4:f4:ab:5e:30:76:cd:74:32:c3:ab:e8:38:5e:
         96:f0:ae:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 01:01:33 2026 by rpki-client