Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          vrLwxt9eawEmxb4aTWn3BazSktOXksD2K9SVRb1eg4M=
Subject key identifier:   FC:EC:02:16:D0:22:EE:31:73:E0:84:58:D8:BD:B7:B3:EE:44:73:FF
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       01A1242FF0B4833F481BAD907473FD3EE990
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          0288
Signing time:             Sat 10 Oct 2026 05:01:23 +0000
Manifest this update:     Sat 10 Oct 2026 05:01:23 +0000
Manifest next update:     Sun 11 Oct 2026 05:01:23 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: 2HF/ZFKD9U6rOfbit57c/ifp1/50iLVkO0/A4meusaI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 00:43:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:24:2f:f0:b4:83:3f:48:1b:ad:90:74:73:fd:3e:e9:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Oct 10 05:01:23 2026 GMT
            Not After : Oct 11 05:01:23 2026 GMT
        Subject: CN=fcec0216d022ee3173e08458d8bdb7b3ee4473ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:6f:3b:f6:a7:b3:a3:86:b3:3b:35:17:54:d6:
                    9f:ac:a4:54:fa:7a:e2:4d:00:d0:0b:4f:92:da:f2:
                    0a:c8:20:c9:32:7f:e1:c5:d1:5b:6f:31:a1:0c:cf:
                    9b:24:fa:6d:51:51:26:e8:77:7f:4b:99:d5:df:8a:
                    ee:2e:5c:e6:9e:e2:0e:3c:86:3c:8f:38:97:38:9e:
                    4c:0f:ac:da:70:6c:cc:ac:89:0a:9c:3b:b0:fd:98:
                    a2:98:9e:39:bb:16:c5:39:7b:0c:3e:6b:c6:e9:db:
                    41:a4:b8:47:2b:c7:af:4a:d5:21:42:79:98:29:f6:
                    69:08:7d:e2:2a:a6:b4:62:58:6a:3a:e7:05:4f:b5:
                    51:1f:97:22:b4:ca:2b:c0:a9:d2:97:49:e6:22:96:
                    2d:34:1e:5f:81:c8:ce:d8:be:09:a7:46:a1:04:91:
                    07:14:cc:66:d6:9d:a2:fb:ee:a4:e1:44:be:d5:53:
                    9f:8d:c5:37:c9:26:45:41:3c:3f:6d:8e:53:ae:f6:
                    e2:ef:3b:3e:92:fa:84:70:13:9a:b3:3b:58:a0:9b:
                    77:02:ed:b4:42:89:cc:f4:50:48:52:d0:8d:b1:02:
                    87:bc:75:bb:c4:c5:e5:84:53:13:a5:12:ec:f7:70:
                    e7:6c:45:b8:b0:b9:a7:95:23:28:fc:47:8d:d9:6c:
                    22:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:EC:02:16:D0:22:EE:31:73:E0:84:58:D8:BD:B7:B3:EE:44:73:FF
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:5f:f0:9b:6b:b7:56:28:f9:60:0e:3d:db:c3:93:ff:90:e3:
         ef:6a:8b:d2:a1:a4:0d:1d:1e:4f:1a:7b:1a:89:6a:6d:00:34:
         c7:3c:b7:6c:23:67:a9:68:7e:15:88:ec:ac:e9:9e:23:d0:db:
         14:ae:9f:d9:99:36:85:11:05:31:1e:87:78:e8:19:f5:75:26:
         5c:69:2f:37:35:a7:1c:41:3b:b9:8e:f4:d8:e4:05:c7:91:95:
         e6:55:43:5f:b3:dd:2c:71:6c:76:22:b2:32:aa:4c:91:b8:1a:
         dc:f9:1f:dd:64:de:87:80:d0:d0:27:fb:35:a2:86:30:df:3f:
         d1:3b:e7:fd:c8:27:e8:54:89:f4:d3:3d:ab:f0:2f:4f:18:c1:
         74:84:29:02:ff:25:d0:8a:59:0c:e2:05:02:1b:c2:a9:ff:40:
         83:17:32:f5:a0:99:47:78:f8:51:50:a2:84:0c:b8:70:04:4a:
         94:5d:5c:a5:97:1f:8d:9b:1f:3e:f9:26:70:63:da:e9:4b:de:
         7d:3b:5d:54:28:42:05:c5:a8:3f:64:bc:c6:5b:b3:d1:7a:b9:
         d4:d9:1a:62:7a:c7:86:61:5a:4c:4f:40:63:b1:fe:03:80:e0:
         6e:bf:0c:6f:d3:4e:82:44:c8:d5:86:7a:64:c4:2e:75:91:46:
         09:24:e3:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 10:38:11 2026 by rpki-client