Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File:                     viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier:          dJWZhbNeU5MPDJz1v14zkAzBtvCqaUs0SZgqrRfl5M8=
Subject key identifier:   E1:63:68:01:86:8E:A3:53:DD:27:22:92:21:1B:1C:AF:73:A6:EA:DC
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer:       /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial:       01A15BF987CB9D097DC523534156295F8D18
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number:          05FF
Signing time:             Wed 21 Oct 2026 01:00:42 +0000
Manifest this update:     Wed 21 Oct 2026 01:00:42 +0000
Manifest next update:     Thu 22 Oct 2026 01:00:42 +0000
Files and hashes:         1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
                          2: viphXepqVOryff6ZwH483I13X74.crl (hash: +g65ku5qpYEwj7IKHM4au7GOL5930xmziMTxhFQj77w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 01:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5b:f9:87:cb:9d:09:7d:c5:23:53:41:56:29:5f:8d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
        Validity
            Not Before: Oct 21 01:00:42 2026 GMT
            Not After : Oct 22 01:00:42 2026 GMT
        Subject: CN=e1636801868ea353dd272292211b1caf73a6eadc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3a:90:a5:d6:89:21:64:fb:f3:93:4a:00:e5:
                    33:4a:bd:35:31:5b:2a:e8:20:31:42:ff:16:ab:00:
                    a2:bf:f7:00:16:81:11:bd:41:70:7a:08:a3:b1:68:
                    7b:eb:5b:39:94:49:9f:0d:d2:a2:70:ff:c1:d8:c7:
                    55:5a:65:f3:83:2c:bc:c8:76:e6:12:2a:9a:e2:6b:
                    13:13:26:06:83:aa:27:24:a4:fb:a9:8a:eb:ec:1d:
                    8f:96:54:f0:13:5e:e6:16:51:71:e3:b2:11:ee:6b:
                    58:8c:74:61:77:42:0b:fc:5e:2d:c8:e5:02:89:f1:
                    d8:1b:72:b2:1a:e8:c2:e3:f5:18:fc:4e:3a:99:07:
                    5b:ed:66:16:1b:87:a3:95:67:f3:fe:08:e1:cd:f6:
                    01:d2:3a:29:51:04:82:70:8f:d7:8f:c4:69:23:9d:
                    d4:c7:0c:5f:2f:78:d6:3d:27:f3:73:69:e6:c4:9d:
                    59:dd:9d:a8:70:56:22:0c:7a:4f:a6:87:f1:89:ec:
                    ce:78:ca:34:22:05:0a:e1:65:e2:e5:b9:44:99:13:
                    d3:6f:75:28:18:48:e9:53:48:fd:36:6d:05:53:6a:
                    f3:f7:80:8a:1e:91:92:86:b1:a4:a2:17:64:38:a0:
                    0d:38:c8:ac:9c:43:c6:80:be:ed:4c:5d:5f:cb:60:
                    3c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:63:68:01:86:8E:A3:53:DD:27:22:92:21:1B:1C:AF:73:A6:EA:DC
            X509v3 Authority Key Identifier:
                keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:18:4d:3d:e9:3d:a2:36:27:18:dc:03:f4:a8:cc:9b:c3:
         6d:ae:1b:2c:f7:96:04:39:f5:70:e4:a5:de:0b:d1:3d:06:1c:
         a0:14:53:e6:cb:67:07:51:ea:c6:e8:e7:07:28:ac:61:60:57:
         09:1e:72:43:83:1d:52:d7:37:e6:aa:c0:95:82:90:65:33:84:
         6b:bf:73:ae:f4:2c:62:5a:05:db:63:d1:78:4e:7b:6a:05:a3:
         03:4d:c8:6f:cf:da:d6:57:f6:6d:dc:93:41:92:9b:e6:b5:62:
         81:c1:6c:d0:30:69:fa:e3:b1:3e:be:3a:8a:d9:32:87:93:5d:
         36:76:66:67:52:c0:aa:51:9c:e8:79:97:94:97:51:e2:a7:15:
         03:48:be:a9:8c:1c:35:27:4e:78:83:a4:5a:ec:90:08:f6:c7:
         54:a4:e3:6f:6b:a1:44:10:74:de:8b:d4:87:9f:90:1b:cb:68:
         a7:6c:65:2e:ff:c7:16:a3:13:57:0f:b7:e4:e1:08:89:84:8e:
         fd:a5:74:98:bb:f8:85:34:96:d3:59:99:b9:3b:1d:ca:44:9f:
         0d:d4:ef:f3:6d:ff:b8:4b:32:87:2b:b6:3c:1f:7d:78:2f:c6:
         78:b7:5f:c0:ef:4b:0a:6d:68:16:2a:1a:57:06:11:23:1b:df:
         6a:f9:f4:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 08:19:01 2026 by rpki-client