Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File:                     vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier:          nXp9jo9qGfcBRmkHkNtR9Iu0dtx0XEdZeZlrQzj9zIk=
Subject key identifier:   99:8E:0C:F2:62:8A:85:FE:CA:06:52:19:7C:10:6D:0C:8C:FF:61:25
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer:       /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial:       01A164C6E92F8D82709784E722D309E23952
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number:          06D3
Signing time:             Thu 22 Oct 2026 18:01:59 +0000
Manifest this update:     Thu 22 Oct 2026 18:01:59 +0000
Manifest next update:     Fri 23 Oct 2026 18:01:59 +0000
Files and hashes:         1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
                          2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: e2RWWbqLLUojxO/YujMLNEHegDBASMx4M2hmbKXgExM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 23 Oct 2026 17:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:64:c6:e9:2f:8d:82:70:97:84:e7:22:d3:09:e2:39:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
        Validity
            Not Before: Oct 22 18:01:59 2026 GMT
            Not After : Oct 23 18:01:59 2026 GMT
        Subject: CN=998e0cf2628a85feca0652197c106d0c8cff6125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:ae:f3:d9:51:fc:4a:df:ba:95:f0:59:08:
                    5a:61:fc:9d:b9:b6:0a:25:8c:22:b3:13:a7:8a:c0:
                    9c:49:c7:8c:71:14:30:f9:1e:43:17:2b:06:f6:b4:
                    dd:a2:de:ce:d7:e0:4b:4d:c2:b6:86:c3:c9:bb:4b:
                    2c:ff:4e:2f:94:00:7c:04:96:3b:21:8e:76:7e:d1:
                    09:22:83:25:14:86:7d:ef:58:da:fa:ef:a2:f9:9b:
                    61:7e:42:9c:b9:b5:87:e1:9d:de:1c:12:45:68:43:
                    99:89:d1:c5:84:96:29:dc:26:ab:46:84:71:c2:ce:
                    6b:83:8a:4c:d4:dd:1e:80:dc:ab:11:e0:16:fd:59:
                    ca:3f:78:65:1b:de:55:1f:89:c3:f7:d9:56:83:ae:
                    cb:84:bd:b3:5c:8c:79:04:42:de:65:22:1c:e1:9b:
                    99:92:3b:3c:6b:5a:32:33:10:78:8b:1c:02:ff:13:
                    ee:4b:3c:a4:d8:9f:6d:d2:62:af:eb:8b:f0:80:99:
                    88:cd:db:9f:ba:83:5b:d7:a1:b5:3b:e3:9a:fa:d5:
                    da:99:49:cf:16:38:01:c9:4d:d0:f4:05:ef:7d:a5:
                    e5:21:98:f6:64:3e:30:34:f4:80:7d:2d:91:dc:2b:
                    18:f6:ca:92:ef:eb:b5:f5:77:6d:a7:34:92:ee:29:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:8E:0C:F2:62:8A:85:FE:CA:06:52:19:7C:10:6D:0C:8C:FF:61:25
            X509v3 Authority Key Identifier:
                keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:3c:b3:18:71:47:d9:04:9a:8f:1e:c1:68:23:90:65:75:4b:
         a0:89:b6:b4:04:86:e3:6e:1f:67:eb:bb:d3:6f:4a:5d:b5:8c:
         40:df:a7:eb:2f:d2:1c:77:7a:7f:77:89:e9:cb:e2:0b:51:bc:
         34:33:d6:a0:b3:e8:93:fe:48:f1:23:51:bf:0b:66:e5:a4:63:
         13:b2:f5:82:74:ef:b1:6f:ce:a3:bf:0e:f5:c9:49:f6:ae:1a:
         c2:79:98:b8:0b:38:d4:14:af:35:ba:2c:b5:0f:eb:31:41:a8:
         28:57:9d:e6:6e:0c:2c:7c:a5:00:89:06:35:bb:05:44:a8:63:
         19:45:0d:4f:fc:b8:a0:b7:1f:85:9c:47:4e:b1:65:be:cd:b2:
         5d:9c:e2:07:3a:cc:c7:ec:27:85:47:4b:6d:15:75:82:a0:68:
         09:82:f2:96:3c:04:a1:14:85:cf:dc:4f:1c:31:77:0d:a8:3d:
         c1:4b:0d:38:f4:de:c5:67:70:0b:4a:ba:32:81:2a:ae:bf:79:
         37:19:6e:8c:c2:78:82:6c:93:22:2a:81:45:06:b6:5f:88:fb:
         40:76:b6:c2:5a:e3:6b:9f:5d:34:24:bf:ad:aa:da:d8:68:8f:
         25:01:16:ce:11:a7:ba:5a:99:f6:d9:e4:fd:c9:2c:c1:71:f1:
         c9:39:54:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 02:26:39 2026 by rpki-client