Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
File:                     Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft (raw, json)
Hash identifier:          +cRKoOxWuSUV/8aByP/tLMcRmu+FIl1UjB4Rrdvc5qc=
Subject key identifier:   6B:DA:1C:25:0D:22:1C:96:BE:11:EC:ED:84:84:CD:F9:2E:1B:B3:FB
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Certificate issuer:       /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial:       01A17FD0767B7022D33F04F5186085A46B87
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
Manifest number:          0140
Signing time:             Wed 28 Oct 2026 00:02:10 +0000
Manifest this update:     Wed 28 Oct 2026 00:02:10 +0000
Manifest next update:     Thu 29 Oct 2026 00:02:10 +0000
Files and hashes:         1: IiKdZihxK24qAbY3IlsJBY8DWuI.roa (hash: GiUmS/2trsIX5BrmBaADREO7MrJkpyzXZUgRulZKo18=)
                          2: KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa (hash: LX3Hr454zl2MUCj61HpMXcW0BQ8pIuxmh8gRh4mgIis=)
                          3: Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl (hash: rzA+7OiVmRYBSbKLj+E0M7o5X9sZ92gDwwlKeiBKPuE=)
                          4: XGylWLMmuf-6cyXPIHTSqm3GCd8.roa (hash: Bd9s12c8P6Pe+DYxSBmdpuoMDBh5umpoBqgkM4LDkJw=)
                          5: aWVkUEp4lm12y5qwWv2adJ66-rs.roa (hash: Hq+MYEUAwJVfh/YoUoYayEoIk7iU3N4ROU0WjO5xyMA=)
                          6: a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa (hash: YQ7WevldUaPUf2luIJT1enFkQ7Ao715lMC2Xh1aTnXU=)
                          7: mX5yBu9SXhlcsrImPSehotm7bas.roa (hash: +AwpNCGeeHcy8ov56jxqSP8MLjuzljj6nR9dFS6V4jM=)
                          8: uTiURM_DMHiv75dNHPrAJFdnAd0.roa (hash: sF0ZyLzuBt8uyr+UBykHairkTID8q9WL1Vh7lTAxp1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:d0:76:7b:70:22:d3:3f:04:f5:18:60:85:a4:6b:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
        Validity
            Not Before: Oct 28 00:02:10 2026 GMT
            Not After : Oct 29 00:02:10 2026 GMT
        Subject: CN=6bda1c250d221c96be11eced8484cdf92e1bb3fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:26:f0:1b:d7:ab:c5:49:29:9f:1d:90:24:31:
                    0f:0a:cf:9a:2d:9f:e1:bc:df:db:25:79:c0:18:63:
                    6c:6e:b8:43:74:8c:b5:3d:38:e1:1a:dd:b9:11:cc:
                    e8:25:26:e8:61:b4:2e:78:d0:87:81:e0:04:59:92:
                    26:9b:23:f6:9b:72:58:65:3d:7e:4d:61:36:cd:81:
                    09:10:bc:8d:bc:f0:18:69:61:18:06:f5:f0:89:3e:
                    0f:c1:b7:8e:90:5a:62:c5:45:0f:96:f4:be:8a:4d:
                    64:27:8d:25:dc:d1:da:94:ef:00:cb:2d:1a:19:9f:
                    69:0c:93:e1:f6:00:47:60:a4:d5:8d:d1:e6:cf:af:
                    e3:59:d8:ca:6c:e1:52:01:ba:2c:09:bf:06:f1:a3:
                    52:fb:6a:02:d4:1c:6b:00:66:85:47:68:3e:09:a0:
                    95:f8:52:fb:6e:36:95:d4:39:e3:4a:61:77:6d:d8:
                    91:d7:b8:28:bf:c2:c5:bd:77:e5:59:5b:a1:02:0f:
                    a2:2d:ed:d1:a3:22:ae:20:b2:15:d1:76:04:a0:b8:
                    ed:86:4c:b0:2a:4e:7b:1c:b6:c6:a6:7a:5c:96:19:
                    fe:39:01:2d:0d:09:52:00:33:a9:3b:9c:51:16:ba:
                    bd:37:d8:0f:61:2f:88:3c:30:71:2f:c4:f0:68:e8:
                    b1:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DA:1C:25:0D:22:1C:96:BE:11:EC:ED:84:84:CD:F9:2E:1B:B3:FB
            X509v3 Authority Key Identifier:
                keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:03:96:67:49:b9:8b:ce:5a:5a:1e:f1:28:e4:1e:52:8f:9a:
         aa:10:74:d6:0a:fb:3e:64:a6:59:87:8e:36:43:aa:0f:eb:21:
         b8:1c:3f:36:ef:3d:d4:a6:96:27:3e:76:e6:ea:ba:4d:5c:f1:
         48:4e:91:e7:d5:d8:6a:cb:8a:10:55:ab:43:76:20:98:6f:9c:
         fc:1c:78:95:4b:0b:e4:3e:ca:17:04:b2:58:37:6e:f9:78:b5:
         1f:ff:f4:ed:9f:c3:d1:40:a4:1b:04:3c:a0:d7:0e:20:88:50:
         ff:ff:7e:e4:67:23:51:f4:c1:ed:fb:d0:a1:94:12:29:28:7e:
         e5:5d:11:96:ba:4f:86:5d:e7:b9:d7:7e:f7:61:74:83:d4:78:
         07:d6:b2:27:ce:21:94:f1:57:e0:2a:93:9d:36:dd:eb:19:fa:
         4f:8e:8f:af:e5:02:69:9e:e6:32:cb:78:7e:ba:63:f4:31:a4:
         9e:44:08:b9:97:62:fe:57:83:c2:32:69:eb:cc:53:56:46:88:
         a8:9f:82:27:22:37:d6:fd:a0:7d:0f:2a:c4:a2:fc:c5:dd:dc:
         42:c5:cd:af:a1:07:65:9d:4c:81:a1:e4:fa:09:4c:60:e9:81:
         6d:fc:95:70:5d:bd:35:32:ce:47:7f:0e:0f:a1:61:ec:c6:64:
         f0:12:05:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:16:16 2026 by rpki-client