Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          OezsKOpeCOSRJJJGOteMhPRqgU2WRa8CXknWetMzCC0=
Subject key identifier:   1E:EC:31:F2:1E:12:1A:EE:45:DC:5B:E9:30:AF:EC:43:3D:98:E0:10
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       01A0DC84E3EAC6D13AFB74579E8E89C1979F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1A03
Signing time:             Sat 26 Sep 2026 07:01:31 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:31 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:31 +0000
Files and hashes:         1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: VMCDvInJFEaUWT86Om7sfKE/QlviKM6hfDWl9xVXBNs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 02:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:84:e3:ea:c6:d1:3a:fb:74:57:9e:8e:89:c1:97:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Sep 26 07:01:31 2026 GMT
            Not After : Sep 27 07:01:31 2026 GMT
        Subject: CN=1eec31f21e121aee45dc5be930afec433d98e010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:eb:e5:28:da:a6:c6:e7:07:7d:54:91:c1:f8:
                    72:7a:50:0a:2f:4d:fa:3e:81:16:73:eb:8a:d4:65:
                    69:9e:d3:e3:fd:b1:b8:e9:07:1d:a5:71:40:11:25:
                    c4:bd:62:d2:40:4a:26:89:db:5e:4f:71:1c:2b:9d:
                    fc:37:a2:fc:7d:64:ec:a4:5f:a1:f1:e6:94:50:1d:
                    a5:60:78:50:c9:26:7b:e1:17:5f:53:dc:17:16:7e:
                    d8:81:22:ab:33:3f:94:4e:60:d3:a7:81:f4:af:09:
                    89:1d:b9:3a:2d:2f:96:b1:a0:d6:58:d0:35:56:1c:
                    bc:f9:72:0b:c7:fb:23:e3:4f:84:3c:91:05:b8:01:
                    93:bb:41:80:b5:5a:fb:db:01:d2:6c:02:d8:1d:0c:
                    e3:72:22:b6:ba:e5:27:f1:a2:a9:7d:d5:ab:a3:5b:
                    ed:09:f2:33:b4:f8:4d:e6:aa:6c:35:6a:60:4b:ea:
                    26:7d:2a:78:d6:8e:02:34:98:7b:fe:29:f5:ff:e9:
                    6e:ae:eb:76:e3:bd:d7:2f:2b:f4:82:33:e7:1f:45:
                    64:c4:b3:4f:d4:08:2d:13:91:63:2a:91:32:06:46:
                    4d:38:87:10:a5:a2:c6:14:ad:71:a9:dc:2f:e5:c1:
                    76:2b:f1:e9:fe:78:8e:8b:0c:29:d5:e1:ba:18:03:
                    ca:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:EC:31:F2:1E:12:1A:EE:45:DC:5B:E9:30:AF:EC:43:3D:98:E0:10
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:10:af:38:00:e7:5b:dc:a7:b9:0d:b7:97:91:4b:7d:ab:6f:
         cb:68:b5:a6:9a:a4:0c:6c:32:39:8a:16:e6:48:09:95:bc:cf:
         fb:32:17:4a:0e:1d:9d:33:d6:95:78:f4:3d:38:ec:65:48:e9:
         7c:ad:16:51:cb:2b:46:92:2f:61:92:9d:ef:e4:42:38:b8:35:
         9c:21:02:0f:0b:88:ea:ff:25:80:f6:21:cc:3c:11:fc:8a:24:
         d0:b5:af:ff:5f:ab:0e:0b:09:8f:72:a0:c4:43:54:46:4a:9e:
         3c:cc:3c:2a:d3:35:c4:70:9f:54:22:8f:b7:8b:ff:1a:e8:a3:
         73:0e:e5:6a:33:2d:c8:b2:05:60:74:d2:ee:57:b8:2f:70:8e:
         0c:e0:cd:52:e4:ef:1b:3d:40:5e:af:a8:a8:9f:7f:bd:f7:2f:
         47:bb:c4:2c:67:5b:55:10:db:9a:9b:ab:a0:4b:1a:04:d2:59:
         44:8d:92:b0:12:de:b6:aa:4a:a8:d2:34:49:78:35:c4:eb:64:
         83:68:28:c4:63:9e:0c:5b:38:b1:29:05:d5:cc:2d:24:39:85:
         fa:bd:30:cb:a2:d7:9d:26:94:18:0e:32:22:83:1e:d3:f0:53:
         35:87:08:cc:d6:6c:33:a2:04:52:5d:9b:6c:33:71:a6:6b:42:
         c1:22:0a:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDchOPqxtE6+3RXno6JwZefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MmM5YTFjOWM0ZmY3OTNlODg4YmQ1ODNkY2E5ODE1Y2M0
NTc0YzAwHhcNMjYwOTI2MDcwMTMxWhcNMjYwOTI3MDcwMTMxWjAzMTEwLwYDVQQD
EygxZWVjMzFmMjFlMTIxYWVlNDVkYzViZTkzMGFmZWM0MzNkOThlMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAruvlKNqmxucHfVSRwfhyelAKL036
PoEWc+uK1GVpntPj/bG46QcdpXFAESXEvWLSQEomidteT3EcK538N6L8fWTspF+h
8eaUUB2lYHhQySZ74RdfU9wXFn7YgSKrMz+UTmDTp4H0rwmJHbk6LS+WsaDWWNA1
Vhy8+XILx/sj40+EPJEFuAGTu0GAtVr72wHSbALYHQzjciK2uuUn8aKpfdWro1vt
CfIztPhN5qpsNWpgS+omfSp41o4CNJh7/in1/+lurut2473XLyv0gjPnH0VkxLNP
1AgtE5FjKpEyBkZNOIcQpaLGFK1xqdwv5cF2K/Hp/niOiwwp1eG6GAPKrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7sMfIeEhruRdxb6TCv7EM9mOAQMB8GA1UdIwQY
MBaAFFUsmhycT/eT6Ii9WD3KmBXMRXTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEt
Yjc4ZmY4MGE4MDI3LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi81YmNlYTUtOGU0NS00NThhLWIwMzEtYjc4ZmY4MGE4MDI3
LzEvVlN5YUhKeFA5NVBvaUwxWVBjcVlGY3hGZE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAthCvOADn
W9ynuQ23l5FLfatvy2i1ppqkDGwyOYoW5kgJlbzP+zIXSg4dnTPWlXj0PTjsZUjp
fK0WUcsrRpIvYZKd7+RCOLg1nCECDwuI6v8lgPYhzDwR/Iok0LWv/1+rDgsJj3Kg
xENURkqePMw8KtM1xHCfVCKPt4v/Guijcw7lajMtyLIFYHTS7le4L3CODODNUuTv
Gz1AXq+oqJ9/vfcvR7vELGdbVRDbmpuroEsaBNJZRI2SsBLetqpKqNI0SXg1xOtk
g2goxGOeDFs4sSkF1cwtJDmF+r0wy6LXnSaUGA4yIoMe0/BTNYcIzNZsM6IEUl2b
bDNxpmtCwSIKoA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 09:06:33 2026 by rpki-client