Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
File:                     V-iYv0IJJPl2ta5FEQi55qAfx9w.mft (raw, json)
Hash identifier:          Dv/lerzHGrMovkNxrzYbZlv0qARzFkTdwCdCxF9av7s=
Subject key identifier:   34:DE:2C:71:06:61:38:82:9C:8A:25:94:47:E7:C3:F1:62:92:10:2D
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Certificate issuer:       /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial:       01A13E950EDE47DC49BAA3707157434AC495
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
Manifest number:          1AAA
Signing time:             Thu 15 Oct 2026 08:01:58 +0000
Manifest this update:     Thu 15 Oct 2026 08:01:58 +0000
Manifest next update:     Fri 16 Oct 2026 08:01:58 +0000
Files and hashes:         1: KOCxXy92oo_VGD1EEbZKaXLLk3Y.roa (hash: uOK+bljSOMX3VyHLaGCq6xj1yuZNQ68NS92rqmrWHYk=)
                          2: MXMQAZBcZXOT6UrfozY1__Ux6go.roa (hash: n4BuxRXKieJpGXIfMattFoqCGgwB9zh0vNAEkZ3ClK8=)
                          3: V-iYv0IJJPl2ta5FEQi55qAfx9w.crl (hash: ydRrD1c2Z8PwNiRd3nY0Jxl0GxOi2uqtOSDrqJMMPUM=)
                          4: V_Ey4EFMly29CFJ0YsUSkgM4B4Y.roa (hash: xtvpREiVdZWuwO2sCzRKcDsqGmiaZ5yRdUpP4zq8aa0=)
                          5: rla9nfquRDNkBA9a7aTOXInR3kY.roa (hash: h1nZyOG+2GkCNjljv4pIretBeB05AhrlFnBuYz+Q++o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 16 Oct 2026 08:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3e:95:0e:de:47:dc:49:ba:a3:70:71:57:43:4a:c4:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
        Validity
            Not Before: Oct 15 08:01:58 2026 GMT
            Not After : Oct 16 08:01:58 2026 GMT
        Subject: CN=34de2c71066138829c8a259447e7c3f16292102d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7d:28:e9:22:7b:ed:53:5c:ed:9f:22:de:b6:
                    43:87:6b:1d:06:9f:9f:44:5d:2b:d9:86:84:bd:50:
                    c5:30:58:6b:9a:4a:6f:9b:81:9b:00:fb:59:bc:37:
                    a2:f6:52:20:c4:72:05:72:e2:e7:12:70:02:f5:a1:
                    ea:cc:67:44:d7:b9:87:dc:f2:58:df:7d:43:29:77:
                    1c:a8:37:e9:3f:1c:a3:4d:be:97:8f:72:fc:0a:26:
                    a8:a0:62:72:b1:00:a5:5a:0f:ed:28:66:2a:9e:39:
                    15:62:6b:fb:d2:cc:04:61:94:5f:35:c9:e1:f4:73:
                    f7:18:f0:46:89:d5:85:5b:b5:17:72:f1:9e:79:2d:
                    b7:38:4e:f0:ee:78:62:fd:a6:d5:b1:50:80:1d:74:
                    67:49:f1:89:e4:47:74:39:b9:71:ed:ee:7b:16:ff:
                    84:49:a5:26:bb:92:32:c0:df:69:e2:79:fd:f5:ab:
                    ca:57:60:da:a4:cf:c0:0b:50:c3:03:ad:fa:c4:2b:
                    ee:61:3c:03:bb:53:4f:9e:48:82:12:71:f0:6a:d8:
                    bd:01:3f:87:a3:5c:c1:e0:bd:f7:86:47:cf:ea:69:
                    bc:20:41:c0:d7:34:31:0d:8c:6f:4d:22:98:e1:b6:
                    ba:4b:1e:c9:17:14:02:a7:83:8e:fe:8d:7a:6c:11:
                    c6:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:DE:2C:71:06:61:38:82:9C:8A:25:94:47:E7:C3:F1:62:92:10:2D
            X509v3 Authority Key Identifier:
                keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:fe:db:ea:55:08:b9:4a:93:bd:5b:b6:2a:18:67:6f:0e:d2:
         0d:f9:88:ff:78:63:3b:5d:fa:91:c6:4f:d5:38:f5:21:4a:00:
         a9:37:e9:38:28:51:76:94:7f:aa:a0:76:85:5c:8d:06:04:95:
         5d:ff:bf:5a:5d:fb:26:24:80:0d:fd:59:38:fb:b8:e5:9e:4a:
         cc:8f:e4:7a:a4:5c:41:a3:e9:17:f4:6a:c4:24:21:5b:67:f6:
         ce:5e:0b:01:67:15:05:9b:08:f3:08:7d:c0:f7:26:3f:af:60:
         8b:5e:fc:5e:1d:88:5b:61:2e:dd:d2:66:5d:6f:a2:19:07:a7:
         2c:c4:02:c0:64:f0:c1:74:1c:0a:d0:80:68:22:dd:2d:1f:cc:
         b1:a2:f7:6f:f0:16:15:ae:54:6b:67:91:72:70:80:27:32:f2:
         b1:13:51:28:fa:fb:51:99:10:31:db:5a:d2:73:ef:27:79:c0:
         35:7b:e8:45:4b:bb:a0:35:39:93:e3:ba:41:44:f9:54:02:84:
         ea:76:4a:fc:bd:5e:d1:0b:c9:dd:45:8e:39:a9:33:f7:fd:bc:
         bb:09:2c:22:a4:4b:4f:72:92:28:4f:b8:93:fb:56:a8:81:b5:
         2d:b1:b2:19:46:97:cf:04:37:b4:08:3f:48:75:04:6e:f9:ca:
         7c:b1:ea:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 16:02:36 2026 by rpki-client