Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
File:                     V4DOZAV5R263qnPBnLdOvt_daCs.mft (raw, json)
Hash identifier:          Pjl8ylArU+FOUaAbcYw5muygv+dJOh6CYwr6M9scRWw=
Subject key identifier:   AF:62:6F:F3:E1:B4:90:92:0C:EA:C0:A6:36:1A:88:EB:96:3B:DD:F4
Authority key identifier: 57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B
Certificate issuer:       /CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
Certificate serial:       01A0E406FE860B9CE657D38C590B3316DCF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
Manifest number:          11A9
Signing time:             Sun 27 Sep 2026 18:00:58 +0000
Manifest this update:     Sun 27 Sep 2026 18:00:58 +0000
Manifest next update:     Mon 28 Sep 2026 18:00:58 +0000
Files and hashes:         1: RDCVzu3arsvwfYZ10d3OBxjdU-Q.roa (hash: BRLaihFLCVYFLpw45+cqT3ozkSzNaiRjjdbnkvsoEfo=)
                          2: V4DOZAV5R263qnPBnLdOvt_daCs.crl (hash: ovKqONO2alGa8M1KVB/lWFrX67fEuo9GqaruR4g/bIw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e4:06:fe:86:0b:9c:e6:57:d3:8c:59:0b:33:16:dc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5780ce640579476eb7aa73c19cb74ebedfdd682b
        Validity
            Not Before: Sep 27 18:00:58 2026 GMT
            Not After : Sep 28 18:00:58 2026 GMT
        Subject: CN=af626ff3e1b490920ceac0a6361a88eb963bddf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:86:ce:d6:bf:db:12:b1:c8:8b:9f:28:f0:c9:
                    55:6e:05:89:37:91:9f:ab:88:c1:75:c1:4c:77:b8:
                    78:74:66:a5:91:af:bc:b0:d7:32:4c:70:90:77:43:
                    2d:c3:0d:0c:e1:02:b2:26:76:5e:63:f5:dd:d0:b3:
                    4c:3f:6a:63:00:99:78:2d:20:1b:d7:c3:a4:53:ac:
                    5d:33:14:8a:ec:6b:eb:87:1a:05:cd:8f:e9:b8:a0:
                    94:2c:3f:47:92:69:34:92:fe:b2:28:02:56:8c:72:
                    18:43:f5:72:57:5e:dc:e4:1f:98:7d:d4:eb:08:d9:
                    44:36:89:60:53:ad:ce:69:54:23:a4:30:68:5d:d1:
                    27:4d:ff:f6:5a:4e:da:55:bf:08:3c:52:fb:06:e5:
                    65:50:ff:79:f5:48:56:93:d9:13:5b:5a:b2:f0:e2:
                    81:26:d6:d0:be:94:10:06:74:09:9b:e6:82:32:d0:
                    28:78:a8:0c:1c:ee:58:9c:2d:31:35:a7:f7:ca:66:
                    60:21:19:59:0c:88:eb:69:bb:9f:c6:74:79:af:53:
                    04:6b:54:db:83:82:ca:d3:39:2c:9e:55:4d:4a:f8:
                    c0:1b:bb:a0:e3:f6:da:e9:9a:2d:67:53:e7:ac:b6:
                    0e:86:6e:65:6c:08:56:41:1a:2c:ac:92:2b:fe:fc:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:62:6F:F3:E1:B4:90:92:0C:EA:C0:A6:36:1A:88:EB:96:3B:DD:F4
            X509v3 Authority Key Identifier:
                keyid:57:80:CE:64:05:79:47:6E:B7:AA:73:C1:9C:B7:4E:BE:DF:DD:68:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V4DOZAV5R263qnPBnLdOvt_daCs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/29/dd6db4-f523-4de6-8be6-e7e9715e7813/1/V4DOZAV5R263qnPBnLdOvt_daCs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:04:ef:c1:69:2a:f5:21:07:86:78:bb:3d:19:ba:a7:a1:20:
         45:71:61:2f:f3:1c:ce:43:21:bd:96:eb:f7:f2:a8:f4:07:38:
         a2:c5:53:59:65:fe:1d:dd:1f:41:03:08:ec:eb:d6:74:db:7c:
         0f:36:b2:e1:0e:cb:fd:5e:e5:d7:da:7f:2c:de:07:7d:a6:02:
         63:3e:75:39:4b:2a:91:40:ce:1f:e1:d6:b7:23:2e:3d:29:1a:
         5f:14:6c:1d:47:20:a4:20:0d:35:de:b5:57:15:3b:55:c7:80:
         99:13:a9:de:40:1a:17:c0:1b:bd:cd:bb:ce:2f:29:49:ce:3b:
         13:7c:58:11:41:cb:0f:da:f8:30:cf:91:3b:fd:e1:ac:1c:af:
         34:ef:9d:bc:6b:9b:8e:7e:76:91:7a:d4:cd:93:46:17:ae:5a:
         db:bf:46:44:78:de:7c:1d:5b:5f:14:b6:26:a6:a8:48:fe:4f:
         ae:03:83:d8:12:57:4f:25:6a:23:5b:da:94:2f:9f:49:90:59:
         96:3b:75:7a:3f:22:ca:80:9b:f2:63:f6:01:da:01:a4:c4:e9:
         9a:6f:ce:09:31:59:d0:e7:d6:ab:5b:e0:4b:0a:6a:d7:ac:36:
         ba:96:3c:49:4e:bc:b5:cc:89:20:69:2a:4e:ca:c2:4c:a9:36:
         ac:a8:78:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:16:35 2026 by rpki-client