Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File:                     VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier:          u0ARi+0Ktoj9GIeQ/3Yw1BWEPnPuiYMujGrA5j3IPkY=
Subject key identifier:   79:FC:33:17:2A:EA:81:E3:6A:F6:EE:28:DF:4F:B1:EC:4A:BA:3E:2A
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       01A0C5207A7C3AEECA19410A08C6035E15EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number:          0EE6
Signing time:             Mon 21 Sep 2026 18:00:35 +0000
Manifest this update:     Mon 21 Sep 2026 18:00:35 +0000
Manifest next update:     Tue 22 Sep 2026 18:00:35 +0000
Files and hashes:         1: 06HRdAWI7K2GHC0wiysXwWRdH5Q.roa (hash: MBqO5khvph0CDQ3O5u2swOvhCzIMx81udkJ4wkAXnFM=)
                          2: S5wgrs55mUukAL2woTkoggOUw2s.roa (hash: +sjSrHKEHcONahJ8eq56SxZon63wWpf9HC2Ed/+OC3E=)
                          3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: YwQjnYC/SMdp49mC/fS1hrlJtQeq/he88dShhZvYbws=)
                          4: n7trU9OazAsFuOKX3rIVdXGInW0.asa (hash: We6vzeYPi/1x/iR8jtyyjqTwtIxiEVhlLLiF6qP7xTg=)
                          5: zATzhpg9xiU_0_8udzecrn-BFdM.roa (hash: LXOXPntIpCX+wDiB9sHExrI1VhXJrNUwhw9OhSaFlRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 18:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:20:7a:7c:3a:ee:ca:19:41:0a:08:c6:03:5e:15:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Sep 21 18:00:35 2026 GMT
            Not After : Sep 22 18:00:35 2026 GMT
        Subject: CN=79fc33172aea81e36af6ee28df4fb1ec4aba3e2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:12:23:05:a1:37:d7:32:47:97:b6:45:00:35:
                    f0:66:d5:52:12:2b:0e:c8:b0:e5:dc:b5:12:69:34:
                    a0:8b:a5:95:67:7f:dd:13:f7:14:a8:4c:0f:9e:60:
                    25:3c:52:e3:8b:d4:f3:72:4e:ee:1b:45:34:78:20:
                    9f:77:4e:b7:c1:34:2a:73:20:aa:ea:ff:b0:92:9c:
                    9c:55:d2:3a:63:77:70:3c:d8:70:e9:72:6b:0c:c8:
                    87:1c:00:7a:8b:38:e7:d2:f8:b9:ab:65:5a:6c:ba:
                    62:1f:4e:a8:6c:d8:95:4a:59:d9:2e:63:9b:13:d9:
                    11:34:02:85:8b:b6:25:da:31:47:a7:87:27:91:6a:
                    07:1d:99:d2:0e:0f:90:24:35:a7:88:90:34:55:bf:
                    c5:5c:01:86:05:f6:d6:2e:29:ce:56:87:6f:7c:ad:
                    b1:32:a6:70:2e:85:c1:cb:2e:32:cf:1f:34:40:8e:
                    a4:cf:66:0f:5c:f2:fd:37:10:3a:44:5a:98:41:68:
                    2d:5c:fc:11:0e:2c:d6:7a:9a:4c:43:42:7c:99:f4:
                    67:a3:8f:d8:b8:ec:4c:04:ed:fc:4d:b4:ba:71:d5:
                    96:54:83:d5:66:83:9f:e4:05:70:fa:2d:65:90:78:
                    96:55:85:ca:17:6e:6e:4e:98:23:63:b7:69:b6:35:
                    71:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:33:17:2A:EA:81:E3:6A:F6:EE:28:DF:4F:B1:EC:4A:BA:3E:2A
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:21:58:78:aa:cd:56:8a:bb:b3:fa:3a:64:ce:9b:85:21:ff:
         be:c8:de:6a:0f:fa:3f:fa:e7:01:f5:b9:e5:66:17:b9:ca:30:
         7f:7d:ec:27:2c:bd:a6:1f:5a:e1:d7:fc:fb:d0:2d:8c:5c:79:
         3f:84:80:a7:59:36:56:75:80:43:36:0a:65:d5:f2:58:43:31:
         d9:88:08:99:41:dd:bb:ba:b5:f6:8b:99:a4:26:04:08:15:05:
         45:70:1b:d8:7c:f6:83:2d:19:72:12:b0:38:80:a0:94:b1:e3:
         c4:04:eb:31:d5:0f:5a:93:0b:28:83:b4:01:49:30:13:71:3f:
         d0:70:82:2e:04:2f:46:17:de:d3:92:91:6b:b4:10:bd:5a:a7:
         fb:19:76:eb:bc:bb:53:8c:fe:a0:4f:d2:8d:f2:10:05:ed:4e:
         29:ac:c9:90:3a:2e:1b:31:3f:24:04:7e:10:49:6c:91:70:43:
         69:b0:ac:8b:fa:0c:e5:c8:18:d6:5c:0e:af:24:3e:b4:78:d0:
         68:22:80:ee:04:6d:73:79:dc:76:43:50:b7:e7:f1:9c:72:a1:
         c8:ef:c6:b4:2f:c5:d4:b4:b1:12:47:f9:1c:8f:d2:f4:e7:b6:
         bf:5e:78:5d:f6:a9:fb:b3:e6:fb:97:1e:2f:5d:83:51:90:2a:
         39:de:10:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:43:03 2026 by rpki-client