Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
File:                     VTynsubB4X9fPtvjdeGezjlTORA.mft (raw, json)
Hash identifier:          x5tLFFOg4IdnTVCNuQaMKSMiJ0MnWNx1wcVmR4VwTPo=
Subject key identifier:   A0:84:4E:AE:62:A9:C0:39:74:42:3D:87:8D:BB:D7:B5:99:0D:3C:79
Authority key identifier: 55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10
Certificate issuer:       /CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
Certificate serial:       01A0C4B2DA9DB0E5BCF8031FC8095A592F47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
Manifest number:          1539
Signing time:             Mon 21 Sep 2026 16:00:50 +0000
Manifest this update:     Mon 21 Sep 2026 16:00:50 +0000
Manifest next update:     Tue 22 Sep 2026 16:00:50 +0000
Files and hashes:         1: 4-WbBaq98Oq9Hev6MWdBUYGPmH0.roa (hash: GNmnhi1gsX6X4qEuEkfyWsKzBAsClKRsbDlEB+HLZ4o=)
                          2: CjhmCMWptrEEhGP0rWZ3aS_GZCQ.roa (hash: xRBb5qX8Yz/3LKM505uXNjs7V3IJIMZmvB9mN9XYUV0=)
                          3: VTynsubB4X9fPtvjdeGezjlTORA.crl (hash: rn18ytP7uSb3PUYGx3neGBG4bRrX6meI0Yh0PKJuhb8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 16:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:b2:da:9d:b0:e5:bc:f8:03:1f:c8:09:5a:59:2f:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=553ca7b2e6c1e17f5f3edbe375e19ece39533910
        Validity
            Not Before: Sep 21 16:00:50 2026 GMT
            Not After : Sep 22 16:00:50 2026 GMT
        Subject: CN=a0844eae62a9c03974423d878dbbd7b5990d3c79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:8b:df:01:8d:cf:6b:68:ff:62:52:4a:a6:
                    85:d7:30:e1:0c:7a:6c:04:82:e4:fc:71:bb:d8:b5:
                    da:a1:5f:0b:8f:0f:3c:85:eb:91:fb:b4:3e:5f:99:
                    21:08:fc:91:ad:2c:43:90:81:89:c6:4f:95:57:b8:
                    08:d7:30:00:b6:41:37:55:5c:0d:4a:8d:8e:06:a5:
                    60:16:fd:e8:32:bc:d6:c4:98:ba:77:e8:12:95:38:
                    4d:df:f8:4d:08:8e:41:42:20:f1:5f:48:85:72:53:
                    6b:c7:0f:76:cc:81:45:03:77:6a:d1:95:25:de:27:
                    68:79:66:2a:8d:aa:34:93:34:bc:58:c5:b2:00:e6:
                    2f:5d:cf:ae:9b:e0:ea:3c:ae:fd:a7:3a:78:c5:a5:
                    22:ff:84:0c:75:38:f8:fb:eb:8c:3d:8b:1c:88:23:
                    2d:a1:bf:19:af:f9:b5:49:f6:ad:e2:6e:96:ce:bd:
                    43:b8:a0:0a:06:0a:46:03:c0:32:94:6e:6d:e4:30:
                    55:da:0b:ec:88:a8:8b:fd:df:ed:d9:a3:37:fb:36:
                    c5:47:4f:98:c4:07:d7:27:ac:39:a5:0e:f7:b7:e0:
                    4f:70:6d:fe:40:35:1b:7f:e6:ce:9d:d3:be:71:5b:
                    4d:09:dc:0c:dc:48:7b:b3:70:63:0c:84:de:e6:2d:
                    ce:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:84:4E:AE:62:A9:C0:39:74:42:3D:87:8D:BB:D7:B5:99:0D:3C:79
            X509v3 Authority Key Identifier:
                keyid:55:3C:A7:B2:E6:C1:E1:7F:5F:3E:DB:E3:75:E1:9E:CE:39:53:39:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VTynsubB4X9fPtvjdeGezjlTORA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/d572c3-350f-479b-a7b3-153e9182af41/1/VTynsubB4X9fPtvjdeGezjlTORA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:fa:36:91:f6:06:12:1d:df:d9:67:9f:9f:63:14:34:00:72:
         de:86:98:f0:01:a8:23:bf:f0:b2:45:86:6e:7b:a9:22:77:2a:
         f2:a7:75:d7:31:e4:18:c0:72:6e:a5:a4:99:2c:cc:58:33:de:
         9e:7f:56:db:d8:70:07:e1:85:ee:49:6f:df:3e:d0:0f:74:02:
         7f:8c:c3:8f:c4:5b:71:09:28:c7:c7:02:dd:81:86:46:d4:a4:
         2d:cb:78:b0:36:e8:c6:af:bf:fa:03:94:ba:6f:1a:57:47:42:
         a5:a5:77:a2:74:c6:e5:4f:98:4a:26:30:66:78:a2:d6:f2:4f:
         59:a6:7f:0d:4a:b1:0f:c8:7a:12:ac:98:ba:f0:a4:6e:01:31:
         04:d2:2c:ed:ce:ff:cc:96:41:d3:60:60:55:94:d8:a1:a5:22:
         4c:92:39:24:7a:d9:dc:d0:62:65:73:11:5e:3a:a0:22:02:fd:
         28:1d:a6:a3:ca:0e:63:96:2c:60:9a:9f:0d:3a:f7:28:23:54:
         93:f9:0e:23:d4:54:9e:d9:e2:4f:74:e3:f3:83:91:6d:ee:1e:
         6d:85:0a:4a:f9:bf:1b:74:7a:37:fe:40:fd:96:22:c4:eb:d9:
         e5:e7:a6:17:75:1f:92:63:2e:9e:40:55:39:54:1f:61:f0:12:
         8c:63:41:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:23:06 2026 by rpki-client