Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
File:                     VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft (raw, json)
Hash identifier:          w9UOT/8u+6ld4Yh5+GaS4ejVvf6dVPYEckWHI3QG0Y8=
Subject key identifier:   5B:AD:16:A0:A8:E6:AE:E8:F6:45:65:5B:2D:7B:B8:3B:75:D0:85:CA
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Certificate issuer:       /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial:       01A0C47C002D2BD3C5F11C859CBA37394DCD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
Manifest number:          DF
Signing time:             Mon 21 Sep 2026 15:00:55 +0000
Manifest this update:     Mon 21 Sep 2026 15:00:55 +0000
Manifest next update:     Tue 22 Sep 2026 15:00:55 +0000
Files and hashes:         1: 0nv-S98ulLoBxUbeunIyyHswlb4.roa (hash: wXc4tA/MdxZd0ahPnwNsbJs8ojwvndGATxFJmx4jZGI=)
                          2: 4F4qBS1aUOeI4r2IYjZ440HEYYc.roa (hash: 8Hh9bMFx7Obxr6Uz1wbDd5w4WNADW1KEkIRWrr5hPME=)
                          3: 6S9TC5KFrvNh_FP--N7LB0uDWDk.roa (hash: /ZidtI9Los7lnP2xwos5GWLgFkE8A5plIAVg9Rs5yOE=)
                          4: AesIsA5zD6TDjr3LqtdVTNdYf3I.roa (hash: vyS4qfd1NHAIdM7TEHjC217Lv2lF89k5Wv6PxPzeJUs=)
                          5: OdBmG6fU-UEhnEKntxCaonyyB4w.roa (hash: zZOVEl4vhmKrOMSZUOhczKKn2MWTdVMJKBavMTbZMl0=)
                          6: VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl (hash: /tC/uEsv959a6LSw8rNGBInIqrdJzpFH48x1L1YIXjc=)
                          7: mFDb7QhlFMpJcx21UYZqsSeYD7w.roa (hash: tW4kQqWznqKEJSkh3cW125W6koEqfnSDc+Z1EK7o2js=)
                          8: sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa (hash: 2uUaKaqnXjYRfBDPcREAVlMI7n+cIkRs0thYn8PfX5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 15:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:7c:00:2d:2b:d3:c5:f1:1c:85:9c:ba:37:39:4d:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
        Validity
            Not Before: Sep 21 15:00:55 2026 GMT
            Not After : Sep 22 15:00:55 2026 GMT
        Subject: CN=5bad16a0a8e6aee8f645655b2d7bb83b75d085ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1f:75:10:63:aa:49:03:35:94:89:a3:fb:b2:
                    14:d6:e8:92:ec:1b:c2:22:a6:2d:4b:b3:47:bf:d2:
                    0a:4a:7a:dd:24:8e:8d:26:0e:ba:59:f3:97:9a:58:
                    24:b4:d4:57:8d:da:90:bf:6f:0e:b9:30:db:b7:8e:
                    29:c6:20:69:e8:2e:d6:37:cf:dd:c4:fd:9a:32:3b:
                    c6:d9:18:a1:42:ab:2c:85:32:98:13:91:4c:51:ce:
                    54:7a:8b:e9:13:a7:07:72:4a:f3:7e:cb:f6:b8:25:
                    67:56:d4:d3:ad:43:97:4c:1a:74:55:37:40:75:5d:
                    bf:f6:17:93:f4:6a:2a:27:27:a3:38:78:83:af:1c:
                    73:c7:26:16:76:35:57:9f:27:8c:62:36:07:19:29:
                    b8:73:f9:1f:09:d3:c6:2b:01:a3:59:5e:bc:88:9d:
                    b0:31:23:84:68:5b:be:b8:31:d6:fe:f3:b8:56:dc:
                    a1:fa:64:e2:c0:ca:8f:bd:46:ae:84:49:92:ac:4b:
                    4e:a6:22:4d:29:31:7c:b2:be:dc:1a:bb:75:f6:07:
                    e6:0d:a8:31:89:c0:d9:7c:84:8e:a6:c8:fe:6a:95:
                    d8:99:a0:57:c2:5f:0f:ff:e4:36:ca:64:46:79:d0:
                    a9:5a:c6:71:81:59:af:3b:0c:2f:26:c3:1f:73:a8:
                    09:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:AD:16:A0:A8:E6:AE:E8:F6:45:65:5B:2D:7B:B8:3B:75:D0:85:CA
            X509v3 Authority Key Identifier:
                keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:68:d3:38:a8:92:64:7d:ab:39:a5:e0:75:a5:8f:06:07:93:
         39:98:f5:c6:44:3a:1a:bf:f2:b7:76:2a:1b:ab:af:15:5b:11:
         17:8b:25:d8:a9:d1:5b:bb:12:92:51:e0:2f:27:d7:8a:2c:72:
         6b:6a:a9:69:41:fd:89:74:cc:d0:e3:25:32:d7:a5:40:a7:9a:
         4d:72:a4:97:65:d2:63:56:2f:90:aa:8b:aa:42:96:e4:7f:16:
         41:f7:63:48:2f:c1:39:d3:1e:8d:28:92:32:18:12:82:a9:39:
         47:dd:26:b6:c9:96:93:7c:c0:f9:44:52:e3:b9:38:49:b4:14:
         8d:26:c0:80:9b:ee:f3:78:8c:9b:24:03:3d:42:47:57:cb:4c:
         af:2c:ae:7c:f3:99:d8:3e:3a:79:44:17:2a:ad:b5:db:50:4b:
         65:2c:54:71:bb:62:26:c2:78:58:ea:19:59:4f:64:ef:7b:84:
         23:18:cf:ff:e9:c3:e9:6d:58:fc:14:2d:d0:6a:4d:00:7a:c3:
         7b:cd:8c:34:41:ad:f9:85:4c:6a:0b:cd:f7:f1:6e:1d:b3:85:
         6c:24:f2:bb:92:32:32:b2:85:48:df:c3:57:08:75:f5:bc:8f:
         f9:b0:ca:0c:d8:8d:68:76:c6:11:99:e6:4e:dd:cf:7b:01:a7:
         aa:1d:20:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:33 2026 by rpki-client