Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
File:                     VwhmHGruys2bcRdqct6WybRQlDk.mft (raw, json)
Hash identifier:          oH2jOIEp0/C4+fkG1eynN1K0U+l642IPn2h3KuBfU+4=
Subject key identifier:   F0:28:00:A0:8E:C3:A7:03:01:38:C4:9D:DA:99:00:C3:9D:68:5A:10
Authority key identifier: 57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39
Certificate issuer:       /CN=5708661c6aeecacd9b71176a72de96c9b4509439
Certificate serial:       01A0DACD38B6696C4C74724427695108A56F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
Manifest number:          139C
Signing time:             Fri 25 Sep 2026 23:01:17 +0000
Manifest this update:     Fri 25 Sep 2026 23:01:17 +0000
Manifest next update:     Sat 26 Sep 2026 23:01:17 +0000
Files and hashes:         1: K1-czU5faW_445U2vHd4Xx9oQDk.roa (hash: fqXMKEgddrhXAifhyCouf2pJtCE51FJt/AwucTriLDw=)
                          2: VwhmHGruys2bcRdqct6WybRQlDk.crl (hash: dXFsmmc+OV3sa4T06Y+6+jxmY+torwl230rhie0XPys=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 23:01:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:cd:38:b6:69:6c:4c:74:72:44:27:69:51:08:a5:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5708661c6aeecacd9b71176a72de96c9b4509439
        Validity
            Not Before: Sep 25 23:01:17 2026 GMT
            Not After : Sep 26 23:01:17 2026 GMT
        Subject: CN=f02800a08ec3a7030138c49dda9900c39d685a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:63:af:c1:2c:f8:2c:ae:b1:ee:d5:59:c7:
                    19:00:8c:d6:7b:2d:ce:11:42:2e:5d:44:50:79:5b:
                    92:3d:ce:a1:8f:ac:73:d3:65:40:e8:d4:30:03:95:
                    8c:5c:77:2d:9d:58:71:0b:32:8a:f2:5f:c1:93:d9:
                    67:64:5e:67:57:79:4d:b6:c7:97:23:34:ec:1d:f3:
                    dd:7f:cd:db:a5:62:d0:57:ba:a4:4b:15:c5:b2:ef:
                    a2:34:f1:e0:2b:20:12:0a:c0:8a:be:c8:40:a3:97:
                    a0:48:c9:de:9a:e5:40:d4:35:a8:d2:cf:fe:09:be:
                    91:34:c7:10:9a:00:42:38:b5:31:3b:4d:c6:6a:8d:
                    1f:f0:7b:8a:e8:6e:5d:b4:8f:06:04:44:b9:85:b8:
                    99:b3:bc:e2:a6:1e:61:f5:fd:63:dc:d6:fb:61:4d:
                    ca:92:7f:26:dd:8b:ba:4a:c6:bb:ba:f4:7a:bb:b4:
                    65:6e:ba:bd:a4:58:94:ef:0f:a2:ae:a3:6c:a5:23:
                    6c:ea:ed:6c:1f:95:03:ed:fb:9c:e2:99:48:bd:a4:
                    89:09:5a:3a:c7:f5:e7:a9:0e:d8:c2:20:73:c3:84:
                    73:3b:66:e9:ea:64:b1:4b:c8:ff:82:53:57:66:2f:
                    15:7d:62:85:5a:7c:01:63:ce:3f:4a:a5:df:fa:61:
                    a5:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:28:00:A0:8E:C3:A7:03:01:38:C4:9D:DA:99:00:C3:9D:68:5A:10
            X509v3 Authority Key Identifier:
                keyid:57:08:66:1C:6A:EE:CA:CD:9B:71:17:6A:72:DE:96:C9:B4:50:94:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwhmHGruys2bcRdqct6WybRQlDk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/647a4a-d2fd-43e0-8f3b-44108162e492/1/VwhmHGruys2bcRdqct6WybRQlDk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:7b:ee:22:90:70:c4:6a:f9:5e:3b:0f:ee:13:f6:d0:9a:67:
         5d:e9:b1:e7:29:a8:c7:38:34:c9:30:a6:27:d3:51:ab:e2:1b:
         80:2f:8b:07:6a:4e:72:74:d2:dd:8e:76:d8:69:02:14:de:f4:
         be:d8:10:00:81:7c:cb:03:85:4a:9f:aa:9d:44:40:33:ec:a5:
         8e:15:53:42:b7:6c:09:2d:e1:b0:89:59:f3:f6:43:af:37:0b:
         55:29:d6:3e:c2:da:a0:cd:d1:41:ad:ee:dc:5c:c6:62:25:48:
         91:5a:9c:b6:3e:d0:1f:f2:2d:6d:ea:d3:6b:c1:3c:95:c2:39:
         58:6d:87:3f:92:67:07:96:fe:5d:05:c2:16:87:9b:d2:07:53:
         ab:f2:0c:df:8e:ba:5c:6f:d1:ff:d5:7f:cf:f8:3d:fc:8a:5f:
         32:1b:b4:f5:49:d5:01:92:f6:7b:11:42:a4:6f:86:4b:09:fb:
         0b:7f:fc:7e:ba:be:00:8a:86:dc:3d:73:f7:51:12:82:bb:89:
         17:b0:15:34:ec:82:ea:83:82:1d:8e:70:78:79:77:87:ff:57:
         e8:13:11:70:9d:e4:57:5c:fd:cf:fb:6c:14:1a:17:eb:9c:a7:
         4a:db:1f:2d:de:d5:dc:cb:8e:ff:00:b2:f5:41:7c:c5:f1:a0:
         08:d8:24:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 05:46:46 2026 by rpki-client