Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
File:                     vosVwjfzTFxcU0S0B567OlidAUg.mft (raw, json)
Hash identifier:          iIIyoIKiOZijRpwadGDMnjrGl6Zpw/b+mm9xS8BbeUs=
Subject key identifier:   C3:CC:BC:CE:D8:24:31:56:26:5E:96:5C:BC:45:16:CA:C5:9D:05:6D
Authority key identifier: BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48
Certificate issuer:       /CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
Certificate serial:       01A0DC8535E065930C6D1034D531C1E38B9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
Manifest number:          1045
Signing time:             Sat 26 Sep 2026 07:01:52 +0000
Manifest this update:     Sat 26 Sep 2026 07:01:52 +0000
Manifest next update:     Sun 27 Sep 2026 07:01:52 +0000
Files and hashes:         1: NMgthEWSDkhf_cRJefWOwwwKa-w.roa (hash: VQXO+94YOu0/0F/wMTO4bq00aYkrqkoxk+yxuAK1KCo=)
                          2: vosVwjfzTFxcU0S0B567OlidAUg.crl (hash: gbfGBqLjX1i0nKMX5mnYX1f7jJP6MHLUuk3T5AleyBo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 07:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:dc:85:35:e0:65:93:0c:6d:10:34:d5:31:c1:e3:8b:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be8b15c237f34c5c5c5344b4079ebb3a589d0148
        Validity
            Not Before: Sep 26 07:01:52 2026 GMT
            Not After : Sep 27 07:01:52 2026 GMT
        Subject: CN=c3ccbcced8243156265e965cbc4516cac59d056d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:df:e1:53:a5:f8:fa:68:93:b7:9f:67:04:8d:
                    bc:68:36:fc:74:90:d3:52:c6:ed:73:c3:ff:49:70:
                    19:b1:80:36:ab:6e:e5:8a:82:2a:b1:8d:c0:7c:eb:
                    6f:6d:6d:a8:95:0e:a0:36:0d:5f:b0:b7:a4:89:6b:
                    3c:04:34:a5:cf:3b:df:ba:44:22:9c:c8:c6:3e:ea:
                    3d:80:98:e2:a2:c0:fd:9a:da:a6:56:f4:25:b1:3a:
                    89:9b:25:cb:55:f1:b3:80:31:bf:38:44:e0:57:8d:
                    fa:1d:39:9b:b4:db:1e:04:65:72:6b:c5:e3:1b:c3:
                    90:7e:4a:3e:30:98:d1:9b:cc:1d:7d:7f:ef:52:3a:
                    2a:c6:c6:71:9b:c6:92:17:c4:fc:99:b7:db:f3:72:
                    54:77:42:86:2b:27:47:05:db:21:d1:8b:c5:cc:6d:
                    c7:f8:81:d1:e0:dc:8e:82:ea:f2:b7:a8:e7:74:e8:
                    d7:22:a6:28:17:2d:2c:12:c5:f4:46:3e:86:d7:28:
                    7f:a3:39:01:dd:91:5a:f4:26:75:e3:9f:b6:8f:97:
                    37:9d:f0:0c:07:30:32:ff:1d:2b:5e:7d:54:54:55:
                    ff:d8:35:61:7c:48:1d:cd:ae:0a:60:f2:b5:29:1f:
                    81:ef:dc:7d:4b:4c:4a:c1:ef:41:ff:92:5f:b3:97:
                    7a:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:CC:BC:CE:D8:24:31:56:26:5E:96:5C:BC:45:16:CA:C5:9D:05:6D
            X509v3 Authority Key Identifier:
                keyid:BE:8B:15:C2:37:F3:4C:5C:5C:53:44:B4:07:9E:BB:3A:58:9D:01:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vosVwjfzTFxcU0S0B567OlidAUg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/aa5972-3538-4361-a134-31de1769fd8a/1/vosVwjfzTFxcU0S0B567OlidAUg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:e5:d8:1e:c1:40:09:91:a8:f0:90:21:40:c2:88:21:34:38:
         66:4d:5c:7d:88:e3:b3:d3:e9:9f:fa:16:45:a5:9f:0f:d9:80:
         80:a9:e6:c5:9b:79:54:d4:2f:1c:aa:66:e2:e9:53:f7:be:63:
         5f:89:33:af:70:32:af:e6:a2:86:35:93:2a:5a:18:80:a5:f5:
         01:66:f0:ae:d1:1b:0e:30:a2:53:22:5c:0b:d0:b3:66:ef:18:
         97:bb:c1:47:01:14:93:7e:1c:ac:fd:33:4e:67:48:0c:8d:e5:
         62:29:a8:14:84:09:ee:ab:ef:db:81:65:1a:32:68:b1:fc:1a:
         91:d1:5c:76:a4:75:c1:30:a9:53:59:20:4c:c6:11:5e:15:a3:
         17:d2:76:d2:86:1d:16:cc:29:33:71:f0:55:3b:be:ef:5d:ad:
         2e:fc:ca:a2:b4:eb:58:27:22:95:a3:50:7a:7f:c3:87:52:df:
         69:f0:44:4d:18:d4:67:62:f6:28:17:67:a2:9e:9c:9f:60:9f:
         b8:7d:f0:ca:70:3e:63:a9:37:e9:0f:29:48:73:b5:ac:15:c0:
         bd:2e:14:78:03:05:c2:a4:d5:d8:47:82:80:0e:6d:7a:a4:c8:
         f8:3a:f3:5d:79:20:b5:f5:5f:de:1e:02:01:ee:60:30:37:63:
         52:ac:48:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 15:23:01 2026 by rpki-client