Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File:                     VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier:          8ckl9Jw6a620J0Na3UvPAT/8mqn9+cUpFerHVVZjdfA=
Subject key identifier:   DC:D3:8F:30:94:75:B9:69:9C:F9:0A:F6:12:96:2E:06:76:F8:59:D9
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       01A0D8A7E2159344A7076E7C54B059BB5D7C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number:          0ECC
Signing time:             Fri 25 Sep 2026 13:01:15 +0000
Manifest this update:     Fri 25 Sep 2026 13:01:15 +0000
Manifest next update:     Sat 26 Sep 2026 13:01:15 +0000
Files and hashes:         1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=)
                          2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=)
                          3: 50r6jSn0CMuiVpA2P-b_FOjvPPg.roa (hash: D5jC6zCHGCgbBXPC5sbkuztpv5UfBKKCMfOPc3Dg0Lw=)
                          4: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=)
                          5: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=)
                          6: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=)
                          7: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=)
                          8: Pd2rMwFiHNfo8LsVySgeVLzTGq0.roa (hash: sdAzHA/hidfaS5zNstJ0MbK05F4160hrzBGMOr4TmYo=)
                          9: QXZE3Zq08zJCNAuWkUlhOf72CEo.roa (hash: 4w3elPVXjJm0mGB/LmhaWlS8kL5Tk75Pr/n+xOgx6fw=)
                          10: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=)
                          11: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=)
                          12: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: r2J0FTQWlGXzhxpbGOwNsg1um2JapEggbXoTEAe12L4=)
                          13: _8UAnkY-Tgc4NZnERUShSjoD4xE.roa (hash: vjUpfIBIALtCY5M3wtuciypbGi/vBvMv2oVQ1jTAtsM=)
                          14: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=)
                          15: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=)
                          16: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=)
                          17: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=)
                          18: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=)
                          19: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 13:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:a7:e2:15:93:44:a7:07:6e:7c:54:b0:59:bb:5d:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Sep 25 13:01:15 2026 GMT
            Not After : Sep 26 13:01:15 2026 GMT
        Subject: CN=dcd38f309475b9699cf90af612962e0676f859d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:e7:bf:4b:9c:92:95:67:1a:6b:a0:96:5b:36:
                    46:26:2c:c9:9c:d4:70:e8:c5:c7:04:a8:2d:32:fc:
                    2a:c1:15:71:f6:9a:94:fe:5d:b2:63:9d:f2:60:61:
                    ce:79:2e:75:5c:e5:04:4e:25:b7:05:e4:8c:98:04:
                    c5:b7:db:90:b3:23:79:4e:3d:00:bb:b2:89:b9:ee:
                    7d:d4:87:08:c9:45:21:07:30:7f:5f:3b:81:00:1b:
                    a4:dd:f5:d1:08:99:2d:35:82:cf:1a:1b:91:63:66:
                    ca:49:88:96:a6:7a:4e:f9:b5:30:c0:0f:fa:c5:f6:
                    a4:c6:95:be:05:dc:ed:f0:56:77:ca:53:51:67:3d:
                    70:a1:6e:62:24:af:e6:f1:0d:d0:a0:f3:b6:65:7a:
                    d2:48:e3:79:c8:3d:cd:c1:e8:d1:c4:24:8d:c0:4b:
                    fa:e8:f6:9d:8e:3f:be:ce:cb:65:c2:62:c5:e0:fb:
                    58:f8:40:50:88:83:05:f4:57:a1:45:1b:e3:a3:15:
                    bc:24:1b:07:86:51:8f:eb:f8:cd:bf:a7:44:a1:4b:
                    bc:e4:58:4e:df:13:79:d5:cb:55:a3:73:74:24:38:
                    d9:1e:b6:21:0e:07:13:4b:71:fa:f7:64:b2:93:4d:
                    2b:45:3e:3b:a4:1f:a3:71:83:54:84:d7:5b:58:09:
                    6a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:D3:8F:30:94:75:B9:69:9C:F9:0A:F6:12:96:2E:06:76:F8:59:D9
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:bb:c6:c3:c3:90:8f:2d:db:22:12:b6:e6:c0:41:ad:dd:b7:
         05:78:95:d6:ca:a5:27:73:6c:35:66:d8:91:cd:ed:74:1b:6a:
         84:8e:e5:55:87:cc:d1:1a:4f:5d:86:40:c0:ad:4a:66:5f:44:
         0c:ca:00:c4:9e:ae:4f:e7:d4:12:e3:8e:d0:0e:9a:f6:b7:12:
         6b:c5:f8:8b:49:06:fd:00:18:07:a0:b8:92:d8:8d:ef:6d:91:
         c9:cb:a5:6d:74:18:f4:9a:a3:c0:23:e5:04:3e:99:89:08:35:
         f1:91:8c:2a:13:d6:8a:4d:fa:a9:d3:39:8c:e4:c2:71:f8:4b:
         a6:ab:c0:e7:d0:ef:4b:1f:54:3b:7f:c2:40:8c:97:55:48:d1:
         21:00:0e:fe:ac:1a:0e:9b:66:4f:8c:59:ce:4a:e1:23:a8:dd:
         2b:27:e2:d8:95:da:cf:3c:d0:55:42:f5:ec:6f:b6:ac:c0:14:
         d0:fa:2c:c7:e0:db:9c:02:52:c1:f5:af:73:b9:3e:af:01:40:
         d7:95:94:63:81:eb:58:82:ae:3d:67:e8:00:86:81:2c:39:d8:
         c4:75:7a:8f:b1:51:61:d5:b2:14:8e:fb:71:1a:76:9b:33:81:
         c4:75:f5:e7:73:20:f9:10:9f:1f:56:93:3e:72:85:b8:1c:6e:
         f4:d3:ca:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:18:42 2026 by rpki-client