Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File:                     VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier:          RGHyGIkk8RbXOJM4FznWjGPu74+IbOZ3Vyj+yk0Q+Hc=
Subject key identifier:   33:44:54:EF:53:52:AE:E4:04:8C:7B:E9:DB:C6:93:0A:6E:59:01:5C
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer:       /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial:       01A1377F2804F8CEC24902994812D1582497
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number:          1AA9
Signing time:             Tue 13 Oct 2026 23:00:42 +0000
Manifest this update:     Tue 13 Oct 2026 23:00:42 +0000
Manifest next update:     Wed 14 Oct 2026 23:00:42 +0000
Files and hashes:         1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=)
                          2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=)
                          3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: QAfV/6+ls7yGz0KpzXNrv9M2cBu5hBPejQY4Rum58zA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 20:43:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:37:7f:28:04:f8:ce:c2:49:02:99:48:12:d1:58:24:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
        Validity
            Not Before: Oct 13 23:00:42 2026 GMT
            Not After : Oct 14 23:00:42 2026 GMT
        Subject: CN=334454ef5352aee4048c7be9dbc6930a6e59015c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:95:e0:5e:ff:cf:fc:d6:26:ee:18:27:dc:5c:
                    61:52:5e:38:84:c2:00:7c:b0:43:09:63:9a:f5:36:
                    94:cd:17:82:4b:8d:43:cb:5b:82:9b:b7:6d:14:3e:
                    39:d4:3b:b2:5f:28:47:ca:94:e0:e4:84:c2:5e:57:
                    62:3c:3a:fd:f4:20:bf:8d:75:44:83:1a:7e:01:80:
                    c5:a6:db:18:fa:3d:67:82:e3:45:ad:d2:28:aa:31:
                    61:ed:9c:f0:ce:0d:eb:b9:0d:4a:7e:05:3e:e4:6d:
                    71:37:f1:71:b0:61:cd:9f:63:81:03:7e:d7:45:51:
                    83:36:4f:b1:e8:23:78:ac:3e:68:92:1e:d0:ac:bd:
                    41:b6:b6:b4:8b:dd:d6:b7:32:27:91:b3:d3:02:fd:
                    3f:cf:0b:6b:3b:4e:e5:0e:b5:3a:0b:4b:04:29:bf:
                    42:e5:73:f7:c6:d5:e2:db:dd:70:75:c7:9f:2a:a5:
                    b4:4f:8e:4c:85:35:64:bd:20:97:ac:45:5e:62:3a:
                    db:06:7e:3f:f1:27:a7:a1:c0:e5:54:a4:40:c9:e3:
                    c4:bf:c1:04:7e:b6:1f:57:50:01:91:9c:7a:5c:21:
                    ad:05:d4:a1:4d:e4:d5:2e:09:98:ad:c0:3f:ce:3a:
                    89:b4:15:20:79:f7:92:e2:c0:0a:20:30:9c:38:05:
                    29:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:44:54:EF:53:52:AE:E4:04:8C:7B:E9:DB:C6:93:0A:6E:59:01:5C
            X509v3 Authority Key Identifier:
                keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:92:86:2c:8f:96:9d:31:60:76:9b:c6:a6:59:8c:30:bf:0e:
         dd:86:7f:ab:52:0f:ba:7a:6e:a1:f5:40:a1:ba:61:67:08:1b:
         e2:05:1d:0f:5e:4d:d1:a9:44:a1:fd:2a:70:52:dd:b9:f9:bb:
         47:90:3c:21:71:90:13:8c:72:b9:1c:53:51:d4:2a:bd:06:05:
         c9:76:a6:44:3d:6c:e4:55:fc:fe:44:56:72:19:9f:41:95:14:
         35:1e:e3:8f:e4:dc:26:fc:80:6f:e6:73:09:d2:bc:e7:73:41:
         74:2f:43:51:76:27:2f:44:db:1e:f6:c6:1f:78:44:b3:95:9f:
         77:84:ef:7a:0e:10:b1:ee:bc:c7:da:94:f6:ce:41:9c:7d:81:
         35:a6:77:a2:da:4b:8b:3b:cf:b6:59:36:09:9a:1d:ad:ac:b8:
         7f:bf:d6:73:8f:48:fc:b1:f2:f5:9e:f5:3a:9e:32:24:bb:ff:
         26:00:a6:ec:76:af:96:1b:55:58:b3:43:ca:c6:1d:96:4d:e0:
         35:97:33:6c:57:43:07:f0:13:7c:21:e0:c1:87:41:7c:9b:49:
         40:ff:14:0c:77:09:b4:2e:d8:b9:42:61:2a:9a:3d:ab:9d:d1:
         08:d4:0d:5b:b5:9a:d0:ca:c6:98:01:e5:15:a6:3f:be:27:76:
         10:a8:d0:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 01:56:41 2026 by rpki-client