Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File:                     V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier:          0lXoPgwW/pqgqBauOAXRmtHufBiXuox+gKbyOWPaXYE=
Subject key identifier:   D9:1F:63:87:C7:89:BC:48:7F:98:51:03:79:72:0B:07:72:4D:52:16
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer:       /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial:       01A0DA28916FB455E35F41D7A114E99BF72F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number:          19A2
Signing time:             Fri 25 Sep 2026 20:01:26 +0000
Manifest this update:     Fri 25 Sep 2026 20:01:26 +0000
Manifest next update:     Sat 26 Sep 2026 20:01:26 +0000
Files and hashes:         1: MLkUvkA6uDTMU8BTbvTCb2LlDLQ.roa (hash: VagX+oyv5O56sokc/qHDCjREdjly46AXJeRdXSrzpR0=)
                          2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: r08R7pGqO5Cmg6zOfJfebT6HsjMdz7rpHM4bdo9v9KA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 17:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:da:28:91:6f:b4:55:e3:5f:41:d7:a1:14:e9:9b:f7:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
        Validity
            Not Before: Sep 25 20:01:26 2026 GMT
            Not After : Sep 26 20:01:26 2026 GMT
        Subject: CN=d91f6387c789bc487f98510379720b07724d5216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fe:31:77:70:58:59:f7:d2:70:ab:a4:56:e0:
                    d3:65:84:32:12:17:80:d8:0c:ed:b7:21:de:e0:8c:
                    eb:4c:53:4d:17:65:ef:21:fc:1d:3f:a4:93:27:46:
                    45:3c:ec:84:f4:21:57:98:af:45:15:09:00:29:c6:
                    2b:04:29:03:5a:cd:90:70:a0:e1:25:98:2d:3d:4c:
                    f2:ee:c1:1d:93:6c:fa:11:92:a3:bf:21:cf:e9:46:
                    cc:74:67:6a:cf:50:c3:14:cd:11:e2:e3:95:86:88:
                    1b:4f:21:f7:db:71:4e:c7:bd:54:61:ad:89:32:0a:
                    09:66:4f:5d:68:b0:c7:3a:34:2d:f1:66:e8:f5:cd:
                    4f:2c:1f:5b:a3:4f:46:4b:1a:b5:12:2a:ce:72:2e:
                    25:da:02:6c:58:72:ce:3c:2e:b5:2b:ba:1f:7a:1e:
                    2e:45:8f:d8:ff:5d:2a:5d:99:5f:c3:fb:3a:44:22:
                    a7:79:d8:1c:df:fa:4b:86:95:c3:ca:e7:3c:b8:d5:
                    52:e0:bc:ea:7b:2b:fb:73:c6:d6:ff:43:84:2e:38:
                    32:2a:33:30:31:17:e3:35:1a:d2:ce:5c:68:1c:42:
                    3e:da:2d:17:ea:5c:72:91:9f:e6:a1:30:c5:ad:4c:
                    5a:75:3a:4d:4a:e3:af:d9:f9:75:8f:da:ac:d0:b9:
                    7e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1F:63:87:C7:89:BC:48:7F:98:51:03:79:72:0B:07:72:4D:52:16
            X509v3 Authority Key Identifier:
                keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:a7:58:f0:7c:e6:c8:00:24:84:66:20:a4:d7:13:b4:88:60:
         e0:a7:6d:62:b5:a9:73:6d:1c:06:25:43:33:d9:16:36:fe:21:
         21:4d:ac:97:a7:db:80:7c:a7:e8:c7:ee:6a:96:86:75:58:5d:
         62:f4:f7:0c:63:3a:5e:23:32:79:29:e4:e5:0b:7e:dd:22:fd:
         c7:40:6b:52:10:84:75:81:29:8d:16:82:4a:4f:7b:7a:49:39:
         cb:b8:a8:ea:0f:64:73:b1:f1:36:09:9e:b3:62:8d:cb:dd:41:
         34:9d:5c:98:0e:90:88:a5:87:cd:f8:87:d4:91:f4:ca:8b:66:
         98:65:ca:ec:f1:00:14:88:79:18:03:e9:44:13:1b:a5:4f:21:
         28:eb:ae:9b:0d:19:33:c3:9c:eb:ad:e8:2a:81:fa:d4:8e:75:
         27:4c:5e:1b:5e:c8:95:96:ef:64:e2:31:e3:d0:0f:f6:90:1f:
         1f:c4:ad:7b:bb:ea:bb:03:b0:94:73:50:fd:1e:72:65:67:ae:
         b2:b0:43:39:6f:03:19:ec:e3:b5:d1:97:9e:6c:70:43:e9:f7:
         6b:95:75:02:38:d7:6a:2a:11:a0:bc:ef:05:82:e3:0f:22:e2:
         bb:d6:d8:03:db:b0:e8:72:55:3a:28:48:67:90:38:f6:c8:0c:
         47:df:19:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:19:33 2026 by rpki-client