Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
File:                     vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft (raw, json)
Hash identifier:          ofTJK7meuxY1F/uLI2oX44yV1lUgsmoBdJHD2vi2rVM=
Subject key identifier:   58:FC:7F:DA:67:FB:42:2F:FA:A0:22:BB:D2:04:0A:A6:9A:59:61:CA
Authority key identifier: BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE
Certificate issuer:       /CN=bd73747f78bd328d0ae1c89171b381aa19011ace
Certificate serial:       01A0DE059537ECF9519C61A2C52B8F902349
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
Manifest number:          0509
Signing time:             Sat 26 Sep 2026 14:01:42 +0000
Manifest this update:     Sat 26 Sep 2026 14:01:42 +0000
Manifest next update:     Sun 27 Sep 2026 14:01:42 +0000
Files and hashes:         1: FKbR9jGxYRX9V8_8o4DRVVGFjPU.roa (hash: Og48h/OvPKZ/MgS2Z6y01qdzTx8n+7C8XDKbughbbnk=)
                          2: OlHHMfPygKkyr7HTvCn4K8p01_U.roa (hash: N9V2kxguErly1WsufOsx/epgV4HMlIpbzSH7yTgCKok=)
                          3: XsF3kqYrpgaSa5NalYy0M03i-cY.roa (hash: kTWWKS//k4z/sGjJu+0LeZP0dfIbCea1JbNwryY8JAo=)
                          4: vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl (hash: VH2qeX/8PiofV9qsoAb4rFEazfy846vzSY0E6VGfYZo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:05:95:37:ec:f9:51:9c:61:a2:c5:2b:8f:90:23:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd73747f78bd328d0ae1c89171b381aa19011ace
        Validity
            Not Before: Sep 26 14:01:42 2026 GMT
            Not After : Sep 27 14:01:42 2026 GMT
        Subject: CN=58fc7fda67fb422ffaa022bbd2040aa69a5961ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:85:59:ff:d5:04:a9:fb:ef:03:8c:2c:e6:6c:
                    23:11:2a:d3:02:b0:1f:ec:01:81:31:60:30:c1:97:
                    03:5a:95:0f:98:ba:1d:37:d1:c4:29:7a:e7:8e:8f:
                    2e:1d:f5:4e:15:27:7c:b1:13:42:5a:1a:4c:26:d0:
                    55:10:7a:34:80:b9:ce:c7:37:d2:29:58:e6:a6:d7:
                    12:bf:4f:cd:61:a3:30:88:8e:96:3f:4d:87:b1:6a:
                    88:0f:cf:bb:3b:ef:9e:71:b0:1b:98:1d:d0:1d:66:
                    d4:ec:37:84:37:0c:dd:bf:c4:c2:41:0b:a6:56:6a:
                    81:61:81:93:be:e6:bd:2a:85:7e:6d:f7:a7:50:b9:
                    13:80:af:df:69:b9:62:6d:76:01:c4:51:05:ef:c0:
                    ac:db:e5:bc:91:8f:47:7e:4b:6e:eb:74:80:17:59:
                    8c:09:b5:76:7e:ea:83:a0:df:0c:de:63:1d:25:e1:
                    fd:c2:ff:12:0c:a3:d4:bc:f7:dd:78:5b:e8:5a:1e:
                    c0:90:cb:7c:62:ee:fe:a6:62:13:a9:5a:79:c3:57:
                    c4:c9:dd:a6:14:d5:96:dc:07:b4:84:03:9b:4b:8c:
                    60:93:07:55:d4:87:e9:f9:90:19:ee:86:5f:6a:cf:
                    3f:91:55:14:5e:1b:36:72:1b:73:f6:d3:d1:c2:d9:
                    41:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FC:7F:DA:67:FB:42:2F:FA:A0:22:BB:D2:04:0A:A6:9A:59:61:CA
            X509v3 Authority Key Identifier:
                keyid:BD:73:74:7F:78:BD:32:8D:0A:E1:C8:91:71:B3:81:AA:19:01:1A:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/a55553-2975-4244-b260-5bdbf6f847f9/1/vXN0f3i9Mo0K4ciRcbOBqhkBGs4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:ad:eb:ec:c0:e5:9b:f6:e4:57:45:fb:52:4f:28:20:71:29:
         9c:27:c9:04:54:b9:9f:ae:30:9e:4f:d4:2e:d6:22:a2:54:1e:
         90:51:95:5c:f4:3b:45:d0:c8:b3:78:7b:f7:46:44:c7:2f:4f:
         40:3a:69:f1:ab:f5:fe:91:12:92:68:fb:0d:8a:fe:01:7a:24:
         82:ae:ef:5c:0e:f6:ad:99:ad:b0:97:cd:68:b4:53:81:f1:ec:
         a6:b2:53:f8:94:6e:60:bf:ef:2a:42:5b:78:61:77:84:72:c5:
         56:63:43:62:4e:dd:a1:c3:63:b2:a1:6f:99:5a:da:41:0e:38:
         4e:a7:e9:2f:4c:e9:c5:d4:e6:8b:2a:19:3b:e8:18:00:13:b5:
         1f:cd:93:38:bc:87:6d:29:9a:38:6b:7a:91:54:14:08:f3:a0:
         05:6a:4a:b0:09:f5:34:5d:0c:ae:c3:c3:84:27:f1:44:ca:54:
         cd:c0:b3:37:72:ef:e6:a5:21:ab:e1:d2:76:37:37:94:6b:a9:
         2a:da:97:b1:67:39:b8:29:76:a3:af:36:1e:ac:8c:5c:70:a3:
         18:63:49:c4:a7:a5:7c:26:b7:85:b5:c2:e5:c8:83:4e:f3:17:
         cb:4a:6f:4a:97:19:4e:d4:d9:b4:bb:20:f4:99:d2:6f:54:38:
         dd:27:9d:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:59:24 2026 by rpki-client