Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
File:                     V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft (raw, json)
Hash identifier:          boQLkc9GahABODkRq6kOr9XiMYHNXHSVevLwNEUWMzk=
Subject key identifier:   12:77:CB:99:98:95:DA:D0:EC:9E:1C:1E:9D:F5:A0:32:75:01:40:2E
Authority key identifier: 57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02
Certificate issuer:       /CN=578d854bd2bee242a82fb83922d149bccf19ed02
Certificate serial:       01A0EF301852A3229EEFAA84381AFE0B1B08
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
Manifest number:          1A80
Signing time:             Tue 29 Sep 2026 22:01:41 +0000
Manifest this update:     Tue 29 Sep 2026 22:01:41 +0000
Manifest next update:     Wed 30 Sep 2026 22:01:41 +0000
Files and hashes:         1: 0Mpcb7snZtXtIn28I_NZr23Up5A.roa (hash: nzFvjkgOgeMxur17HH/0UCfyA0vTxy/NsTPU+WDpukw=)
                          2: 6YPsytnw9toMC7CA-SrrXQGYVzs.roa (hash: SvHSPTZNR9dNe0BtBvpc8I7dSlcoeBrXBlxDsGlVtJo=)
                          3: V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl (hash: N1PNowgqWmzzq4TE2/eHblX1obAPksW1LpNeFmgBu0M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 30 Sep 2026 17:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:ef:30:18:52:a3:22:9e:ef:aa:84:38:1a:fe:0b:1b:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=578d854bd2bee242a82fb83922d149bccf19ed02
        Validity
            Not Before: Sep 29 22:01:41 2026 GMT
            Not After : Sep 30 22:01:41 2026 GMT
        Subject: CN=1277cb999895dad0ec9e1c1e9df5a0327501402e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7b:dd:c8:88:39:19:2a:fc:e2:8e:0e:02:46:
                    f1:a1:e5:d0:85:97:56:8c:99:78:e7:c7:c4:1f:be:
                    01:91:b3:6f:e9:f1:e2:79:d5:4e:3a:94:67:98:a4:
                    9b:46:8e:8c:3b:6b:d4:ec:ce:dd:1a:16:ee:da:89:
                    8d:cc:7f:c4:04:74:80:24:6c:b4:76:ca:15:14:9d:
                    1f:47:ab:26:4b:8f:f2:3b:92:6b:d0:e6:2c:b3:64:
                    25:d3:21:a9:4c:89:0c:02:42:cc:22:57:98:75:80:
                    0c:55:fd:ff:cc:cb:2a:e7:24:f0:b2:86:69:60:49:
                    31:3d:14:6a:23:00:8c:bc:e6:75:1e:01:59:df:af:
                    b4:d9:b1:94:8e:1b:c7:66:de:66:32:c5:99:dc:33:
                    29:f6:c9:06:2c:ff:a2:04:7c:31:06:4d:60:5f:09:
                    9a:04:00:cd:83:05:5b:b6:c1:7c:ae:ef:18:b0:4b:
                    1a:b3:bc:1d:3f:ab:48:05:2e:79:a8:94:68:bc:6e:
                    f1:25:ac:a9:86:c4:cd:e6:6c:24:05:79:85:d9:eb:
                    cb:ea:08:d2:0d:2a:5f:10:06:e3:63:28:00:ba:c8:
                    9f:91:0b:35:ac:4d:24:3b:28:da:d0:dc:12:3e:ae:
                    a3:7d:a9:e4:47:08:7a:af:9b:99:b8:6b:d4:3e:91:
                    f2:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:77:CB:99:98:95:DA:D0:EC:9E:1C:1E:9D:F5:A0:32:75:01:40:2E
            X509v3 Authority Key Identifier:
                keyid:57:8D:85:4B:D2:BE:E2:42:A8:2F:B8:39:22:D1:49:BC:CF:19:ED:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V42FS9K-4kKoL7g5ItFJvM8Z7QI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/128bc6-f6ff-4c90-8b5a-1ab5f5399d3a/1/V42FS9K-4kKoL7g5ItFJvM8Z7QI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:2b:ba:2a:2a:9e:6a:a7:e8:8f:8e:ff:c1:d8:50:ad:42:ca:
         1d:dc:5b:2a:b2:ef:2c:b6:ed:f1:04:c1:d0:56:06:f6:7f:05:
         c4:76:b0:97:14:c1:5a:14:6c:6c:9a:39:11:2a:f1:d8:b1:22:
         66:51:6e:91:80:0e:48:29:ce:68:18:95:61:3e:90:77:7d:9e:
         59:5e:ee:34:60:4c:64:5f:24:8b:0a:28:93:d8:47:82:e8:ee:
         e9:d4:e9:78:ae:82:e8:22:75:2e:4d:c9:eb:81:15:86:0b:f9:
         f4:f0:e9:25:a3:72:e6:27:a2:80:75:2d:d9:b7:04:95:5f:01:
         98:bd:26:54:7e:11:f9:c5:a5:18:9c:f6:e2:bf:7d:14:5d:8d:
         6c:90:36:02:12:05:4e:c3:44:1f:2e:79:99:e6:b6:ee:10:75:
         96:da:aa:4b:1d:be:48:1b:8c:1d:a1:f6:08:18:8a:9d:26:2e:
         63:c8:67:bf:5c:38:5e:2d:40:ac:50:d7:9b:cb:93:6b:e3:0a:
         6d:df:5a:26:85:65:a9:25:48:25:87:62:60:8b:c7:25:78:d3:
         32:11:dc:93:8c:7d:cb:e0:c3:8f:1e:37:56:ff:b6:c8:35:f6:
         9e:c6:14:92:ec:d2:67:78:37:c6:79:69:a7:e5:cc:3e:58:40:
         b3:4e:0c:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 04:16:07 2026 by rpki-client