Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          SAV1RqnxIwMNH/q7McMtquJeb+1lphA2dVQiFwwQ2hs=
Subject key identifier:   95:A6:29:EF:9B:35:23:4A:5F:43:AE:6B:C1:E2:52:E3:15:2F:A6:25
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       01A13C6EB4218110158A6393EF1EC36C1104
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          1AA2
Signing time:             Wed 14 Oct 2026 22:00:50 +0000
Manifest this update:     Wed 14 Oct 2026 22:00:50 +0000
Manifest next update:     Thu 15 Oct 2026 22:00:50 +0000
Files and hashes:         1: H72aDLmziajxH7j-buUE4Es0RIo.roa (hash: hI4MdmQURw2gDSqP3qZ28v2HkIRtU1OHtdMVA31r6DE=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: 7IboMlzeebftVyCAwSSmGjvA8pU+Hm75/l3FwF6i78A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 22:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3c:6e:b4:21:81:10:15:8a:63:93:ef:1e:c3:6c:11:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Oct 14 22:00:50 2026 GMT
            Not After : Oct 15 22:00:50 2026 GMT
        Subject: CN=95a629ef9b35234a5f43ae6bc1e252e3152fa625
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:ff:83:14:67:6b:f3:0a:1b:00:bb:4d:f0:75:
                    ec:f4:80:14:09:0b:02:b0:53:4c:f2:ee:cc:6b:01:
                    08:5f:35:cc:10:6b:5b:ea:01:4a:d8:8e:01:30:ad:
                    b1:cb:ce:0d:e5:5b:37:77:55:a2:13:71:75:fe:07:
                    56:4a:c1:97:eb:85:e4:0e:67:c9:91:0a:be:65:8c:
                    2e:a1:72:0f:fa:ff:5c:e4:01:c3:ca:07:17:86:a0:
                    05:11:85:ff:b8:cd:ea:a4:35:98:34:d8:cd:f9:03:
                    96:27:bf:91:97:80:72:cd:3d:a5:86:9e:ac:47:f0:
                    cc:4c:f6:bd:fe:f6:f9:66:7c:c1:cd:01:00:fd:a0:
                    7c:5a:ed:28:d6:3e:b5:c3:4a:28:1e:9e:df:76:2a:
                    50:40:ea:09:be:ae:22:9f:d4:88:f1:73:5f:a4:72:
                    0e:78:af:2b:5e:08:df:38:08:08:9c:a7:2e:bb:b3:
                    46:5c:36:7b:7d:54:79:d5:b8:74:3e:b3:3d:c7:6c:
                    28:fa:f5:c5:b5:05:51:d3:86:6b:80:28:b3:cd:5f:
                    ce:68:1c:50:f1:2d:2f:45:a7:d8:5a:c4:51:06:b7:
                    bd:5b:56:8d:52:58:a7:8b:8c:61:97:67:6d:54:27:
                    90:87:35:c6:bf:15:0f:5d:c0:d8:b1:1e:d9:9f:f9:
                    14:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:A6:29:EF:9B:35:23:4A:5F:43:AE:6B:C1:E2:52:E3:15:2F:A6:25
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:19:65:93:df:e2:ab:50:18:62:64:ab:c1:3c:23:5f:73:d9:
         ed:bd:02:22:d2:da:c6:b4:87:4f:b5:37:3b:15:15:13:88:fc:
         8a:29:1a:73:e0:dc:9d:4e:8c:9c:45:0b:a3:13:39:13:a0:c3:
         b9:c1:98:dc:c9:e3:87:33:e9:ac:60:89:25:ea:a0:f9:2b:20:
         59:85:20:e9:5e:d7:60:65:47:a8:5d:51:3f:e3:c8:94:1d:fd:
         17:80:a3:ef:17:62:f5:16:54:7e:fa:a1:70:44:55:9a:28:4c:
         ad:e1:26:25:ab:ea:89:32:91:45:61:d0:c0:c0:59:c9:79:75:
         9f:7c:9e:a9:76:33:b3:b2:71:61:60:87:e7:50:8e:16:d8:31:
         8c:17:d7:a6:43:43:21:a9:12:e2:33:86:8a:a4:ed:19:fe:20:
         45:f9:23:cd:2a:02:8a:64:4f:c1:3a:bb:3f:41:74:67:91:ea:
         5c:88:54:c9:4a:ed:43:76:70:92:f7:0d:92:76:03:f2:96:df:
         5f:53:ff:62:5c:8a:87:a8:4f:9e:29:09:33:89:7d:ea:0e:dd:
         8a:0b:90:d5:1a:48:dd:cf:f3:14:4d:52:1a:b9:95:02:48:12:
         17:63:27:6f:cf:6f:ac:7f:ed:20:2d:a2:89:85:31:a0:02:56:
         ab:cd:c4:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 03:31:34 2026 by rpki-client