Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
File:                     VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft (raw, json)
Hash identifier:          ugulfDSb+6GsL0istJmc4M0OdSHtbhlXYUFijQOyQO8=
Subject key identifier:   99:52:24:60:3F:47:86:29:48:9A:B2:15:46:A4:4E:FB:27:98:55:63
Authority key identifier: 56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8
Certificate issuer:       /CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
Certificate serial:       01A0E8538172FBEAAD57CA184FA67752B3A3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
Manifest number:          1A7A
Signing time:             Mon 28 Sep 2026 14:03:01 +0000
Manifest this update:     Mon 28 Sep 2026 14:03:01 +0000
Manifest next update:     Tue 29 Sep 2026 14:03:01 +0000
Files and hashes:         1: 26y3-FCIjKPuULGuAbdkN8udFTE.roa (hash: 3xGJRZGv4+67a/QQcXMMfIKq4kUi6sQ1GWf2ofA+Ul0=)
                          2: JWW2o_oLbWGpxjMQwNSAqwhhqJQ.roa (hash: 5nCR6cc/bGUZmfvhdh345jAakzPx6XaPK0dVdsIkYOg=)
                          3: VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl (hash: JFBmTnfIGBUbyCH+KjcsBZC8N7zd0xd3BLpKseZAZaE=)
                          4: ZtZBjU0WYLzqgNFkzWWLjKRWDe4.roa (hash: Aa1FwsDclr77KnL36PHDkQS2BvAV7tYr/XQOCzDjAzU=)
                          5: t5f9uZebkbDVSowLOTLeEPd0h2Q.roa (hash: 0xEPrMrVD89X+wGNKbD1d1Cor+K8kwVUKbsyOrl9tUI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 14:02:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e8:53:81:72:fb:ea:ad:57:ca:18:4f:a6:77:52:b3:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5673fa6842973edf62d579b4efec2fa64fdbf8c8
        Validity
            Not Before: Sep 28 14:03:01 2026 GMT
            Not After : Sep 29 14:03:01 2026 GMT
        Subject: CN=995224603f478629489ab21546a44efb27985563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7b:c0:a9:41:f0:c8:28:a9:56:0f:c7:72:06:
                    c8:d1:6d:9c:a6:69:d9:a3:c4:15:86:93:30:6b:39:
                    39:f4:dc:b9:ab:02:bd:91:cc:13:20:2d:f2:d7:3c:
                    23:9e:97:33:51:11:02:dd:a3:29:d8:75:ed:81:58:
                    df:66:06:8f:a7:84:c0:07:d1:ec:ae:4a:21:66:6c:
                    b7:5a:c1:5a:38:ad:43:3c:ad:57:78:07:9e:2d:df:
                    4f:1a:93:6f:c8:ba:1a:1f:a5:04:ab:b5:64:5a:8a:
                    60:72:bb:f4:68:55:d6:ba:70:82:54:27:38:38:fa:
                    be:17:1f:4e:c1:60:10:22:58:32:aa:04:da:87:d7:
                    f2:8a:11:e1:68:af:82:ac:e3:bc:f1:93:9a:41:56:
                    6f:04:e9:4c:f4:f4:32:c1:2f:be:f4:80:bd:63:12:
                    83:2a:13:a4:f5:0e:ed:e0:6e:2f:b7:5a:29:73:e1:
                    41:df:d9:91:4c:10:d9:36:2d:15:f1:8a:87:99:96:
                    03:d2:43:7d:33:23:a3:e7:9d:69:2d:9f:e7:43:7a:
                    fd:94:1e:b2:79:dc:e7:96:da:7c:18:1f:f1:2a:0c:
                    7f:be:f7:62:6a:d3:6e:d9:ca:73:6c:37:c0:5e:b0:
                    24:16:81:2c:ea:21:12:e2:40:7b:3b:97:24:04:60:
                    0c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:52:24:60:3F:47:86:29:48:9A:B2:15:46:A4:4E:FB:27:98:55:63
            X509v3 Authority Key Identifier:
                keyid:56:73:FA:68:42:97:3E:DF:62:D5:79:B4:EF:EC:2F:A6:4F:DB:F8:C8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/78e5eb-c2af-4462-b859-898996c861df/1/VnP6aEKXPt9i1Xm07-wvpk_b-Mg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2f:aa:63:39:a7:80:6a:2e:2a:a6:6a:48:25:57:e5:7b:3f:20:
         0c:58:b8:3f:eb:d3:22:35:56:18:8c:ce:79:10:06:33:f3:70:
         ce:59:a1:f9:54:e6:b2:65:3f:e4:ad:4e:4e:c2:a5:75:f1:e7:
         0b:3f:ce:bf:35:ea:8c:fc:44:2d:c0:41:8b:7e:29:cf:e7:60:
         82:02:6a:a8:1c:b0:4c:9f:e1:ff:37:43:a7:48:f7:32:02:f3:
         4f:c9:a8:a5:5f:da:8b:ee:b9:18:08:ac:c5:6e:96:00:f5:e8:
         fa:09:58:e1:9f:5a:5a:72:1f:fd:68:3f:18:9e:ac:23:9b:0d:
         4c:94:6d:72:7f:4e:58:3a:2b:f0:86:b0:87:bd:e4:aa:21:89:
         df:94:cb:46:87:82:3c:a0:b8:90:aa:a1:3a:95:5d:35:ad:40:
         65:de:1b:2b:e1:48:30:6a:01:51:1b:8b:33:dc:1f:d6:53:09:
         0b:d5:c9:cc:13:9c:20:c8:85:a2:6f:e2:2d:65:31:1e:7a:2b:
         2c:65:3f:f9:76:48:99:be:be:07:85:ed:4e:b7:46:4e:22:37:
         9f:c4:ca:e9:72:5c:b4:0c:ef:1a:cc:a8:1a:79:3d:90:9e:c7:
         77:ca:5a:78:aa:32:a7:66:17:a1:36:d5:26:ba:5b:ce:12:cd:
         d4:10:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:54:14 2026 by rpki-client