Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
File:                     VHd3rO-MSS5QEb3ewSmviuyXS3c.mft (raw, json)
Hash identifier:          kyfMHHzN7CVWPkTHehZlMuFCqvgRX7jxffSMsauCAEY=
Subject key identifier:   F7:5E:3E:94:68:EA:6E:1A:E4:43:E9:18:BE:08:EB:0D:3A:79:FF:B4
Authority key identifier: 54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77
Certificate issuer:       /CN=547777acef8c492e5011bddec129af8aec974b77
Certificate serial:       01A0C5FCACF5E4194FC6ABC40A8096106746
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
Manifest number:          027E
Signing time:             Mon 21 Sep 2026 22:01:05 +0000
Manifest this update:     Mon 21 Sep 2026 22:01:05 +0000
Manifest next update:     Tue 22 Sep 2026 22:01:05 +0000
Files and hashes:         1: H5HaxNWVOqxU799AVgPxEXn01qU.roa (hash: mWDQsDbJvuwqHmN/2vnE3qUbbfA/iapxxfRizly7drk=)
                          2: VHd3rO-MSS5QEb3ewSmviuyXS3c.crl (hash: NDdQYZIDzIMWf0ZlEQgJBCp03//Oyh29H8oCKlpyK4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 19:45:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c5:fc:ac:f5:e4:19:4f:c6:ab:c4:0a:80:96:10:67:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547777acef8c492e5011bddec129af8aec974b77
        Validity
            Not Before: Sep 21 22:01:05 2026 GMT
            Not After : Sep 22 22:01:05 2026 GMT
        Subject: CN=f75e3e9468ea6e1ae443e918be08eb0d3a79ffb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:a6:aa:22:5c:e1:46:78:c9:d9:00:dd:5c:
                    34:b0:37:fc:36:b1:76:d6:b0:1a:0e:ac:70:6f:67:
                    23:a5:55:45:4d:62:1f:b4:3d:20:c1:b9:09:63:ca:
                    0c:f8:95:5c:86:69:39:73:99:ef:33:9b:b7:cf:cd:
                    8c:d6:15:0a:be:8c:13:30:19:14:b3:36:4b:68:19:
                    e1:23:ce:2a:f4:79:ac:87:79:21:2b:1e:9c:50:78:
                    76:f8:c8:a1:55:f9:e6:f3:12:19:1f:4c:bb:0e:7b:
                    6b:2a:02:99:c9:25:b6:69:34:6f:3e:0a:ee:c1:33:
                    8f:45:84:57:eb:43:97:c8:44:c5:86:78:40:05:4b:
                    ea:e8:ab:2c:c3:a8:fc:94:2c:f4:de:cc:08:6a:5c:
                    ee:39:6d:d8:63:f5:77:58:14:56:3f:6b:28:3e:f7:
                    12:18:e8:f1:ae:7c:97:82:6c:e3:1c:6f:58:6b:db:
                    4a:f7:49:b5:03:b4:79:90:d9:e1:a3:b1:79:59:3b:
                    85:a6:ff:6c:ff:af:22:eb:a1:c3:c7:d7:fb:a1:cb:
                    8a:fa:98:ea:95:00:4c:93:e7:29:20:38:22:5f:29:
                    4b:e2:e5:6a:e4:a1:c0:0b:e9:f4:ac:81:00:b3:c0:
                    70:e1:b1:2f:2b:72:4b:5f:f2:11:bc:b4:db:96:a9:
                    84:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:5E:3E:94:68:EA:6E:1A:E4:43:E9:18:BE:08:EB:0D:3A:79:FF:B4
            X509v3 Authority Key Identifier:
                keyid:54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:83:88:3b:33:07:17:fe:06:e7:e6:3f:38:59:71:38:f2:28:
         67:7f:6e:c6:4b:9d:b4:c6:5d:ab:a4:12:b0:16:37:f5:f2:88:
         56:11:a5:60:ad:bd:5f:68:a7:8b:2e:1d:55:6f:88:15:1e:3e:
         7b:73:b7:1e:58:c9:11:57:01:90:ba:37:b0:0d:4d:cf:95:80:
         63:f2:0b:02:1b:2b:1d:8e:30:86:26:e3:46:af:b0:76:73:ba:
         a2:22:c7:fa:90:7c:d9:48:28:a5:31:d7:ec:3f:09:bc:03:3e:
         b8:8b:52:4b:83:03:aa:0f:c2:1e:d0:05:58:0a:e1:19:8e:2d:
         1e:72:d5:8b:91:ee:74:7f:a1:91:16:cc:83:ec:59:60:b6:de:
         3a:60:d9:9c:9a:54:ba:7a:93:35:32:30:75:30:dc:13:72:61:
         6b:f2:bc:35:9e:51:31:ae:b6:38:71:ab:47:ec:15:9a:57:24:
         d5:59:dd:df:bf:76:70:5d:2b:82:6d:55:ea:6d:68:bf:0d:f4:
         6f:a4:c8:05:8c:48:51:4e:92:40:97:60:f2:b9:0f:26:ab:3c:
         4c:b5:13:a0:6e:bb:22:8a:e1:c2:1f:9c:83:93:7b:14:47:b5:
         88:32:db:35:72:fa:f2:c9:36:8a:24:4b:54:30:27:63:e3:87:
         82:c8:fe:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 05:23:26 2026 by rpki-client