Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
File:                     VrTLQmw_QCVQIcng1H3IMBequxM.mft (raw, json)
Hash identifier:          QqOANOtFb2zCOr/lKeVG5o9E8oyWxohtFKZw3yo++oI=
Subject key identifier:   5E:2D:69:F5:C7:45:51:4E:05:D2:F9:DB:45:6B:5B:15:6F:DE:97:E8
Authority key identifier: 56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13
Certificate issuer:       /CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
Certificate serial:       01A0CB597399492311A0E1B8816499B8BF34
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
Manifest number:          29
Signing time:             Tue 22 Sep 2026 23:00:32 +0000
Manifest this update:     Tue 22 Sep 2026 23:00:32 +0000
Manifest next update:     Wed 23 Sep 2026 23:00:32 +0000
Files and hashes:         1: VrTLQmw_QCVQIcng1H3IMBequxM.crl (hash: GKDNRdI7j5H0T6qM/IZwgMum9ihZmGTk020Awah5cYo=)
                          2: cbod8T-kZlikRq3LeFGefidEURA.roa (hash: aSy5zxb/U6h4osrQnmgMwfZXWE/lcFtOIfKr5xh6JnY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 22:31:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cb:59:73:99:49:23:11:a0:e1:b8:81:64:99:b8:bf:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4cb426c3f40255021c9e0d47dc83017aabb13
        Validity
            Not Before: Sep 22 23:00:32 2026 GMT
            Not After : Sep 23 23:00:32 2026 GMT
        Subject: CN=5e2d69f5c745514e05d2f9db456b5b156fde97e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1a:24:11:ce:14:d0:db:58:85:af:cf:f9:d3:
                    f7:f5:11:12:01:00:d5:b3:55:eb:6b:54:69:e1:ae:
                    4f:2d:4d:80:2b:26:3f:b2:c4:8f:5c:41:b3:bd:cf:
                    37:d5:18:69:cf:31:d2:24:d6:78:a8:ff:58:ee:fa:
                    db:9f:fd:fa:e5:1c:aa:11:6c:5a:56:d3:39:9a:93:
                    ec:69:6a:c3:cb:aa:12:5b:92:1b:b2:39:6b:5e:10:
                    2e:1f:0b:58:36:9b:a3:82:3a:3c:17:53:7e:69:56:
                    b4:39:ab:77:b8:ff:49:03:fc:0a:84:44:86:b8:56:
                    bf:ab:80:c4:6b:ec:e1:8c:41:a2:e4:2d:db:c7:60:
                    d9:a0:b0:14:3d:1a:24:f4:fe:b5:a3:d8:bb:82:90:
                    55:0a:27:bf:f8:b4:ac:5c:25:0b:b4:89:f6:3d:86:
                    bf:ac:da:4e:f7:d3:fc:3b:54:ee:00:93:9f:dd:7a:
                    a8:36:71:fa:5d:b5:af:31:1b:70:03:8d:cd:16:2c:
                    36:85:01:62:a6:e8:56:7b:e6:12:90:78:32:2d:69:
                    1c:39:41:c8:72:6c:3c:63:81:2d:90:1d:e0:cf:95:
                    6f:a1:90:63:b1:3c:e2:ba:42:f9:68:28:88:2e:5d:
                    4b:ee:c3:6a:6a:58:5b:1d:41:03:57:27:48:40:a8:
                    55:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:2D:69:F5:C7:45:51:4E:05:D2:F9:DB:45:6B:5B:15:6F:DE:97:E8
            X509v3 Authority Key Identifier:
                keyid:56:B4:CB:42:6C:3F:40:25:50:21:C9:E0:D4:7D:C8:30:17:AA:BB:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrTLQmw_QCVQIcng1H3IMBequxM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0289-9dbd-44dd-826a-54fb94cbc464/1/VrTLQmw_QCVQIcng1H3IMBequxM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:b5:47:ab:06:78:6d:c3:77:f1:cf:65:fa:76:31:93:81:d0:
         60:a2:a8:b5:36:bc:5e:fe:a4:8b:4e:c8:e9:00:63:fd:26:20:
         f9:dc:ea:21:17:51:62:cc:f1:f7:67:b2:15:48:ba:9b:de:1c:
         c7:cc:7f:36:2e:4b:2d:7a:19:62:83:f5:71:80:bf:41:ff:9f:
         f5:e0:58:32:3e:f9:d6:e0:57:41:a6:86:b1:79:a1:10:19:b1:
         e1:84:83:a9:28:c6:d8:64:4a:bd:9f:c5:85:6b:96:3f:11:57:
         1b:47:fe:ef:5b:35:e7:b2:f3:e3:b4:fe:48:ee:04:1d:e7:85:
         b7:7b:f9:0d:e9:8d:7e:14:78:c7:3d:eb:af:49:46:04:e8:65:
         9f:d0:da:97:15:7b:27:47:c9:28:88:9a:ba:55:8e:48:7c:b9:
         30:8e:28:8c:84:20:70:ba:69:3b:f2:67:d2:f4:07:82:98:eb:
         ca:de:99:35:44:b4:ef:36:f6:4a:76:9b:7c:c8:52:fb:ce:dd:
         43:41:24:93:83:58:74:27:83:78:b9:dc:dc:f7:14:2e:27:bc:
         9f:be:d2:0b:0c:0f:cc:70:d2:bc:05:b6:c5:cc:7a:9b:c1:5d:
         02:ab:6b:0e:16:a2:b3:a5:46:42:a6:48:bb:b9:4c:ff:97:74:
         d0:0c:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:03:43 2026 by rpki-client