Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          D7SzdOFhHxjSNgxnP8couK+3/0AAtdmuUpB3PfWo9zE=
Subject key identifier:   EF:91:4B:6B:23:53:0E:37:19:3F:76:88:33:12:BC:AD:4E:B2:91:69
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       01A0C7469FACF567241517241A3CF8C767E3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0EFE
Signing time:             Tue 22 Sep 2026 04:01:29 +0000
Manifest this update:     Tue 22 Sep 2026 04:01:29 +0000
Manifest next update:     Wed 23 Sep 2026 04:01:29 +0000
Files and hashes:         1: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: GkpWP3Ooapx0PrI9g5vP8rSlu9wUtWXLxQ0L0Jv1ncQ=)
                          2: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (hash: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 04:01:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c7:46:9f:ac:f5:67:24:15:17:24:1a:3c:f8:c7:67:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Sep 22 04:01:29 2026 GMT
            Not After : Sep 23 04:01:29 2026 GMT
        Subject: CN=ef914b6b23530e37193f76883312bcad4eb29169
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:82:5d:0f:dc:87:7d:5b:6a:01:fd:7a:11:b4:
                    ac:f0:10:3e:81:af:0c:5b:75:d7:91:b8:1a:16:17:
                    46:b3:e1:c5:e4:38:01:38:9f:1e:c5:49:2b:6b:76:
                    8e:63:98:93:da:e0:ca:05:8d:32:d0:94:f7:a4:be:
                    f3:68:29:ad:b7:bb:91:9e:63:02:39:59:73:82:78:
                    1e:53:b7:37:52:95:f8:3a:d5:00:9d:90:c3:02:1d:
                    23:f8:99:90:00:b5:82:b9:91:9f:af:40:50:35:de:
                    37:5c:11:91:4d:88:b9:78:2a:2d:c0:43:be:aa:bd:
                    29:18:80:65:42:83:32:5f:ac:b6:1d:dd:29:05:ab:
                    73:49:94:0d:b9:6b:60:cc:32:6e:cc:2b:91:d9:11:
                    68:86:6d:8c:1e:28:f9:6c:b6:12:cb:06:50:1e:5f:
                    37:44:62:37:88:e5:63:65:0f:65:8f:52:07:c3:d2:
                    38:25:70:9b:a7:6d:f6:be:cb:a1:53:22:a3:3a:1c:
                    1b:9c:31:d6:19:51:60:4f:7a:44:f3:2b:90:0a:4c:
                    48:21:7d:e1:dd:31:37:93:63:5c:18:5b:e5:d6:5a:
                    d9:e5:27:48:1f:87:62:38:d8:13:50:63:a3:ea:1c:
                    00:18:cd:14:59:d6:83:0b:7e:88:5a:44:76:57:d5:
                    9d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:91:4B:6B:23:53:0E:37:19:3F:76:88:33:12:BC:AD:4E:B2:91:69
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:0a:69:53:c8:be:1c:29:54:e8:1d:31:be:d8:cd:c5:f4:6f:
         6d:fa:49:a1:18:92:9c:b3:5b:b7:aa:c7:97:d5:df:54:0e:59:
         5d:5b:df:26:57:ab:95:7d:b1:4a:1a:a9:24:16:f2:ad:ba:e6:
         d7:d2:3a:38:b6:c7:b9:a8:ce:21:49:bb:2f:34:64:40:42:c2:
         55:02:3b:89:a2:d3:11:e3:06:ee:dc:39:4a:0b:80:48:17:ac:
         3b:90:69:55:c2:ca:a3:9e:ab:65:19:52:40:87:6e:4c:30:27:
         27:9f:86:85:c7:6e:de:2f:4a:22:e4:b0:a7:ae:7c:a6:68:e6:
         c5:20:04:b6:d7:07:dc:93:30:64:16:9d:01:72:6f:b1:ed:6f:
         02:f3:c4:b9:aa:5b:b0:d4:25:57:02:da:d7:3c:19:be:29:77:
         3d:72:15:78:0a:48:d2:01:63:af:9a:5e:c6:2d:01:bb:d3:e3:
         60:44:85:3b:f9:f9:f8:2f:5a:a6:59:0b:df:a1:e0:c1:71:0f:
         92:c4:0e:9d:c1:d8:6a:21:0f:d5:38:6e:22:14:b1:2a:0d:b8:
         9e:7d:e2:12:44:cd:60:36:c2:e2:57:c3:dc:bc:08:44:63:4e:
         cd:88:ca:82:28:44:c2:0f:65:7c:fb:39:89:b3:9e:75:27:45:
         48:1d:5d:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDHRp+s9WckFRckGjz4x2fjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTU3NzliYzhiMGJiZTVlNTdhMDc3NTViMTMyOGE1N2M5
Y2FkNjAwHhcNMjYwOTIyMDQwMTI5WhcNMjYwOTIzMDQwMTI5WjAzMTEwLwYDVQQD
EyhlZjkxNGI2YjIzNTMwZTM3MTkzZjc2ODgzMzEyYmNhZDRlYjI5MTY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4JdD9yHfVtqAf16EbSs8BA+ga8M
W3XXkbgaFhdGs+HF5DgBOJ8exUkra3aOY5iT2uDKBY0y0JT3pL7zaCmtt7uRnmMC
OVlzgngeU7c3UpX4OtUAnZDDAh0j+JmQALWCuZGfr0BQNd43XBGRTYi5eCotwEO+
qr0pGIBlQoMyX6y2Hd0pBatzSZQNuWtgzDJuzCuR2RFohm2MHij5bLYSywZQHl83
RGI3iOVjZQ9lj1IHw9I4JXCbp232vsuhUyKjOhwbnDHWGVFgT3pE8yuQCkxIIX3h
3TE3k2NcGFvl1lrZ5SdIH4diONgTUGOj6hwAGM0UWdaDC36IWkR2V9Wd5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+RS2sjUw43GT92iDMSvK1OspFpMB8GA1UdIwQY
MBaAFL5Vd5vIsLvl5XoHdVsTKKV8nK1gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMt
YjE4ZDllNzFjMTZhLzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS80ZTBiYjQtZGNjMi00MTQwLWIyMGMtYjE4ZDllNzFjMTZh
LzEvdmxWM204aXd1LVhsZWdkMVd4TW9wWHljcldBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjwppU8i+
HClU6B0xvtjNxfRvbfpJoRiSnLNbt6rHl9XfVA5ZXVvfJlerlX2xShqpJBbyrbrm
19I6OLbHuajOIUm7LzRkQELCVQI7iaLTEeMG7tw5SguASBesO5BpVcLKo56rZRlS
QIduTDAnJ5+Ghcdu3i9KIuSwp658pmjmxSAEttcH3JMwZBadAXJvse1vAvPEuapb
sNQlVwLa1zwZvil3PXIVeApI0gFjr5pexi0Bu9PjYESFO/n5+C9aplkL36HgwXEP
ksQOncHYaiEP1ThuIhSxKg24nn3iEkTNYDbC4lfD3LwIRGNOzYjKgihEwg9lfPs5
ibOedSdFSB1d7g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 10:13:36 2026 by rpki-client