Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File:                     VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier:          EBaCjwNqb3Y94yrpQZujVGCtxTvE2FmHF6ph18dCtow=
Subject key identifier:   28:A0:52:50:73:6D:E3:D8:09:B7:8E:2D:FA:4E:8C:C4:9A:56:4E:57
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer:       /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial:       01A0E740B66251F14F679BE1086D58ACF396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number:          16A6
Signing time:             Mon 28 Sep 2026 09:02:52 +0000
Manifest this update:     Mon 28 Sep 2026 09:02:52 +0000
Manifest next update:     Tue 29 Sep 2026 09:02:52 +0000
Files and hashes:         1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
                          2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: mKoQx2XXCXUzE6vo9dy+GSbY3EgYe+VumyzvF0zHM1U=)
                          3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 29 Sep 2026 08:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e7:40:b6:62:51:f1:4f:67:9b:e1:08:6d:58:ac:f3:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
        Validity
            Not Before: Sep 28 09:02:52 2026 GMT
            Not After : Sep 29 09:02:52 2026 GMT
        Subject: CN=28a05250736de3d809b78e2dfa4e8cc49a564e57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a2:e3:25:8f:1b:cc:68:03:90:ff:c3:eb:0f:
                    94:28:a9:5e:76:67:fd:89:79:ee:86:5f:0b:7f:9a:
                    f9:17:a5:66:a5:af:ca:3c:a4:a9:3c:bc:85:86:2c:
                    f3:c4:77:1e:ba:6e:3a:3c:3a:55:27:f6:11:d2:86:
                    4f:3b:0e:44:b8:ea:d7:49:c5:9f:50:8d:9b:1e:68:
                    9b:28:25:0c:8e:2d:5f:ee:68:dc:0b:36:7c:01:93:
                    19:de:50:ca:94:e5:9a:2d:c6:75:f5:4f:e6:6e:f0:
                    23:cc:97:3b:59:d9:2a:45:a4:d0:06:da:79:67:16:
                    1a:bc:bb:c8:ca:22:c4:fe:55:c6:1d:cc:49:b2:8e:
                    cd:70:a2:b3:23:c1:3b:19:96:95:5d:af:56:88:c5:
                    0b:ee:29:ad:0c:ef:5c:21:07:8e:f4:7a:56:a8:9f:
                    30:d9:8b:72:e9:c9:e7:12:8c:c0:c8:94:ab:e9:ef:
                    5e:6f:1f:dd:4e:55:6e:8a:6c:68:c1:c6:13:e2:57:
                    b2:c3:0d:fa:d8:d1:13:9d:db:08:ef:f2:e2:07:24:
                    54:97:36:e8:3d:5a:e6:db:11:74:5d:93:b9:38:36:
                    b6:db:7e:88:b2:4c:53:ad:60:4c:5e:bd:8c:42:a4:
                    65:a3:dd:f6:5b:95:f1:8b:e2:a7:4c:aa:72:82:d6:
                    05:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A0:52:50:73:6D:E3:D8:09:B7:8E:2D:FA:4E:8C:C4:9A:56:4E:57
            X509v3 Authority Key Identifier:
                keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6f:ba:1b:67:c1:ec:ae:0e:3e:7a:a2:a1:70:7b:e7:ba:6a:
         74:cc:26:bd:a2:94:4f:52:9f:b3:15:09:c5:e0:14:86:94:00:
         d3:63:06:cb:d2:4d:24:3a:3e:19:8f:76:d7:09:30:ab:dd:2d:
         57:49:9b:1d:26:4f:6d:18:4a:5f:50:f0:07:14:32:f0:d1:b1:
         f2:0b:d1:5c:38:81:5b:e3:cb:b4:86:b5:5c:46:06:14:83:a4:
         32:d2:12:d2:da:15:6b:a6:2a:54:12:02:89:1f:68:7d:d5:c1:
         1a:2c:e8:b4:de:98:98:ff:3a:00:42:ce:eb:50:f2:ef:6f:30:
         78:73:97:0f:b9:0b:30:4a:05:1a:5a:b0:97:e9:67:9a:69:87:
         04:8c:b2:bc:35:3e:2e:ff:7d:58:f2:3b:9a:c1:2e:11:d1:4b:
         be:94:97:01:86:8b:2b:09:ce:3f:08:13:3a:df:5a:ba:a4:50:
         8d:ae:4b:8d:cb:74:1c:88:c5:4e:03:c2:ed:2a:c4:7c:27:4a:
         28:8b:c6:f5:25:d5:c9:8c:87:9d:bf:3a:f7:3b:a9:96:a1:75:
         5b:4b:ec:b4:08:7b:83:f9:4d:43:72:de:95:22:57:43:af:61:
         06:65:0e:97:ec:9e:6a:43:9f:69:b6:dc:88:de:b2:95:af:a1:
         71:39:54:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 14:10:17 2026 by rpki-client