Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
File:                     VwLHy8I1Jyt6zNez8LDkfGHHXis.mft (raw, json)
Hash identifier:          AYuM3r7Rdt9t0VUA44RnL8bcrp79kx07ZC76eJ1MSjk=
Subject key identifier:   E8:37:88:70:43:87:52:A1:B1:95:40:0B:0D:2A:6E:94:54:A6:43:DB
Authority key identifier: 57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
Certificate issuer:       /CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Certificate serial:       01A0C858D757301AF4D8D050E6F38EF7BCF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
Manifest number:          E1
Signing time:             Tue 22 Sep 2026 09:01:00 +0000
Manifest this update:     Tue 22 Sep 2026 09:01:00 +0000
Manifest next update:     Wed 23 Sep 2026 09:01:00 +0000
Files and hashes:         1: Dv1loStZYAsjb_Af0DKMu_bevS8.roa (hash: Zb9q97rROgQhDovcWngVEaqZebMrRktFUPt7d2lNmQc=)
                          2: VwLHy8I1Jyt6zNez8LDkfGHHXis.crl (hash: PUwoo25f1o4N904+sg2SuPgZpKQrT2/BHfd4Ho/vWrI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 23 Sep 2026 05:59:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c8:58:d7:57:30:1a:f4:d8:d0:50:e6:f3:8e:f7:bc:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
        Validity
            Not Before: Sep 22 09:01:00 2026 GMT
            Not After : Sep 23 09:01:00 2026 GMT
        Subject: CN=e8378870438752a1b195400b0d2a6e9454a643db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:f7:76:c8:6f:35:99:1a:c5:45:ba:f0:09:47:
                    03:4b:a9:98:da:3b:9d:e8:86:ee:f4:f0:bf:79:6e:
                    50:07:26:6c:63:7b:22:bb:1a:6b:5c:35:97:5a:17:
                    e4:30:76:ad:88:a5:35:8f:9b:0b:79:04:23:d3:ea:
                    06:53:76:01:db:3b:97:05:32:ef:1b:a8:7a:6f:cc:
                    69:b8:95:9f:ee:3a:08:26:9f:d6:7c:c2:aa:a5:41:
                    66:17:c4:b5:92:ec:10:b4:c0:e4:4e:86:ce:c7:67:
                    78:aa:ab:d9:d6:5e:0f:ad:c2:36:6a:a9:89:ae:8a:
                    b0:15:95:e2:fa:c2:04:83:22:e3:98:cc:56:8f:9a:
                    d7:47:ee:e1:48:8f:72:07:4c:9f:21:95:b1:ed:3a:
                    07:ab:39:83:bc:b4:04:cd:ad:44:d6:e3:6e:36:65:
                    f1:7f:92:1e:12:e9:9f:df:b4:c0:f3:b9:47:74:17:
                    ed:1c:f3:da:d4:22:dc:87:c3:22:32:51:41:e0:ad:
                    55:dd:24:08:15:c7:be:35:5d:98:c5:79:5e:8f:ec:
                    36:fd:b0:3e:84:dc:90:ce:b9:08:29:aa:ad:4d:0a:
                    87:4e:09:fd:4c:d9:f4:be:91:3d:03:62:b1:b3:ae:
                    c9:ef:f7:82:bd:72:82:f0:53:5d:46:46:8a:d9:6b:
                    a5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:37:88:70:43:87:52:A1:B1:95:40:0B:0D:2A:6E:94:54:A6:43:DB
            X509v3 Authority Key Identifier:
                keyid:57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:df:c7:d8:34:19:a4:dc:a9:e6:62:1d:c3:0b:c0:7f:4a:7d:
         db:f8:5b:47:5d:19:7a:80:13:89:79:a1:0f:84:4f:49:af:34:
         f0:e8:97:d4:94:1d:16:d4:dd:48:bc:89:a6:e3:53:29:6b:e4:
         4b:f2:25:33:97:be:ba:94:9e:75:3b:f7:37:ad:21:c6:e8:02:
         5c:73:2f:d4:1d:49:17:0a:74:6f:e0:b5:48:34:41:b2:c4:02:
         b8:1a:15:eb:7f:28:47:13:59:ab:0f:18:19:09:53:95:45:ed:
         62:1d:58:2e:f7:6d:c7:1d:cf:46:b9:c0:1f:65:b6:ce:ac:09:
         79:38:89:e0:93:0a:98:af:bb:b3:77:7a:75:e8:05:66:e7:ba:
         ad:c3:ad:d2:54:1e:21:b6:c7:aa:87:2b:ec:8f:6c:15:17:d0:
         c6:be:5b:13:fb:4f:4e:f7:d6:39:7d:9e:98:96:97:0b:14:80:
         81:d2:84:29:bb:38:4c:8f:5e:3d:20:d9:0d:2b:0e:95:fb:52:
         d8:c9:07:e3:83:b7:e6:60:fe:11:db:c3:85:75:e7:c7:2a:97:
         5a:8f:3d:58:cc:61:98:f4:f8:04:56:4f:99:54:93:54:52:9f:
         e3:18:ba:ce:36:7d:c6:2a:bd:3e:b3:6f:22:e1:ed:8b:01:65:
         b1:91:20:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDIWNdXMBr02NBQ5vOO97z2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDJjN2NiYzIzNTI3MmI3YWNjZDdiM2YwYjBlNDdjNjFj
NzVlMmIwHhcNMjYwOTIyMDkwMTAwWhcNMjYwOTIzMDkwMTAwWjAzMTEwLwYDVQQD
EyhlODM3ODg3MDQzODc1MmExYjE5NTQwMGIwZDJhNmU5NDU0YTY0M2RiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvd2yG81mRrFRbrwCUcDS6mY2jud
6Ibu9PC/eW5QByZsY3siuxprXDWXWhfkMHatiKU1j5sLeQQj0+oGU3YB2zuXBTLv
G6h6b8xpuJWf7joIJp/WfMKqpUFmF8S1kuwQtMDkTobOx2d4qqvZ1l4PrcI2aqmJ
roqwFZXi+sIEgyLjmMxWj5rXR+7hSI9yB0yfIZWx7ToHqzmDvLQEza1E1uNuNmXx
f5IeEumf37TA87lHdBftHPPa1CLch8MiMlFB4K1V3SQIFce+NV2YxXlej+w2/bA+
hNyQzrkIKaqtTQqHTgn9TNn0vpE9A2Kxs67J7/eCvXKC8FNdRkaK2Wul+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOg3iHBDh1KhsZVACw0qbpRUpkPbMB8GA1UdIwQY
MBaAFFcCx8vCNScreszXs/Cw5Hxhx14rMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndMSHk4STFKeXQ2ek5lejhMRGtmR0hIWGlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgt
MjFlYzY1NjVjOWJlLzEvVndMSHk4STFKeXQ2ek5lejhMRGtmR0hIWGlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8yYTYwYWMtZGM4My00Y2EzLWI3ODgtMjFlYzY1NjVjOWJl
LzEvVndMSHk4STFKeXQ2ek5lejhMRGtmR0hIWGlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACd/H2DQZ
pNyp5mIdwwvAf0p92/hbR10ZeoATiXmhD4RPSa808OiX1JQdFtTdSLyJpuNTKWvk
S/IlM5e+upSedTv3N60hxugCXHMv1B1JFwp0b+C1SDRBssQCuBoV638oRxNZqw8Y
GQlTlUXtYh1YLvdtxx3PRrnAH2W2zqwJeTiJ4JMKmK+7s3d6degFZue6rcOt0lQe
IbbHqocr7I9sFRfQxr5bE/tPTvfWOX2emJaXCxSAgdKEKbs4TI9ePSDZDSsOlftS
2MkH44O35mD+EdvDhXXnxyqXWo89WMxhmPT4BFZPmVSTVFKf4xi6zjZ9xiq9PrNv
IuHtiwFlsZEgTQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 14:50:27 2026 by rpki-client