Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          x+WLhVA29z2h9pewWvd2UTBTEAr2JUpICfET+5Al9iQ=
Subject key identifier:   58:35:24:BB:45:3A:E1:0C:2A:97:7E:26:30:42:69:6A:FE:10:DE:4C
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       019CAC7DDBED8FFA4CDB8EB953579C5E8731
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          0769
Signing time:             Mon 02 Mar 2026 03:00:55 +0000
Manifest this update:     Mon 02 Mar 2026 03:00:55 +0000
Manifest next update:     Tue 03 Mar 2026 03:00:55 +0000
Files and hashes:         1: 0mKPMQWV_Qy-vh6NIOs-vGzzkcs.roa (hash: 40hzdqt6UbwBLVWM2lystwa7D/FQ/GMdaZDwu9K4ql4=)
                          2: BS20TmqftUiHcp-uC9dL2gI-BNc.roa (hash: pr6OCsI1Ad/tkV2rABLwG62aqjOA03sElNbNxIP4zvk=)
                          3: IHxGZu_O4SFl3mCd8QYX5eqd12E.roa (hash: 1i0b2nBfdKjb8NkkxZHECgejSLN+yW+3HQmhrGhzeOI=)
                          4: TC-CR-ZUgo3wldIr7f4nCXHpZbc.roa (hash: Tqa6a80CqmnICEwwvMch0Zn79fYz9/pDyy0fkcJDSKo=)
                          5: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: kg8RPLMob6LHMkpNeTUsZGkSebWJAXYMZG0hRC6G0a4=)
                          6: Z111UjLnwgJb3LbHDJ7UAjwqf7M.roa (hash: oAjU5QxrjsRQZUa6m4Qsajh/Teoh609vw8i9IlPtf6I=)
                          7: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (hash: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:7d:db:ed:8f:fa:4c:db:8e:b9:53:57:9c:5e:87:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Mar  2 03:00:55 2026 GMT
            Not After : Mar  3 03:00:55 2026 GMT
        Subject: CN=583524bb453ae10c2a977e263042696afe10de4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:98:ba:38:f9:43:af:5b:1a:2e:fc:cb:2d:21:
                    9b:39:24:3c:cf:b9:4d:6d:e5:8b:d0:6b:16:1b:4d:
                    d1:04:05:cf:9c:98:d8:9b:03:67:f9:8f:6b:a3:10:
                    54:a9:bd:27:86:01:1a:ea:9d:c7:88:24:ef:8f:c3:
                    c6:85:46:b1:a8:2b:8d:af:20:2d:75:fb:ed:9a:90:
                    49:65:13:d5:57:dc:24:67:b8:df:b3:66:74:ad:0f:
                    f5:de:59:0b:e5:98:f3:5f:f3:52:e2:51:f1:1e:d4:
                    f5:49:1a:67:90:41:de:30:50:1f:13:24:51:b3:4f:
                    c8:76:91:7c:ce:2b:e6:e1:1d:62:cf:47:86:3a:55:
                    96:cf:b4:8e:9c:0e:99:20:6b:67:3b:60:4a:3f:d8:
                    66:c4:0d:21:dc:4b:37:a5:db:cb:1c:5e:9c:d4:0b:
                    ee:49:ef:95:c8:9e:b2:7a:04:63:37:8d:d7:70:df:
                    50:9d:9c:6b:ea:12:44:17:c5:6a:ed:d7:6d:26:c0:
                    90:47:ed:60:29:ff:63:e0:32:ca:c6:b3:16:9f:26:
                    4c:8b:c6:4f:14:6a:4d:01:df:34:92:0a:5c:91:3e:
                    c7:92:a3:1d:a7:5d:45:f0:a0:4f:e0:ec:aa:17:f3:
                    e8:32:92:27:b8:01:0e:e5:69:f4:2b:6d:99:04:20:
                    c3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:35:24:BB:45:3A:E1:0C:2A:97:7E:26:30:42:69:6A:FE:10:DE:4C
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:b5:45:79:83:11:b6:1a:4f:b2:7d:fe:f3:0b:92:af:80:ea:
         07:77:76:05:a0:6f:6b:06:d2:d5:ac:4e:54:5e:b7:36:30:e2:
         56:97:0b:da:e9:84:db:17:2b:d3:e8:3e:bb:4e:81:45:6d:63:
         76:41:7a:36:f5:7f:7e:96:c6:8a:d1:15:60:0d:38:c6:b4:d0:
         33:e5:dc:b8:ba:b3:d4:01:05:a7:1a:0f:ee:c4:a8:2e:70:6d:
         c3:bf:57:ba:ff:45:ee:9c:44:e5:3d:a0:dc:5d:ef:6c:a3:0c:
         c7:d3:4a:b6:ec:6e:38:25:32:43:10:96:88:f1:7b:92:93:60:
         78:7d:cb:82:38:7c:c6:14:1f:2f:ae:65:c6:15:bd:b0:0c:09:
         74:a5:07:95:3b:7c:cb:6a:fe:92:1b:88:41:a1:fa:63:46:b3:
         4f:13:39:29:0a:a1:57:94:ae:03:d2:e6:04:24:8d:dd:84:44:
         b3:7c:8a:5c:83:5f:ac:b7:88:38:6f:df:ea:7f:60:b3:97:c3:
         f5:37:43:43:02:e1:ce:2b:6c:34:3d:bb:ba:22:2e:f7:83:3d:
         f4:1f:b3:b0:36:aa:6b:ae:22:c7:20:74:60:18:70:92:ec:e4:
         4b:e0:cb:12:f3:92:0e:8c:1a:f8:28:46:23:0e:51:f7:9c:06:
         b9:a1:85:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:38:54 2026 by rpki-client