Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          WwHONj9H4RsZ4SxiU9mVvBMEZrMmXOZg45B17dHVArI=
Subject key identifier:   F6:65:AC:CD:02:07:C3:6C:9E:A8:AA:7E:1E:B1:1F:67:DD:8D:67:2A
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       01A11C3F01561D71903B5E6E5BE1955E963F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          09BA
Signing time:             Thu 08 Oct 2026 16:00:53 +0000
Manifest this update:     Thu 08 Oct 2026 16:00:53 +0000
Manifest next update:     Fri 09 Oct 2026 16:00:53 +0000
Files and hashes:         1: 0mKPMQWV_Qy-vh6NIOs-vGzzkcs.roa (hash: 40hzdqt6UbwBLVWM2lystwa7D/FQ/GMdaZDwu9K4ql4=)
                          2: BS20TmqftUiHcp-uC9dL2gI-BNc.roa (hash: pr6OCsI1Ad/tkV2rABLwG62aqjOA03sElNbNxIP4zvk=)
                          3: IHxGZu_O4SFl3mCd8QYX5eqd12E.roa (hash: 1i0b2nBfdKjb8NkkxZHECgejSLN+yW+3HQmhrGhzeOI=)
                          4: QdcTnt5_sEE-QZP9_nOM9dgWIto.roa (hash: /rQEfXIzrs8kat99vyddHdND/+1w6aQwSOy8QmHuBFg=)
                          5: UMFicQc5pR1BZjbSliFsmn9hVsQ.roa (hash: J5/XGYpI2q8qdb/0SuhhGpJUPu+HCV/urhJXWQ6uRoM=)
                          6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: 3NC5T2tem1RIudDDFWRSJnkeGK4FumeAc+gZ78OCHoU=)
                          7: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (hash: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 09 Oct 2026 14:16:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:1c:3f:01:56:1d:71:90:3b:5e:6e:5b:e1:95:5e:96:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Oct  8 16:00:53 2026 GMT
            Not After : Oct  9 16:00:53 2026 GMT
        Subject: CN=f665accd0207c36c9ea8aa7e1eb11f67dd8d672a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:a7:da:2e:b7:1b:2e:8c:c1:f3:a3:0f:07:2e:
                    cc:94:9f:67:59:58:a4:fe:06:f4:96:05:15:ec:14:
                    c8:24:d2:8a:28:d3:96:29:e2:da:ea:55:7f:81:8d:
                    37:2f:2c:3c:79:5e:94:4b:95:2b:19:45:34:4b:68:
                    27:e7:53:b6:e6:89:fb:08:ef:c7:fd:39:63:25:d7:
                    35:b3:36:dc:0d:ee:79:07:22:9c:69:c3:d9:b0:c1:
                    d8:6f:24:73:a9:b8:ac:2c:17:6b:6a:b3:56:31:87:
                    77:95:86:04:63:d3:21:57:e6:5d:e8:95:6c:bd:ee:
                    ad:70:13:23:ed:7e:9f:4a:d9:4f:12:b4:13:88:94:
                    11:5b:f0:66:fc:c1:9e:16:bb:e1:16:fa:2a:ad:28:
                    47:82:4c:77:3d:e8:6a:20:57:c2:d7:4d:6e:00:e7:
                    76:b0:f1:0e:4a:26:14:43:d0:ab:65:5f:c3:40:65:
                    6c:04:27:19:b6:80:12:39:6c:f9:a1:bc:f1:1f:fd:
                    0e:4e:25:70:c5:55:12:61:2c:ee:87:c2:86:25:22:
                    6b:15:14:b8:6b:82:8d:19:64:b2:41:4b:ca:fb:88:
                    e5:92:91:11:0c:47:4c:fd:2d:7f:cd:ed:b6:e8:a3:
                    67:18:23:ef:2b:87:ca:f9:e5:e5:0d:4d:73:a2:1d:
                    0b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:65:AC:CD:02:07:C3:6C:9E:A8:AA:7E:1E:B1:1F:67:DD:8D:67:2A
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:9e:20:3f:21:b8:15:d7:70:55:bd:f8:0e:7c:3f:3e:df:40:
         d6:9a:d4:1d:37:f4:45:15:57:7c:ff:01:03:02:7a:49:2f:c1:
         86:34:ed:2d:49:23:75:01:78:ab:27:48:2b:54:d7:2d:24:5c:
         6f:8f:23:2e:aa:00:1e:aa:d7:e7:30:7c:5e:ba:98:97:f5:c1:
         27:c7:cf:b6:81:af:8c:68:9d:ca:d5:a9:08:13:29:fc:c1:e1:
         aa:da:5f:4f:48:44:70:41:a4:4c:b4:a8:44:3e:07:3a:f2:61:
         29:8a:1f:1a:da:fa:b1:f3:d5:6c:1d:09:76:2b:f8:fc:cf:f0:
         74:01:3e:03:81:c6:a8:f8:e8:c9:27:e1:a1:13:c7:04:9b:91:
         49:9e:57:c9:f6:76:27:38:b9:b9:55:ae:2b:e7:a4:cc:6f:f1:
         e7:c2:ad:55:0f:99:07:67:5d:06:83:e0:6a:d1:f5:3b:0d:47:
         83:c4:d2:52:f8:7c:14:f6:86:53:23:97:72:b3:f9:3f:e5:8f:
         34:e3:45:f9:4a:b1:d7:ab:5b:0e:24:13:e6:05:b2:42:ff:92:
         73:17:50:47:d1:6a:96:03:ee:c9:1c:bc:72:fc:f0:68:1c:4c:
         14:36:07:5a:30:e5:18:7b:1e:c2:f4:e9:79:88:5c:86:eb:47:
         54:af:4e:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 19:37:17 2026 by rpki-client