Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
File:                     V-lT6Re6lbeqwtI77rwX8kxvf2k.mft (raw, json)
Hash identifier:          2qoTYAW8dPDU66QGgf+DRtNd0LFL16t5uaTUp8kS8Zk=
Subject key identifier:   47:5A:FB:EF:D2:65:AE:31:77:E0:97:7A:A6:19:87:D2:80:F7:32:B8
Authority key identifier: 57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69
Certificate issuer:       /CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
Certificate serial:       01A10EB9F064472A370C6C3391637F319E8F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
Manifest number:          02BB
Signing time:             Tue 06 Oct 2026 01:00:28 +0000
Manifest this update:     Tue 06 Oct 2026 01:00:28 +0000
Manifest next update:     Wed 07 Oct 2026 01:00:28 +0000
Files and hashes:         1: V-lT6Re6lbeqwtI77rwX8kxvf2k.crl (hash: 6/R2frNI/NFI08t2Dbupd5h+8GRDOkmI3vFMmXFxKy0=)
                          2: VHYuz4UcUkynvHCzUDSQCju7BCI.asa (hash: 0TrnGCXvem2+dXeObnQzySc0MKCAlyb9A5oznrjBvV8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 20:22:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0e:b9:f0:64:47:2a:37:0c:6c:33:91:63:7f:31:9e:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e953e917ba95b7aac2d23beebc17f24c6f7f69
        Validity
            Not Before: Oct  6 01:00:28 2026 GMT
            Not After : Oct  7 01:00:28 2026 GMT
        Subject: CN=475afbefd265ae3177e0977aa61987d280f732b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d7:4d:2d:33:39:7a:93:ef:02:6c:28:b1:d7:
                    0f:8f:a4:af:a9:91:88:a1:cf:42:e2:75:c3:e0:48:
                    05:3a:22:7a:40:c3:7b:e6:d4:6e:4f:a3:55:6d:bf:
                    ff:d4:26:b9:89:95:b1:c5:fe:d3:51:85:9c:d0:38:
                    e1:ca:6a:8c:eb:a9:35:eb:02:79:16:b5:98:3b:8e:
                    24:e0:d8:1d:c6:4f:77:23:c1:fa:fe:f6:df:9e:c4:
                    f1:77:fe:24:b0:c2:a8:d1:e8:c7:36:1e:10:18:82:
                    ca:2a:f9:20:6d:59:50:2b:27:44:07:7e:dd:9c:21:
                    9f:18:80:04:fe:73:67:93:9e:63:ea:de:0f:ea:74:
                    8b:13:7f:6a:0c:93:fe:98:4d:c9:e4:f0:ed:6d:9d:
                    bd:84:76:ad:ac:12:f5:6e:1c:4f:39:38:3f:a8:ec:
                    e6:37:f6:6c:81:6e:82:a3:1e:f1:fa:c0:a9:c6:c5:
                    47:52:39:05:2d:e5:a1:df:07:d3:fd:19:68:ea:58:
                    15:83:33:e6:10:06:13:cc:66:b7:1e:46:a7:66:12:
                    ff:8a:2e:9e:c9:35:8c:ca:25:b5:6b:5f:c8:e5:f4:
                    16:57:30:5c:8b:87:bd:ee:d8:a4:05:16:62:4a:3c:
                    bc:11:ee:d0:02:0b:f1:57:01:58:ab:5c:67:35:ee:
                    fb:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:5A:FB:EF:D2:65:AE:31:77:E0:97:7A:A6:19:87:D2:80:F7:32:B8
            X509v3 Authority Key Identifier:
                keyid:57:E9:53:E9:17:BA:95:B7:AA:C2:D2:3B:EE:BC:17:F2:4C:6F:7F:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-lT6Re6lbeqwtI77rwX8kxvf2k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/7d9349-3603-4605-b14f-a0ebdc96b533/1/V-lT6Re6lbeqwtI77rwX8kxvf2k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:04:8a:ad:5e:e8:af:86:9a:0e:01:64:71:b2:be:12:ef:5c:
         61:e3:22:6c:35:6d:8f:75:63:d9:72:d7:66:0b:29:be:03:db:
         03:d7:af:92:2c:d5:bd:d8:97:d5:a7:c6:bd:4c:18:0c:9c:71:
         cb:de:5e:52:34:5b:b4:43:7a:fc:46:cf:84:57:66:03:1d:cb:
         98:da:20:a2:08:ed:5f:12:18:d3:6a:bb:a3:de:0b:5c:8e:5e:
         81:95:70:3c:04:b4:9e:35:16:35:e6:11:38:2a:32:a7:be:c9:
         35:87:1f:a1:48:36:d8:3b:a2:69:50:8c:bc:95:8e:01:18:04:
         d0:82:a3:3a:e6:92:a4:73:81:b4:47:0d:46:45:8e:d1:9e:ff:
         9a:6f:29:23:ed:ee:5a:fb:9d:50:fe:14:7f:82:06:c1:6c:b7:
         b0:f5:e4:01:d0:b4:95:d1:62:75:8a:6c:47:f8:d7:c6:f1:23:
         f3:c7:d5:52:1c:1d:44:e6:4c:5d:f5:5d:cc:e7:86:f4:5b:44:
         b0:c5:a1:4c:95:6f:1a:ed:6e:fd:cf:c8:59:bf:ad:10:7e:47:
         f0:a7:51:9f:b0:c2:f1:f6:1b:2f:e4:ec:45:68:2c:2c:c9:2c:
         bf:2f:57:fc:23:46:a9:2c:a1:dd:1c:02:22:93:53:12:ae:d1:
         d1:f7:67:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 04:02:41 2026 by rpki-client