Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File:                     VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier:          ELz/lRYIwvnFBh4ZAcCiSbH/SyTVyxvf0dQfTlXtfCg=
Subject key identifier:   06:FC:E0:A2:7A:E9:BD:96:6A:E3:BA:8B:D3:22:10:66:1B:5B:3C:DF
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer:       /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial:       01A0D6B9BE6D687B750DEB455AE2A2F9EAE2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number:          02A7
Signing time:             Fri 25 Sep 2026 04:01:32 +0000
Manifest this update:     Fri 25 Sep 2026 04:01:32 +0000
Manifest next update:     Sat 26 Sep 2026 04:01:32 +0000
Files and hashes:         1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: Z74JDxLHOS/wSGxo2rpaD00Hj9kuZbaMYlOPkZlFY60=)
                          2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 04:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:b9:be:6d:68:7b:75:0d:eb:45:5a:e2:a2:f9:ea:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
        Validity
            Not Before: Sep 25 04:01:32 2026 GMT
            Not After : Sep 26 04:01:32 2026 GMT
        Subject: CN=06fce0a27ae9bd966ae3ba8bd32210661b5b3cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:78:56:0a:4d:28:eb:9c:6a:79:bd:87:79:47:
                    ab:b5:80:65:ff:cc:9a:71:7a:3c:5e:ba:16:89:7c:
                    96:58:d6:92:0f:9d:42:3a:e7:65:c8:3c:31:fb:61:
                    b8:6c:ff:68:4f:6c:66:ef:c9:27:ea:93:76:68:5a:
                    90:64:23:e8:c2:6a:68:9a:27:cf:a9:ed:3c:36:80:
                    4e:ec:0f:5f:ec:2a:e2:a5:fc:e2:ae:f7:8e:97:fd:
                    fe:a8:3c:b5:0d:8b:06:28:b7:63:62:74:8b:18:b6:
                    19:39:2a:c0:42:8c:11:7f:f6:a2:c9:5d:83:05:34:
                    06:db:9a:54:ca:52:0a:58:37:f0:cd:f8:c7:c4:6f:
                    fd:9d:39:e1:fa:e6:81:b9:04:69:46:cf:83:f1:0c:
                    40:3c:59:51:44:e1:85:c3:ce:fc:87:75:36:34:a5:
                    16:21:16:c8:9c:89:0e:29:96:1d:11:b4:85:7c:d8:
                    5f:bb:1e:db:ac:c0:00:e6:9a:c9:3c:54:47:0c:8c:
                    da:31:4f:ae:8f:56:42:71:97:40:6c:ac:a5:59:49:
                    17:7d:9b:93:ad:07:0a:b0:ce:a5:1a:99:2c:95:5e:
                    d7:d5:ec:d3:d1:77:23:88:25:dc:ab:16:db:6b:1d:
                    45:4f:b5:a2:28:4c:af:4c:75:7c:c4:f5:ae:a6:df:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:FC:E0:A2:7A:E9:BD:96:6A:E3:BA:8B:D3:22:10:66:1B:5B:3C:DF
            X509v3 Authority Key Identifier:
                keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:19:19:82:cd:05:e3:12:99:06:78:27:9c:b8:9b:eb:e0:39:
         a0:bf:9e:c4:41:0c:9f:f2:fa:df:b4:e4:e7:9b:45:f9:4c:bf:
         33:f3:f5:4f:0f:62:e8:ec:f1:4f:80:86:87:6f:1b:21:32:47:
         8e:44:12:39:0e:9e:ac:30:cc:3d:0c:7d:1d:68:45:00:87:7e:
         f3:af:94:9b:ab:a8:45:db:e1:a2:99:f3:ea:fc:f0:8a:56:46:
         b2:d1:8e:0d:1f:7c:8a:40:8a:f7:c5:97:7c:34:57:4e:09:89:
         11:69:78:40:9d:b3:bc:95:d9:f9:d2:e1:fa:01:7d:15:d8:31:
         d8:c2:c2:28:9f:3f:12:9b:e1:ef:4b:b1:33:bf:cd:af:71:c2:
         ff:35:23:d3:6f:ea:20:eb:fb:82:ea:14:d8:a9:53:5c:9a:24:
         b6:13:fd:a7:85:0b:88:de:90:a5:0c:20:a9:81:d0:0d:85:61:
         48:94:71:72:14:03:b1:2d:12:02:e0:b9:65:ab:09:67:72:36:
         3a:61:7e:1f:35:4f:6c:6a:f7:f5:42:b0:dc:93:9c:fa:35:8b:
         10:8f:de:94:38:79:ce:39:13:3e:17:9f:9e:ba:70:4d:48:fa:
         4a:e9:1d:fe:1f:ae:2e:44:89:de:81:99:9f:c6:41:55:45:31:
         86:c3:07:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWub5taHt1DetFWuKi+eriMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDJhMGMzOTgzOTE3NjhjNjE4MWE3M2YxYjQyNmM3NTRl
MTc0Y2EwHhcNMjYwOTI1MDQwMTMyWhcNMjYwOTI2MDQwMTMyWjAzMTEwLwYDVQQD
EygwNmZjZTBhMjdhZTliZDk2NmFlM2JhOGJkMzIyMTA2NjFiNWIzY2RmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA03hWCk0o65xqeb2HeUertYBl/8ya
cXo8XroWiXyWWNaSD51COudlyDwx+2G4bP9oT2xm78kn6pN2aFqQZCPowmpomifP
qe08NoBO7A9f7CripfzirveOl/3+qDy1DYsGKLdjYnSLGLYZOSrAQowRf/aiyV2D
BTQG25pUylIKWDfwzfjHxG/9nTnh+uaBuQRpRs+D8QxAPFlRROGFw878h3U2NKUW
IRbInIkOKZYdEbSFfNhfux7brMAA5prJPFRHDIzaMU+uj1ZCcZdAbKylWUkXfZuT
rQcKsM6lGpkslV7X1ezT0XcjiCXcqxbbax1FT7WiKEyvTHV8xPWupt+KawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAb84KJ66b2WauO6i9MiEGYbWzzfMB8GA1UdIwQY
MBaAFFTSoMOYORdoxhgac/G0JsdU4XTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgt
NGMyMzhjNmYwM2M5LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgtNGMyMzhjNmYwM2M5
LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACRkZgs0F
4xKZBngnnLib6+A5oL+exEEMn/L637Tk55tF+Uy/M/P1Tw9i6OzxT4CGh28bITJH
jkQSOQ6erDDMPQx9HWhFAId+86+Um6uoRdvhopnz6vzwilZGstGODR98ikCK98WX
fDRXTgmJEWl4QJ2zvJXZ+dLh+gF9Fdgx2MLCKJ8/Epvh70uxM7/Nr3HC/zUj02/q
IOv7guoU2KlTXJokthP9p4ULiN6QpQwgqYHQDYVhSJRxchQDsS0SAuC5ZasJZ3I2
OmF+HzVPbGr39UKw3JOc+jWLEI/elDh5zjkTPhefnrpwTUj6Sukd/h+uLkSJ3oGZ
n8ZBVUUxhsMHFA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 16:41:09 2026 by rpki-client