Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
File:                     VbU-iTBDTHKlgHoFUIK5hZmycH8.mft (raw, json)
Hash identifier:          HluCrAjgcgR/dBwrGgOYXYJvWcPbuWVon4OquwSYtOo=
Subject key identifier:   91:EC:A6:C5:08:09:D6:0B:87:2A:8F:C9:B7:BE:77:0B:EA:9A:E1:A9
Authority key identifier: 55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F
Certificate issuer:       /CN=55b53e8930434c72a5807a055082b98599b2707f
Certificate serial:       01A0D682847265147DF5E4B0A2A856B68392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
Manifest number:          05F0
Signing time:             Fri 25 Sep 2026 03:01:12 +0000
Manifest this update:     Fri 25 Sep 2026 03:01:12 +0000
Manifest next update:     Sat 26 Sep 2026 03:01:12 +0000
Files and hashes:         1: VbU-iTBDTHKlgHoFUIK5hZmycH8.crl (hash: uFiXGU5k+cYnXaZ2K7XZiSZq3k28mhS1hGJQ6C1ZQyo=)
                          2: YjCGgAmzduZSK_5-gRARaBbNei0.roa (hash: jfHZjRD1+MaIdb39vxs02Km81VVmAsPrQrgbVdWjjqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 23:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:82:84:72:65:14:7d:f5:e4:b0:a2:a8:56:b6:83:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b53e8930434c72a5807a055082b98599b2707f
        Validity
            Not Before: Sep 25 03:01:12 2026 GMT
            Not After : Sep 26 03:01:12 2026 GMT
        Subject: CN=91eca6c50809d60b872a8fc9b7be770bea9ae1a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:44:6d:1c:4b:00:24:b9:a0:55:a2:c3:06:37:
                    de:84:6f:af:17:84:c7:16:76:c8:05:8c:e5:9c:74:
                    e8:fb:03:fc:85:76:0b:bb:be:81:4a:35:26:3c:58:
                    44:6a:31:65:1d:a0:b2:38:06:fb:3d:65:d6:b8:75:
                    7c:72:90:de:7d:31:64:42:ff:b0:e1:83:79:b7:74:
                    7f:4a:39:a4:88:6c:b6:e5:1d:f9:05:af:96:5f:0b:
                    10:bc:47:9b:6d:6d:d8:43:c5:2c:72:1b:4c:b2:db:
                    16:c7:ac:1f:37:3f:6c:12:b2:1c:48:48:a8:21:de:
                    d7:fc:d3:73:5a:b0:21:51:bb:6c:0c:fb:c5:60:dd:
                    f7:c4:c7:6e:ad:bc:06:9c:ce:6a:65:cb:c0:fc:86:
                    43:30:55:29:1e:da:fa:48:f8:62:cd:91:e6:1b:b6:
                    c5:f3:53:e9:73:85:4c:25:15:a3:48:47:5e:c0:52:
                    8d:dd:8b:18:7f:7c:8d:48:f1:dc:98:4c:df:93:78:
                    fb:ab:0a:ec:49:85:cf:0d:21:52:c0:a7:2c:5d:37:
                    60:2a:ad:a5:4d:6b:73:84:f1:7c:a1:9c:ea:be:91:
                    6b:0b:ae:cc:54:73:a0:7c:ac:30:5a:5b:5f:03:83:
                    19:6f:23:68:f5:7e:9e:8c:ab:6c:82:2c:5f:69:9a:
                    66:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:EC:A6:C5:08:09:D6:0B:87:2A:8F:C9:B7:BE:77:0B:EA:9A:E1:A9
            X509v3 Authority Key Identifier:
                keyid:55:B5:3E:89:30:43:4C:72:A5:80:7A:05:50:82:B9:85:99:B2:70:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbU-iTBDTHKlgHoFUIK5hZmycH8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/10/b3fdd7-088a-4f62-8c2a-945407a017b2/1/VbU-iTBDTHKlgHoFUIK5hZmycH8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:24:15:3a:a0:7f:e1:85:f6:db:13:f8:dc:2d:2e:5f:82:f1:
         c0:b5:96:a5:0c:b7:c3:c2:cb:b3:e9:40:94:50:52:9b:6f:29:
         a4:51:ac:4a:0d:93:de:6a:c1:f3:b9:8c:ae:d1:25:07:f4:6d:
         42:c4:5c:ae:57:51:7b:6d:90:02:85:f9:d4:b6:8b:a8:0f:98:
         77:04:05:1c:88:fd:d7:be:fd:ca:d3:52:18:6e:f6:0f:c3:37:
         6f:2d:a2:14:e5:1f:b2:23:e0:57:53:00:06:2c:db:4f:85:a7:
         5e:5a:5a:55:c9:33:a5:5a:c1:6f:d2:26:42:ef:db:1d:e1:1c:
         6f:8a:28:53:05:66:ee:1f:d9:d8:0c:5b:54:21:45:c5:f1:5d:
         b5:43:41:ca:7e:2a:c6:28:2d:a9:b8:12:67:8c:b2:94:dd:d3:
         24:80:1d:fd:dd:1d:78:e8:6b:15:e4:ee:b6:11:19:6e:4d:6d:
         08:0b:2d:7a:37:55:89:c5:a4:9e:5f:7f:66:be:1e:ce:24:51:
         75:9a:6e:6b:94:25:ab:e0:08:50:26:51:88:3e:f3:75:0e:c7:
         43:45:96:c2:b4:7e:5b:ce:65:12:64:93:44:98:4d:02:7c:27:
         9d:79:4f:e6:bd:29:b7:b9:dd:f6:d7:84:2b:92:94:88:be:ae:
         ca:f0:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:13:48 2026 by rpki-client