Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          Cxov4CvKZlUID6eRZaSQHEbSllkIqlXSmUHEMzdwnTc=
Subject key identifier:   61:E5:F6:9F:31:B7:56:B3:63:BB:3F:D3:B4:5E:D4:E2:15:E9:10:F6
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       01A0D426AABCAEBF0DFA6138CD06F3C8F953
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          1A8C
Signing time:             Thu 24 Sep 2026 16:01:38 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:38 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:38 +0000
Files and hashes:         1: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (hash: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck=)
                          2: BDp1uT9kjFAm3N54RW5KWq6_pTM.roa (hash: KqNlOiugDBjYNqy42qin4bY/AA0qkt7dppw/YaijJ6Q=)
                          3: D-8LG2tVdd5-uleb8t-_wqh_Jl8.roa (hash: mVxwGRDiuc9C3st3JN7liHp0YNkXDsxa9l1VHNbN9/Q=)
                          4: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (hash: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU=)
                          5: ZKFoN8fD1raVVjOmPZzWRUaaugA.roa (hash: R4OUda4QAMCAnPGIK71d8GhzpRyoNd21V6RUuQUoxZQ=)
                          6: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: itws4CeCbMpJBtWcswP/HoVaLU1lwznsG0kDanfzRR4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:aa:bc:ae:bf:0d:fa:61:38:cd:06:f3:c8:f9:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Sep 24 16:01:38 2026 GMT
            Not After : Sep 25 16:01:38 2026 GMT
        Subject: CN=61e5f69f31b756b363bb3fd3b45ed4e215e910f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:a7:89:01:20:6e:c4:53:48:80:fa:53:dd:78:
                    71:b9:49:da:72:ec:26:6b:1c:e6:93:89:b6:50:9b:
                    4e:4a:00:f8:4d:10:0c:73:1f:4f:1a:6c:15:83:09:
                    0c:2f:8a:a6:8a:4a:3c:bb:5a:3a:77:8b:db:c8:ea:
                    e9:29:9c:92:1a:62:5a:1f:c4:9c:f5:f3:f8:3c:1b:
                    99:41:10:e8:13:a3:fa:e3:a2:2f:c2:48:73:69:36:
                    cd:6d:42:01:c6:04:f8:5f:1d:a6:e8:8e:a5:ff:f4:
                    ce:ab:cb:99:89:a2:3d:78:bf:3d:41:4a:0a:fa:b5:
                    cf:9a:1a:8f:92:df:e6:20:cd:eb:b7:92:59:e6:33:
                    45:48:63:35:87:3e:27:52:09:f8:2b:59:f5:ad:3c:
                    79:e2:5b:06:84:50:95:6a:85:0b:60:f2:65:9e:4e:
                    d8:e4:2d:df:bf:b9:4e:95:5e:1b:7f:87:83:84:7c:
                    81:9a:63:98:70:63:98:a0:c6:29:c7:23:ad:59:c4:
                    71:5f:02:a1:76:ea:c9:b3:1b:bd:26:f1:a5:f5:0a:
                    ee:ca:df:55:69:18:31:dc:86:99:68:3e:b4:ff:c6:
                    0b:03:62:2d:79:de:66:15:27:1a:5e:c9:48:4e:2b:
                    3d:81:dd:5b:d8:64:e9:d0:01:6a:4a:fe:0e:dd:3f:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:E5:F6:9F:31:B7:56:B3:63:BB:3F:D3:B4:5E:D4:E2:15:E9:10:F6
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:ce:55:10:ca:cc:47:0c:b4:ab:f1:cf:d8:d1:95:d6:fe:e4:
         11:6b:d1:53:a9:e6:81:91:d1:6b:29:98:c8:e0:12:12:74:95:
         a3:5e:16:cd:57:99:30:50:c2:e7:15:50:60:f4:0b:ec:c9:bf:
         af:90:dc:52:f4:0a:a6:21:59:89:80:d9:19:39:c3:b2:d6:af:
         db:fb:ba:64:70:5d:8c:cd:56:f6:19:26:e0:64:ed:cd:f4:67:
         86:1c:21:53:04:a9:b3:93:b6:74:dc:12:18:c0:bd:12:47:c9:
         da:9b:26:cf:11:3f:48:4b:ae:67:de:dd:39:a1:09:03:99:06:
         b1:48:7b:73:21:96:77:10:f1:5f:13:6e:f1:55:a4:44:0b:9d:
         e3:73:45:17:bc:dd:3e:e9:ac:e9:35:16:b1:60:01:6a:55:fe:
         2b:5c:a7:56:e3:dc:af:82:29:72:e7:f8:79:2f:68:7f:fd:c9:
         94:d2:c7:5c:2b:1a:b3:fb:4f:57:d7:20:d6:e9:09:75:4d:be:
         48:31:45:e0:45:85:17:97:2a:97:d5:cd:94:ce:3e:52:97:07:
         8f:53:5c:c9:20:ae:45:c3:e9:af:a3:ed:83:23:66:00:1f:0d:
         0a:ba:5d:94:3f:67:70:83:8f:b8:a6:33:c0:04:a6:59:13:7a:
         80:52:96:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:50:51 2026 by rpki-client