Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
File:                     fVaVeG-EUNEEHciK2JLLtXDVlys.mft (raw, json)
Hash identifier:          fI13p+4j5e/pqEgYBEcz9L/msLziaNorfvw/wV10kRM=
Subject key identifier:   05:CD:C5:53:57:0B:DD:C1:FC:26:E3:7C:78:59:C5:31:C6:81:C5:33
Authority key identifier: 7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B
Certificate issuer:       /CN=7d5695786f8450d1041dc88ad892cbb570d5972b
Certificate serial:       01A0D236ED2C1B1868074D8E227BDBC548ED
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
Manifest number:          1A8B
Signing time:             Thu 24 Sep 2026 07:00:09 +0000
Manifest this update:     Thu 24 Sep 2026 07:00:09 +0000
Manifest next update:     Fri 25 Sep 2026 07:00:09 +0000
Files and hashes:         1: 12Ml7oPQhd6P-2dy0Uk0kZ7PDsk.roa (hash: PD8v9Q+OgcnW9fexnmunDxLbOBIKmFVo+JF+JBAe7ck=)
                          2: BDp1uT9kjFAm3N54RW5KWq6_pTM.roa (hash: KqNlOiugDBjYNqy42qin4bY/AA0qkt7dppw/YaijJ6Q=)
                          3: D-8LG2tVdd5-uleb8t-_wqh_Jl8.roa (hash: mVxwGRDiuc9C3st3JN7liHp0YNkXDsxa9l1VHNbN9/Q=)
                          4: Gias09ASbWXb_aQKiFfOMuiQKcg.roa (hash: i2h8OuNqg6FM+2wJRliKGa8uy6A9zEgQ4SXZUve7AdU=)
                          5: ZKFoN8fD1raVVjOmPZzWRUaaugA.roa (hash: R4OUda4QAMCAnPGIK71d8GhzpRyoNd21V6RUuQUoxZQ=)
                          6: fVaVeG-EUNEEHciK2JLLtXDVlys.crl (hash: o2vB9AE/u4IB4nmTRXj2Mgotm6xH9A3Xv3kQGI64gdk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 07:00:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d2:36:ed:2c:1b:18:68:07:4d:8e:22:7b:db:c5:48:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7d5695786f8450d1041dc88ad892cbb570d5972b
        Validity
            Not Before: Sep 24 07:00:09 2026 GMT
            Not After : Sep 25 07:00:09 2026 GMT
        Subject: CN=05cdc553570bddc1fc26e37c7859c531c681c533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:1b:12:af:67:e4:4e:25:a0:da:0d:67:b8:
                    56:f1:8d:d1:76:53:11:f8:e9:bf:c6:28:e1:5c:a5:
                    2b:b1:08:f0:40:5e:b1:78:e9:38:fc:5b:84:9d:c5:
                    3c:08:01:90:34:13:58:a4:50:b8:cc:c1:c6:04:23:
                    44:4e:47:10:d3:48:5d:30:fc:01:d1:3b:45:bf:c9:
                    dd:35:12:00:63:38:22:06:80:80:49:ce:ee:b1:26:
                    cf:f2:98:6f:32:83:9c:81:79:a7:76:c7:0c:61:c4:
                    f3:29:4c:94:cd:ad:17:6b:3b:92:a5:1f:70:88:da:
                    6b:76:dc:0d:81:23:e0:e2:e0:55:d7:73:ef:5a:db:
                    02:20:15:5b:98:f3:41:cf:cf:47:01:1a:82:59:ff:
                    23:00:2e:d5:ec:44:71:80:5a:ce:68:ec:9a:ca:99:
                    a8:cd:04:2a:aa:0a:fa:01:47:1f:57:28:16:64:20:
                    57:b9:98:aa:b2:31:9c:f2:17:62:dc:97:78:48:b3:
                    5a:96:14:70:ac:cd:f7:0c:75:90:e4:12:01:2f:2e:
                    1e:fc:43:b6:50:a0:01:44:f0:dc:57:90:85:26:18:
                    fa:d0:74:d4:e1:61:e4:92:71:4f:7f:1d:b2:31:0f:
                    88:62:01:63:05:33:14:48:c7:11:b8:5a:eb:5b:66:
                    dc:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:CD:C5:53:57:0B:DD:C1:FC:26:E3:7C:78:59:C5:31:C6:81:C5:33
            X509v3 Authority Key Identifier:
                keyid:7D:56:95:78:6F:84:50:D1:04:1D:C8:8A:D8:92:CB:B5:70:D5:97:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVaVeG-EUNEEHciK2JLLtXDVlys.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/317aa7-e2ad-4a85-b3d2-63b33808a6a8/1/fVaVeG-EUNEEHciK2JLLtXDVlys.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:c6:92:94:29:58:bb:c2:e8:59:53:b5:c0:64:57:66:41:80:
         cf:8d:72:2d:bd:63:42:3c:64:aa:27:d6:46:92:89:53:95:75:
         8b:5b:3d:25:28:58:6e:7e:84:7d:1e:45:f3:25:63:2c:65:2d:
         00:ab:0a:f9:a0:22:dd:97:23:e8:dc:da:6d:2a:cc:a2:2c:c3:
         0b:2e:94:7b:70:13:75:88:28:04:04:cb:5c:02:66:8f:66:d7:
         f4:44:b0:5d:b9:1c:81:d5:05:c4:39:dd:7e:5c:6f:63:36:52:
         be:9c:f4:35:55:0b:1a:38:9f:b9:fa:c6:06:14:29:86:32:40:
         81:c6:4c:d0:ed:ed:37:f0:9d:20:7d:6d:25:37:fe:eb:ba:46:
         52:24:93:77:06:d7:fb:8c:74:61:3f:75:36:0b:67:4d:18:c0:
         b3:84:b4:44:23:2d:a7:a3:ed:32:6f:46:5c:e7:c9:6a:9a:40:
         e9:3d:3b:2e:39:ba:81:35:f2:bb:cb:10:49:68:04:d9:89:87:
         29:3e:c7:0d:d0:b8:17:e9:b4:e6:01:f4:c6:d3:9b:16:71:99:
         ed:e5:56:c1:05:f9:1d:ee:46:8a:41:b9:03:4b:c1:31:1c:18:
         f7:fc:41:8a:90:12:18:22:40:a8:2a:cd:b2:8b:ff:5d:0c:81:
         74:9c:4f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 16:56:50 2026 by rpki-client