Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
File:                     VzDFDI_UStGWvxBX7ipvpAQcfk4.mft (raw, json)
Hash identifier:          jKSPnKk32BJHGXr/iRe0cMFAxEN+VrYmFOqX0OJKiok=
Subject key identifier:   07:01:2E:16:38:47:2E:81:6A:B6:E2:27:B7:07:FE:AD:82:EB:9B:3E
Authority key identifier: 57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E
Certificate issuer:       /CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
Certificate serial:       01A0D64BCE2D6BF1A341CF320BE107395AFF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
Manifest number:          0ED3
Signing time:             Fri 25 Sep 2026 02:01:27 +0000
Manifest this update:     Fri 25 Sep 2026 02:01:27 +0000
Manifest next update:     Sat 26 Sep 2026 02:01:27 +0000
Files and hashes:         1: 9g1OqI30FQh7cjImbuWXwZ1zeCs.asa (hash: LDG1XLZaTfiRrOMhMOCyLrZ4QwxtVeRzA55nYUHJQfc=)
                          2: QjH4ysMjhx-FRFJ5XuVwEV5hkKY.roa (hash: kDgabNMh+h4CdxorS3mXQ7X6CnKJc4jDSgDlwGVSsRw=)
                          3: VzDFDI_UStGWvxBX7ipvpAQcfk4.crl (hash: paE8CL9whuNy1RdoJ1fNqDkHWszuFoI1PyVBUfVOedw=)
                          4: lehyIJyS5t2gi3G0Aqa6xnw8WlU.asa (hash: 6aAqK2D28DLKSJ21dW5F1a+WDM8qLkyHEkDcgfiBl54=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d6:4b:ce:2d:6b:f1:a3:41:cf:32:0b:e1:07:39:5a:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5730c50c8fd44ad196bf1057ee2a6fa4041c7e4e
        Validity
            Not Before: Sep 25 02:01:27 2026 GMT
            Not After : Sep 26 02:01:27 2026 GMT
        Subject: CN=07012e1638472e816ab6e227b707fead82eb9b3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:24:0d:43:07:1b:4f:f5:19:5d:fd:28:58:b5:
                    da:ca:4d:c4:d3:00:dc:fe:57:ad:9f:b2:04:a0:2a:
                    fc:c2:90:77:e0:9b:c5:e4:bb:7e:ff:52:7d:40:e6:
                    ab:8b:59:ca:08:9a:6e:1e:7c:dc:20:c7:b2:d2:47:
                    24:19:55:d1:37:12:b9:3a:b4:2f:80:3c:25:97:27:
                    2b:f0:75:1c:4e:64:f6:bf:40:99:fb:80:f4:f5:56:
                    35:68:06:a4:57:d1:43:33:b1:e3:d7:8a:47:c9:61:
                    84:c8:b8:ba:6e:9f:fb:c8:37:19:aa:1a:9f:ac:a6:
                    f5:11:d2:4b:e9:fc:e8:ae:dc:7d:29:bd:7e:be:2b:
                    b3:b8:89:b1:1a:a8:5c:32:5c:fb:b4:83:eb:e3:f0:
                    d5:df:a1:48:94:20:db:2c:ea:e1:bc:56:5a:9e:38:
                    81:71:67:05:7e:2b:0b:e3:6e:fa:ad:70:88:40:04:
                    b1:fe:aa:63:cd:a9:49:6e:4e:93:81:7a:30:46:fd:
                    6e:0b:b2:f0:f1:3c:7c:c1:00:a8:d5:cc:52:a9:8b:
                    30:1e:da:22:ac:d2:4e:f9:b5:13:bc:db:6a:66:63:
                    79:4a:68:7e:1a:19:69:b3:d7:26:0b:e0:ff:02:d9:
                    6d:68:cf:0c:c6:6f:cb:8b:62:ad:51:72:18:b4:de:
                    88:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:01:2E:16:38:47:2E:81:6A:B6:E2:27:B7:07:FE:AD:82:EB:9B:3E
            X509v3 Authority Key Identifier:
                keyid:57:30:C5:0C:8F:D4:4A:D1:96:BF:10:57:EE:2A:6F:A4:04:1C:7E:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzDFDI_UStGWvxBX7ipvpAQcfk4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/24/f56c0c-4ae7-4eec-9ced-f75c1163fb1e/1/VzDFDI_UStGWvxBX7ipvpAQcfk4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:c8:a5:da:2d:cd:3b:fe:ac:75:ed:e0:1d:bd:56:c9:b5:8e:
         1c:08:c0:c0:e2:cb:56:9d:93:8e:a8:ef:98:e0:1a:24:20:af:
         e6:0a:ba:96:f2:e2:c1:33:a5:ec:ab:d2:0f:19:78:b5:a8:8c:
         0a:29:2d:18:c3:0f:43:14:28:db:bd:b2:5a:bd:3e:d1:2f:a3:
         fb:5c:43:36:5a:e1:d2:b9:9e:46:d5:0f:15:48:27:47:d2:4c:
         2f:a9:db:eb:e6:ba:8c:4a:55:ca:88:ae:83:ad:fb:56:ad:ed:
         0c:2a:e6:9e:8b:1f:44:b8:11:42:8c:99:31:cc:76:a1:3c:02:
         75:ff:5b:e7:1e:cf:e8:7b:89:54:e3:64:8a:28:8e:64:d3:57:
         8f:38:9e:1a:eb:7a:a8:0d:b7:70:da:3f:14:a8:2f:90:05:9e:
         95:ff:42:91:0d:bc:13:2b:50:81:3c:57:94:7b:2b:5f:81:ca:
         7e:90:10:c6:58:59:ac:44:f3:3e:7e:58:e3:76:ce:b1:5f:d7:
         e1:05:86:58:c2:35:25:f3:52:d5:ec:d0:6e:ce:4e:d6:44:47:
         1b:26:1b:36:a1:7b:94:bb:a2:bb:e9:6c:dc:22:08:97:0f:e9:
         28:0c:3f:19:14:2f:53:7e:88:f3:e4:1a:60:70:f5:c3:33:8c:
         71:72:59:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS84ta/GjQc8yC+EHOVr/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MzBjNTBjOGZkNDRhZDE5NmJmMTA1N2VlMmE2ZmE0MDQx
YzdlNGUwHhcNMjYwOTI1MDIwMTI3WhcNMjYwOTI2MDIwMTI3WjAzMTEwLwYDVQQD
EygwNzAxMmUxNjM4NDcyZTgxNmFiNmUyMjdiNzA3ZmVhZDgyZWI5YjNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtiQNQwcbT/UZXf0oWLXayk3E0wDc
/letn7IEoCr8wpB34JvF5Lt+/1J9QOari1nKCJpuHnzcIMey0kckGVXRNxK5OrQv
gDwllycr8HUcTmT2v0CZ+4D09VY1aAakV9FDM7Hj14pHyWGEyLi6bp/7yDcZqhqf
rKb1EdJL6fzortx9Kb1+viuzuImxGqhcMlz7tIPr4/DV36FIlCDbLOrhvFZanjiB
cWcFfisL4276rXCIQASx/qpjzalJbk6TgXowRv1uC7Lw8Tx8wQCo1cxSqYswHtoi
rNJO+bUTvNtqZmN5Smh+Ghlps9cmC+D/AtltaM8Mxm/Li2KtUXIYtN6IrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAcBLhY4Ry6BarbiJ7cH/q2C65s+MB8GA1UdIwQY
MBaAFFcwxQyP1ErRlr8QV+4qb6QEHH5OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQt
Zjc1YzExNjNmYjFlLzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNC9mNTZjMGMtNGFlNy00ZWVjLTljZWQtZjc1YzExNjNmYjFl
LzEvVnpERkRJX1VTdEdXdnhCWDdpcHZwQVFjZms0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApMil2i3N
O/6sde3gHb1WybWOHAjAwOLLVp2TjqjvmOAaJCCv5gq6lvLiwTOl7KvSDxl4taiM
CiktGMMPQxQo272yWr0+0S+j+1xDNlrh0rmeRtUPFUgnR9JML6nb6+a6jEpVyoiu
g637Vq3tDCrmnosfRLgRQoyZMcx2oTwCdf9b5x7P6HuJVONkiiiOZNNXjzieGut6
qA23cNo/FKgvkAWelf9CkQ28EytQgTxXlHsrX4HKfpAQxlhZrETzPn5Y43bOsV/X
4QWGWMI1JfNS1ezQbs5O1kRHGyYbNqF7lLuiu+ls3CIIlw/pKAw/GRQvU36I8+Qa
YHD1wzOMcXJZwA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:36:35 2026 by rpki-client