Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File:                     VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier:          J/EyRLAAkCDUc6IHAOr4pJWxv2gjlteCNTIjaU+bNyc=
Subject key identifier:   FD:DE:43:C8:C1:81:79:55:8D:65:17:0A:4F:6E:BF:D5:BC:C8:6B:96
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer:       /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial:       01A0CF6CED6FA325948501C10226019E910A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number:          0271
Signing time:             Wed 23 Sep 2026 18:00:17 +0000
Manifest this update:     Wed 23 Sep 2026 18:00:17 +0000
Manifest next update:     Thu 24 Sep 2026 18:00:17 +0000
Files and hashes:         1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
                          2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: OQKYJdEEFwyqrS0ENslJ21Q9FVjwZq9s4VURY6afe9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 14:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:cf:6c:ed:6f:a3:25:94:85:01:c1:02:26:01:9e:91:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
        Validity
            Not Before: Sep 23 18:00:17 2026 GMT
            Not After : Sep 24 18:00:17 2026 GMT
        Subject: CN=fdde43c8c18179558d65170a4f6ebfd5bcc86b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:61:a7:07:5b:e1:65:ea:af:fe:09:60:4d:44:
                    46:3c:1b:bd:e7:3b:2f:34:20:d3:fa:6a:d2:73:5e:
                    63:52:ee:89:38:3a:c6:07:a7:f5:c0:8e:15:10:26:
                    da:5f:fe:6f:76:0e:be:3d:93:d1:2a:10:23:45:ca:
                    be:5e:78:c1:97:e3:63:e0:20:1d:56:b9:e0:a9:30:
                    8f:32:cd:1b:fb:84:7a:ad:1f:44:34:9d:0e:44:50:
                    a2:f9:40:70:37:4c:5a:85:c1:eb:d3:4d:da:cd:52:
                    65:90:d4:74:99:6d:ec:53:9b:c8:7c:07:48:77:23:
                    ef:95:b8:c0:6a:87:cc:1d:2a:59:1d:db:57:9c:43:
                    68:1a:28:d0:cb:e2:75:bf:70:b5:0d:1f:ec:1c:e1:
                    3e:be:7b:d3:ad:26:ae:04:8d:6a:16:1f:ce:e7:09:
                    b9:2d:d3:56:dc:49:38:a2:6e:d3:b3:d6:e2:37:9c:
                    6b:6d:aa:eb:1d:d7:f1:53:e0:bf:7d:d9:08:77:4c:
                    f2:29:15:99:c3:90:8f:12:bb:8d:18:24:23:7e:81:
                    8d:38:75:9c:c6:17:42:b6:ed:1b:af:26:2a:f5:ec:
                    d3:e5:2f:93:01:f2:ed:a8:e7:a5:56:66:29:85:a7:
                    9b:79:4a:9f:5e:a1:44:c5:82:18:85:bc:82:90:0f:
                    cb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DE:43:C8:C1:81:79:55:8D:65:17:0A:4F:6E:BF:D5:BC:C8:6B:96
            X509v3 Authority Key Identifier:
                keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:05:a3:ac:45:7a:ff:ee:19:2d:18:9b:6b:e1:8c:8e:5d:2a:
         67:29:b1:9e:82:af:6a:4e:fb:9e:14:8b:60:05:e6:d8:a6:5a:
         d0:0b:cc:7a:9f:fe:50:45:bc:a1:42:b2:3e:12:e6:e2:da:ef:
         65:aa:81:f3:c2:5f:c4:00:9a:3a:08:4a:ce:0d:14:5e:2d:02:
         eb:8a:66:36:e1:7f:02:71:c6:90:3c:8b:53:95:1c:fc:eb:c8:
         4a:47:55:5c:f7:b2:85:41:24:fc:6e:16:5a:45:0e:72:81:69:
         af:e2:de:dc:0f:cd:ed:51:35:9d:80:98:10:62:b1:2b:43:6d:
         f7:0f:7b:72:be:71:d7:d2:bd:ea:05:b4:ba:c8:75:bf:8e:97:
         0a:25:57:2a:7e:0f:b0:20:39:7a:4a:9c:49:7f:4b:de:34:3b:
         79:74:dc:9a:77:2d:a5:48:8e:e3:3e:1a:e6:b6:fe:cd:24:79:
         ab:97:19:ef:a2:bc:c4:3f:2a:c7:63:6d:77:3a:a6:d2:11:24:
         95:ab:b7:db:a7:aa:ce:e3:8b:b2:24:48:bc:1c:54:85:ae:fb:
         a2:76:39:64:7a:27:2f:1f:d0:63:2c:db:91:52:42:f2:d0:86:
         51:f4:de:28:ff:09:b8:4e:18:e7:6a:11:49:49:95:51:1b:f9:
         44:7c:98:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:59:53 2026 by rpki-client