Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File:                     VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier:          0Jy1CqKdyaDGk2N6rVHXGtP1UN0QQOLb428S0GtR3Ac=
Subject key identifier:   10:5E:2F:38:15:40:74:E1:01:AC:F8:9F:CA:04:E9:1D:D9:B5:89:13
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer:       /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial:       01A0E1E26EABB795654BFAF0754A2A7BDB59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number:          1469
Signing time:             Sun 27 Sep 2026 08:01:48 +0000
Manifest this update:     Sun 27 Sep 2026 08:01:48 +0000
Manifest next update:     Mon 28 Sep 2026 08:01:48 +0000
Files and hashes:         1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: o7YS9Rpn0yTcmjYuNs5LYDeu2T/o3THrVr7nowhVXFQ=)
                          2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 05:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e2:6e:ab:b7:95:65:4b:fa:f0:75:4a:2a:7b:db:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
        Validity
            Not Before: Sep 27 08:01:48 2026 GMT
            Not After : Sep 28 08:01:48 2026 GMT
        Subject: CN=105e2f38154074e101acf89fca04e91dd9b58913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:f8:24:c8:82:4a:7b:d0:a7:46:1e:34:44:f2:
                    1b:95:26:10:0b:44:59:a8:59:2c:8b:a3:ca:7e:e7:
                    13:04:d2:0c:80:ed:cc:14:72:5d:c0:17:74:ed:87:
                    65:9c:7a:cf:a2:42:4b:15:34:b3:ea:28:19:3b:24:
                    30:f7:7e:9b:8d:f0:29:99:6a:ad:09:4d:bd:55:19:
                    10:27:46:9b:74:1d:fd:d8:59:3c:78:f1:80:00:12:
                    90:e1:6b:ae:88:04:e2:17:26:06:7b:a4:52:00:3e:
                    65:ec:48:34:e8:0b:9c:27:ef:15:e5:27:b2:11:c4:
                    d0:70:54:32:b6:7a:dc:27:14:a0:cb:bc:a8:5c:34:
                    99:9d:17:d4:05:a7:79:be:21:0f:3e:f6:10:32:17:
                    c5:c4:05:6f:23:f0:bd:4b:af:46:b9:81:b2:e1:27:
                    c9:dd:f2:51:7f:74:5e:a9:d3:35:f5:3c:e9:e4:ae:
                    5c:60:bd:9e:d3:87:3c:b5:1f:8f:a4:d7:b4:04:73:
                    29:a8:96:bf:2f:bf:b8:5d:8d:8a:a3:7f:22:ab:d9:
                    9f:39:b4:42:ab:83:73:ed:f5:78:be:fa:e9:e3:f2:
                    88:e0:7c:da:ac:1c:b3:15:ea:3c:ec:88:0d:02:4c:
                    19:5d:38:6c:df:db:89:e4:8a:c7:8b:8e:84:89:c2:
                    58:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5E:2F:38:15:40:74:E1:01:AC:F8:9F:CA:04:E9:1D:D9:B5:89:13
            X509v3 Authority Key Identifier:
                keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:e0:d1:f7:96:02:98:c0:f4:c4:ff:78:37:c4:8d:7a:ff:fe:
         53:63:e6:92:39:b4:68:3d:37:1a:c6:27:93:83:98:92:1a:38:
         e3:85:39:fb:11:2d:f3:fe:2f:17:72:7f:a9:b6:74:e9:19:82:
         b1:08:41:65:08:ff:1e:69:aa:e6:55:4e:39:48:08:65:b6:25:
         5b:19:eb:ef:97:a5:14:6d:90:14:d8:f5:0f:7a:ad:92:62:73:
         a1:20:86:1a:83:18:04:f4:83:6d:d0:de:53:47:e9:c2:37:98:
         a8:a9:e8:f0:87:49:4a:d5:06:a8:dc:76:0c:fc:57:75:45:3b:
         8b:61:90:6c:63:e2:c2:e3:f1:a3:58:d1:a2:72:a4:3b:07:be:
         f4:3a:44:51:b5:f6:f0:71:a8:48:91:6b:28:93:90:c6:ab:03:
         5f:08:82:de:c8:9e:dc:aa:30:6f:20:dc:82:83:d9:e0:79:24:
         ef:e2:1e:22:a4:e5:9a:ec:61:74:ac:8f:e9:b1:e3:e9:54:f0:
         6e:df:dc:4b:8e:77:67:bc:39:63:6b:68:5b:ba:bc:ce:d1:12:
         2e:ca:91:0f:34:82:1f:0b:48:f4:99:ff:68:53:86:42:2d:21:
         21:13:26:97:e5:cd:3b:b9:6f:13:4d:a6:9a:b9:60:6e:c3:d1:
         cd:97:bf:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 16:32:55 2026 by rpki-client