Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File:                     vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier:          OQaq6/gos66f1tYfar08p3t/jhVuwzWZYe7of9nZaBE=
Subject key identifier:   C3:DA:17:69:DD:08:C8:35:11:AD:D6:B4:A2:2E:AA:5A:5E:C4:53:73
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer:       /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial:       01A0D83B9A3F475E098F75E8EB7F86320C94
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number:          0DDD
Signing time:             Fri 25 Sep 2026 11:02:59 +0000
Manifest this update:     Fri 25 Sep 2026 11:02:59 +0000
Manifest next update:     Sat 26 Sep 2026 11:02:59 +0000
Files and hashes:         1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
                          2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
                          3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: Nw0PiXbOsOk7ahM4muf2KWdUwxrfQ7ZBGhWWM+UHU4g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 08:02:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d8:3b:9a:3f:47:5e:09:8f:75:e8:eb:7f:86:32:0c:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
        Validity
            Not Before: Sep 25 11:02:59 2026 GMT
            Not After : Sep 26 11:02:59 2026 GMT
        Subject: CN=c3da1769dd08c83511add6b4a22eaa5a5ec45373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:28:b1:21:d0:e7:65:ed:70:f9:85:2a:0a:
                    ee:e9:3c:db:de:00:c4:a4:62:78:fb:8b:46:92:fe:
                    28:43:8b:53:52:01:f2:95:75:c5:30:d1:77:6b:73:
                    2a:fd:98:87:fe:54:ea:70:a8:ce:f8:c8:4e:a9:51:
                    ec:f3:5b:eb:c4:02:d8:38:a5:74:b0:46:9b:6a:d3:
                    3a:45:12:c1:36:76:d6:c5:cf:3a:40:24:8c:e2:33:
                    57:57:e1:41:79:57:b9:6e:8a:cf:cc:6b:d0:ae:36:
                    4f:6c:d3:4c:b4:b0:de:e3:90:cf:24:38:41:5d:22:
                    4b:4f:e0:ac:2c:0d:e3:c8:4b:13:1e:66:ae:4b:19:
                    14:4b:81:87:c7:4b:52:21:bc:da:44:9b:ea:52:8d:
                    67:eb:19:c4:49:31:d5:7f:ff:fe:5c:0b:4b:5c:6c:
                    80:5d:4f:7c:f5:cd:4f:12:4c:63:bd:ce:df:3e:5e:
                    93:3e:ad:88:7a:8d:f7:3f:70:65:55:16:1c:39:f8:
                    d0:af:06:d8:42:85:fc:ae:8c:6d:4b:b8:57:b6:f3:
                    52:2b:7e:54:d8:93:59:c5:08:33:84:a3:28:86:4c:
                    e3:c8:4f:e8:e5:16:7a:a7:e7:83:52:0a:48:01:9e:
                    d7:c5:df:46:e1:60:dd:01:39:41:20:79:94:bd:01:
                    1b:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:DA:17:69:DD:08:C8:35:11:AD:D6:B4:A2:2E:AA:5A:5E:C4:53:73
            X509v3 Authority Key Identifier:
                keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:a5:d8:40:a1:e8:c1:7b:4e:bb:a7:9f:4f:4c:be:7d:8b:1d:
         1c:80:e7:4f:ee:c5:11:6a:ca:0b:0f:d9:fb:f6:12:20:9d:23:
         be:ab:27:e2:9a:da:bb:74:58:7b:4f:3c:20:5b:a1:23:49:b8:
         41:35:3f:26:b1:1a:b8:d7:1a:83:ee:65:f5:bd:7e:27:c7:11:
         76:8f:d5:56:53:15:3e:a2:1f:c8:75:12:b8:b1:90:65:29:73:
         60:7a:d8:08:d0:a5:f2:53:b0:bb:20:3a:84:bb:33:cf:cc:32:
         5e:d9:ce:75:d9:7a:c8:d0:22:a4:90:b1:6d:d7:37:2b:46:25:
         de:b6:41:b2:c1:50:1e:87:42:51:47:81:2f:18:28:8b:de:97:
         09:24:93:33:60:b6:68:a3:e4:15:f7:d4:56:de:6a:59:79:ba:
         98:53:c9:a6:a9:9e:f4:a1:75:9e:fa:49:2e:96:83:f6:97:cc:
         9a:48:66:ee:7d:f5:c0:0f:e3:b1:5c:a7:2b:d0:bf:e1:7a:b2:
         31:0a:c0:e9:1d:08:67:f0:f1:1d:a1:20:09:b6:6d:31:ef:ec:
         55:33:08:01:5b:7f:24:c1:47:ff:14:57:13:ae:4e:9f:e2:20:
         4d:88:6c:3a:65:78:d8:a0:52:47:4f:aa:28:39:68:10:8c:71:
         ff:a1:93:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDYO5o/R14Jj3Xo63+GMgyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlM2Y3NGYyYjZlNGUyOGU5ZmY2Y2EzY2NhM2E1ZDc4Y2Ey
Y2FkNmEwHhcNMjYwOTI1MTEwMjU5WhcNMjYwOTI2MTEwMjU5WjAzMTEwLwYDVQQD
EyhjM2RhMTc2OWRkMDhjODM1MTFhZGQ2YjRhMjJlYWE1YTVlYzQ1MzczMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAziEosSHQ52XtcPmFKgru6Tzb3gDE
pGJ4+4tGkv4oQ4tTUgHylXXFMNF3a3Mq/ZiH/lTqcKjO+MhOqVHs81vrxALYOKV0
sEabatM6RRLBNnbWxc86QCSM4jNXV+FBeVe5borPzGvQrjZPbNNMtLDe45DPJDhB
XSJLT+CsLA3jyEsTHmauSxkUS4GHx0tSIbzaRJvqUo1n6xnESTHVf//+XAtLXGyA
XU989c1PEkxjvc7fPl6TPq2Ieo33P3BlVRYcOfjQrwbYQoX8roxtS7hXtvNSK35U
2JNZxQgzhKMohkzjyE/o5RZ6p+eDUgpIAZ7Xxd9G4WDdATlBIHmUvQEb7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMPaF2ndCMg1Ea3WtKIuqlpexFNzMB8GA1UdIwQY
MBaAFL4/dPK25OKOn/bKPMo6XXjKLK1qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzIt
ZDA5OTYxN2JlYjU2LzEvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8wMDVhNDctYjEzYy00MmQ3LTgzMzItZDA5OTYxN2JlYjU2
LzEvdmo5MDhyYms0bzZmOXNvOHlqcGRlTW9zcldvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu6XYQKHo
wXtOu6efT0y+fYsdHIDnT+7FEWrKCw/Z+/YSIJ0jvqsn4prau3RYe088IFuhI0m4
QTU/JrEauNcag+5l9b1+J8cRdo/VVlMVPqIfyHUSuLGQZSlzYHrYCNCl8lOwuyA6
hLszz8wyXtnOddl6yNAipJCxbdc3K0Yl3rZBssFQHodCUUeBLxgoi96XCSSTM2C2
aKPkFffUVt5qWXm6mFPJpqme9KF1nvpJLpaD9pfMmkhm7n31wA/jsVynK9C/4Xqy
MQrA6R0IZ/DxHaEgCbZtMe/sVTMIAVt/JMFH/xRXE65On+IgTYhsOmV42KBSR0+q
KDloEIxx/6GT1A==
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:11:01 2026 by rpki-client