Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
File:                     VXsKwQuGQqJ909dO1ste4EXme5c.mft (raw, json)
Hash identifier:          FBpm2Yxtm9Uiw5+0+t2+v6kMTUZSxBd31dNhUlTcspg=
Subject key identifier:   E5:A9:82:2A:5E:10:70:40:B4:5F:53:F9:09:B5:82:AB:84:C4:C9:48
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Certificate issuer:       /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial:       01A0DE73687D4694E2D9956DDE9414B6100D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
Manifest number:          0ECF
Signing time:             Sat 26 Sep 2026 16:01:40 +0000
Manifest this update:     Sat 26 Sep 2026 16:01:40 +0000
Manifest next update:     Sun 27 Sep 2026 16:01:40 +0000
Files and hashes:         1: 0bOZqErT7cPqtg8A6up5AuWvx0k.roa (hash: TLkmyalxkw5UtbYf/UBevHhaws4BaWA7DIMpjH0huR4=)
                          2: 0nKy3DcrJQbiUx0L11st8vPu4iU.roa (hash: p61zFKqkHY6u5BC22bvQD8WFNXvs2Yw1bGFGniYo/EE=)
                          3: 50r6jSn0CMuiVpA2P-b_FOjvPPg.roa (hash: D5jC6zCHGCgbBXPC5sbkuztpv5UfBKKCMfOPc3Dg0Lw=)
                          4: BkRoNGdVo3bZmIQhDiXKxyVZiAY.roa (hash: FSP05ciRv7cgg2ori440lYssEdhe7MklJbnbswJVXz8=)
                          5: C-Kmr5FT1ri-wqW_PoFuVOWIXaY.roa (hash: ERXgmbLSjJDQYHfslHu3SRPoPi7u4SxKIXUEFniHGbE=)
                          6: N8NZd8d4rRy6_aZlQ1IB8S7VVO4.roa (hash: sJ/b4s+wOONAASz+jNAdnE8FTPixklTn6DITWj2Oz+o=)
                          7: NtDpHlY5BBDBlXf9qXXnZC5_4Tc.roa (hash: tjAGBxyE9MUK6tIC8hGVGZt0+cyyEXn5+tt8NlkIgvY=)
                          8: Pd2rMwFiHNfo8LsVySgeVLzTGq0.roa (hash: sdAzHA/hidfaS5zNstJ0MbK05F4160hrzBGMOr4TmYo=)
                          9: QXZE3Zq08zJCNAuWkUlhOf72CEo.roa (hash: 4w3elPVXjJm0mGB/LmhaWlS8kL5Tk75Pr/n+xOgx6fw=)
                          10: ROFAtVDItt_EMagnNMRUK_8AFAo.roa (hash: 0/7Uq0DIP8W8M/AoQNG3rBHtAMug83v1CzVSyAShVQQ=)
                          11: SDv_Hv3j1zQYKdMKKJahi--bpbA.roa (hash: wiXpFtlqxh3vGK37wBoqcCvYsCDy5XPVC/ufdC7sY8c=)
                          12: VXsKwQuGQqJ909dO1ste4EXme5c.crl (hash: ysBv+jXNcbPpeeUx5CKPC1y9m6/kgQhXJcH0YiEjJrI=)
                          13: _8UAnkY-Tgc4NZnERUShSjoD4xE.roa (hash: vjUpfIBIALtCY5M3wtuciypbGi/vBvMv2oVQ1jTAtsM=)
                          14: fCShZlzeyORIZqRpva0LWa9CXcY.roa (hash: Zw1W+vklKFKa/7FceWUPbOmP+yw3OCVtUAYFmYvIIHY=)
                          15: hVZoai8ErXeUq59EVuJ2Nzh4wyg.roa (hash: P18VNSJRod1881sL7FyXf+LS0GoW/VI4U88shR2WTxY=)
                          16: nDMO-i4AxpRKoQ_bCv1niXY7MwM.roa (hash: mBMzJHf7kRboGL+NsWlN+QzAIvKztq5wCERZ3i/DuXc=)
                          17: ujj1Fs-tVIeU9rJrgU-MmfFu7cI.roa (hash: O7M0cdecg0k5jJU4EYSgvz6r2GhJVnkR6Wsg7m7uOsk=)
                          18: x35bCF8o2frE0yVudoR1l5CD4FU.roa (hash: P9cerXMElreTy2+e7EkdqIb26AnuXW2v3h+k00K0LsA=)
                          19: yNGeTwwu6nvLd6pVRj1m7SWFsRI.roa (hash: DIGoHvjBhbh21gUmE9LE4Pi0LqvQbAY6Y2ak9deQj74=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Sep 2026 11:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:de:73:68:7d:46:94:e2:d9:95:6d:de:94:14:b6:10:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
        Validity
            Not Before: Sep 26 16:01:40 2026 GMT
            Not After : Sep 27 16:01:40 2026 GMT
        Subject: CN=e5a9822a5e107040b45f53f909b582ab84c4c948
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:eb:b0:cc:7e:9e:4f:3e:24:f2:6a:00:ad:33:
                    96:e5:ce:fc:5d:d1:b9:11:13:a9:b0:aa:fb:0b:8b:
                    a3:b4:f1:c4:18:3e:ab:75:f8:06:c3:72:77:7c:c0:
                    2a:b2:dd:55:19:6c:80:b9:fa:1c:18:0c:71:52:7f:
                    48:c9:be:69:92:ec:bc:69:da:b4:09:60:cf:49:61:
                    75:15:95:02:17:c9:47:aa:36:cf:8a:f9:69:c2:25:
                    9e:93:ea:b4:94:ad:40:91:53:b5:7d:4f:54:95:5e:
                    89:1c:46:50:67:40:d6:50:f7:db:8f:1c:7d:b6:06:
                    bf:9f:22:ce:17:16:2e:bc:ef:d3:76:f7:bb:ce:25:
                    e0:85:c4:d7:64:81:9c:60:16:8b:f7:f9:44:5f:63:
                    4f:d7:1a:ef:80:bf:a9:9a:2d:7c:e6:33:b2:46:7e:
                    31:57:9a:d0:24:31:57:0c:aa:70:58:3d:3f:c2:2d:
                    18:ef:c1:5e:7a:9b:1e:5d:7a:17:ed:79:cf:f3:7b:
                    5e:97:1e:c0:2b:c9:70:5a:7c:32:03:9f:00:33:12:
                    51:69:cf:9e:f3:81:a3:bc:fd:d5:11:c7:b3:03:96:
                    84:b1:41:fa:8f:6c:f8:93:81:55:89:cc:f5:3f:ec:
                    18:e8:b3:5d:20:b9:a4:ae:7a:b2:7a:0a:88:09:6b:
                    c3:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:A9:82:2A:5E:10:70:40:B4:5F:53:F9:09:B5:82:AB:84:C4:C9:48
            X509v3 Authority Key Identifier:
                keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:e1:64:1d:6e:f0:4f:58:82:a1:a8:ca:f9:80:2f:56:0d:ca:
         1f:46:6c:b3:5f:6a:32:ce:da:3b:0e:2c:99:89:28:aa:c7:5d:
         e2:8e:12:4e:f2:bc:92:e4:5e:97:97:67:3c:30:cf:54:50:21:
         11:de:78:12:e7:26:02:06:20:cf:ac:fb:2c:b3:5b:41:7b:5b:
         5d:e8:1c:fa:4c:f2:36:49:54:14:21:69:5d:b1:22:36:85:c0:
         0c:b0:39:92:e1:6a:be:48:e0:5b:10:d5:e8:eb:4b:89:5d:0c:
         34:e7:ce:52:b9:cf:81:7d:40:c0:84:36:d0:c6:89:79:46:d4:
         87:cf:8b:9c:64:aa:9e:f4:b9:4c:18:a2:62:26:28:c6:dd:ca:
         49:5f:b5:42:5c:79:2a:43:f2:87:d0:dc:9b:3f:08:9b:03:d1:
         6a:08:2e:34:f1:6d:59:30:00:d5:5c:0b:da:40:4b:f6:10:b1:
         60:e0:4c:e3:59:a3:ee:11:79:9a:7f:57:20:c9:16:42:a1:b8:
         5c:4e:d4:8c:36:7f:ef:93:3b:d9:7e:cd:2d:22:0c:7a:f2:06:
         94:cc:ce:21:3a:a4:1a:2b:15:66:9f:d7:cd:ed:6b:be:90:f1:
         c7:56:91:4c:08:d5:5d:8a:0c:2c:0b:97:d0:42:42:ea:91:af:
         d1:e9:f3:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 18:32:25 2026 by rpki-client