Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File:                     VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier:          P7VeVE3UM6nq+2paMaJLdPx5ExXN1079jDn0SslKnpQ=
Subject key identifier:   A9:E8:95:15:3D:4A:FA:72:CE:D3:28:11:4A:8D:A8:C7:90:1B:74:00
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer:       /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial:       01A1DCEFCD0FAAB264B5DADE6FE1BCC4A069
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number:          0AAB
Signing time:             Sun 15 Nov 2026 02:01:05 +0000
Manifest this update:     Sun 15 Nov 2026 02:01:05 +0000
Manifest next update:     Mon 16 Nov 2026 02:01:05 +0000
Files and hashes:         1: INDLHM8Me2Bf0WnYerAJJYX2gwI.roa (hash: BGHoRGlVGb3E28D4ASgweblzagCCiTyzQTZOnGs2vlM=)
                          2: M0wNnqU_1DLmYVDdUs4avMQhe8s.roa (hash: fIfKhvWtJwrxjzjm4hZW5+IdLNHxi4+A23VOYUPdMUs=)
                          3: SIcBZqNMhrlVV5ME8icfu5WlJn0.roa (hash: XjUIn1t17j3PbJJ9aEsFCy1YZHOMHV0GsH72rvdoRV0=)
                          4: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: HnJd89BRlUlq+RlNc7OXmPL7KHBAXMXdMUoxJQzp4W0=)
                          5: kRyxiAkPj1N4o5Q97vndpCqxuTo.roa (hash: xfkYlTGJlH9MSL13viAFnNVbnhUFjXhBp9WdZzYRj34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 02:01:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:ef:cd:0f:aa:b2:64:b5:da:de:6f:e1:bc:c4:a0:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
        Validity
            Not Before: Nov 15 02:01:05 2026 GMT
            Not After : Nov 16 02:01:05 2026 GMT
        Subject: CN=a9e895153d4afa72ced328114a8da8c7901b7400
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:10:12:e0:30:86:35:ed:9d:7b:d3:d5:48:d2:
                    4b:6e:85:97:b4:d7:0e:20:1b:83:34:8d:5e:14:71:
                    0b:5d:5c:45:e9:0e:94:b8:20:10:99:f3:3e:74:ca:
                    11:39:d5:6b:82:8e:86:2b:bc:56:8e:17:26:be:45:
                    e1:e7:74:92:fd:a3:9c:c8:c6:ca:8f:f9:1a:37:ca:
                    2b:66:a7:20:4a:be:5a:35:c4:5c:30:73:f5:c9:96:
                    86:53:e1:b3:33:da:ef:37:17:ee:e5:06:5b:57:71:
                    da:61:66:7c:e1:10:e0:78:bf:a3:11:82:3e:e7:23:
                    98:c6:80:ee:30:13:8b:7f:65:0f:7c:66:6b:89:4c:
                    4f:51:30:d1:66:72:1b:c3:09:e9:c7:ab:9d:f9:b2:
                    cb:87:6e:f9:fc:3d:4b:03:2f:e0:c8:57:07:72:51:
                    ae:f4:20:29:a9:f5:fb:80:a6:7f:68:0d:8d:7b:60:
                    bc:6a:35:0f:db:95:e0:af:a8:f5:2c:41:69:68:55:
                    ad:2d:67:40:b0:de:44:1a:fb:41:43:e0:bc:0d:93:
                    bc:b6:37:d7:b4:4f:29:ab:f1:52:ee:df:b3:99:22:
                    36:b8:69:32:05:ba:3a:b3:38:60:a6:d8:32:18:4a:
                    e0:68:59:76:d2:9d:c4:a8:23:4d:ae:4f:c4:c3:87:
                    46:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E8:95:15:3D:4A:FA:72:CE:D3:28:11:4A:8D:A8:C7:90:1B:74:00
            X509v3 Authority Key Identifier:
                keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:a5:4f:f8:08:59:ec:e6:3e:c0:8b:d0:b8:61:2b:56:bc:b4:
         e4:32:de:cd:ff:cc:93:12:9a:4a:4c:7e:3f:3a:fb:fe:df:c5:
         c3:03:03:00:f1:90:87:33:8f:91:fd:cc:81:1e:25:6b:1b:2d:
         dd:91:0e:11:1f:a6:1e:0a:69:e4:ac:a6:7e:a1:86:82:d5:c4:
         9a:9b:27:ce:7b:f8:03:7e:5f:b8:de:80:79:e1:41:53:31:38:
         56:1e:46:bd:bb:79:30:20:b2:d3:cc:d6:8d:36:ff:f4:3c:45:
         ee:6f:8e:a1:41:81:b2:6d:cd:62:6a:16:54:9c:f6:17:7d:a9:
         4b:50:2a:7e:c3:e4:60:f4:aa:19:cc:02:aa:3d:06:a4:47:f3:
         29:57:02:83:b4:42:4a:29:3e:00:e2:c2:d9:51:ec:50:36:ab:
         51:22:54:76:63:f6:f4:03:ad:df:5d:d4:68:ac:c4:c7:9a:e7:
         7a:fa:f8:f5:9f:65:f1:63:81:f4:d5:79:55:01:b3:85:42:b4:
         bd:bc:43:b5:44:00:f0:01:37:74:d8:18:ed:42:c9:4e:e8:2c:
         0f:84:b8:d1:b9:f6:aa:c1:fb:37:82:4e:a5:af:78:27:66:2b:
         87:e1:07:9a:cd:e7:d4:ed:41:04:2b:62:aa:b2:51:6a:1e:ee:
         28:03:3d:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:09:41 2026 by rpki-client