Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
File:                     VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft (raw, json)
Hash identifier:          r7BOkKPxeXDq1dWjIN25zGwQmVdqoz5zJTEG47pX4a4=
Subject key identifier:   AC:FF:39:89:4B:6C:F1:CF:D3:EB:5C:B2:A4:8F:B0:F8:28:25:E9:76
Authority key identifier: 54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF
Certificate issuer:       /CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
Certificate serial:       01A0D0803362FF651BD64C534904E4EE9836
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
Manifest number:          7A
Signing time:             Wed 23 Sep 2026 23:00:57 +0000
Manifest this update:     Wed 23 Sep 2026 23:00:57 +0000
Manifest next update:     Thu 24 Sep 2026 23:00:57 +0000
Files and hashes:         1: 3H4t6aVUO8WAiaJGghHZPFOuXds.asa (hash: w7cO7RuqXG62dr/GQ7Tdne9GWD9Usv0P33VC02W75Ss=)
                          2: 4WNmw-gTRHmg-D_jXg9A0Hc_Mis.asa (hash: Y0hTIBbfAFxXavbNGZn5hGiaXLjOpJkd26dk6w8/bcE=)
                          3: VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl (hash: UEeVlhdhFikglbwnzfq/MoUqdi2YsoHF+fJ5GOPbKWc=)
                          4: i50NmcyQMGdskhjKk-gvhk7GyKY.roa (hash: n+34beDDYuuAAxA6l+S5RkIHrnGK4GV1cKpqRzaZaAM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:80:33:62:ff:65:1b:d6:4c:53:49:04:e4:ee:98:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546509e3248d65dfe0331fd7b99d2845f4ac7dff
        Validity
            Not Before: Sep 23 23:00:57 2026 GMT
            Not After : Sep 24 23:00:57 2026 GMT
        Subject: CN=acff39894b6cf1cfd3eb5cb2a48fb0f82825e976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:c1:d8:30:4c:6e:76:03:bb:ce:65:38:bd:
                    64:58:52:ae:f5:ea:19:49:78:52:80:1d:48:22:a3:
                    10:98:20:fe:7b:03:60:41:f7:6e:ba:5f:39:ef:75:
                    d3:9a:39:fb:84:66:b8:62:49:1e:25:9c:58:6c:f7:
                    ec:9c:06:77:97:d6:7c:92:7c:7d:4a:62:2a:77:0c:
                    fe:c8:23:d5:59:65:d4:03:cd:69:f1:8e:68:7e:6a:
                    ad:17:7c:5b:28:b0:a0:ba:ef:b9:3a:2b:02:97:dd:
                    7e:ad:97:2c:b2:4c:31:a3:9c:00:b2:ae:16:f0:02:
                    14:46:ee:37:d2:0b:6c:10:a0:df:90:d9:60:c8:e8:
                    3e:06:10:a0:1a:c6:c7:80:ee:08:5a:54:a6:df:4b:
                    3e:b1:96:97:ec:0d:53:ec:c7:90:6e:4f:18:b9:04:
                    42:d2:39:0e:83:c8:95:ad:0b:8a:cd:89:fe:56:fb:
                    0a:88:86:84:e8:77:f7:63:e6:f2:9f:e4:6f:c3:61:
                    1b:c2:2c:e9:ed:97:d9:57:d2:02:01:7b:68:c3:a8:
                    06:3d:c8:b9:9f:1a:5e:0a:c1:d9:7e:2d:46:5d:39:
                    52:be:1f:9e:73:24:82:88:15:64:c0:5c:3a:37:9e:
                    2b:7e:c3:90:74:44:6d:f7:12:44:63:fc:52:f1:ea:
                    49:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:FF:39:89:4B:6C:F1:CF:D3:EB:5C:B2:A4:8F:B0:F8:28:25:E9:76
            X509v3 Authority Key Identifier:
                keyid:54:65:09:E3:24:8D:65:DF:E0:33:1F:D7:B9:9D:28:45:F4:AC:7D:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/7b17fb-8539-4608-9531-13504dc65ca7/1/VGUJ4ySNZd_gMx_XuZ0oRfSsff8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:2f:97:2a:42:9f:7f:c3:d2:b7:7f:21:8e:8d:98:25:6c:cd:
         cc:12:2c:5f:12:d1:32:75:40:ac:78:ad:a9:24:39:52:69:57:
         2e:8c:b4:49:1f:19:08:ec:26:a7:87:f7:81:ad:40:e9:72:a4:
         8c:0c:3d:0d:80:9b:29:4c:e7:91:ea:fa:db:13:c4:3d:78:23:
         7f:32:3c:3d:b6:29:19:c2:14:13:1a:29:c8:f9:b7:29:00:c4:
         3e:a7:e3:cb:bd:da:c5:3a:31:38:a1:41:db:72:ae:f2:38:77:
         ad:38:f4:19:85:a7:3a:2b:69:0a:bb:d1:85:cc:d0:2f:cf:2c:
         41:57:55:8e:84:1e:c5:8e:4d:1b:91:b2:20:64:b2:85:79:95:
         a1:16:7a:99:74:a2:e3:7c:07:d5:5e:59:58:09:c2:2e:13:a3:
         60:67:c9:1e:9e:9f:27:d9:1e:10:76:df:7a:06:4b:32:c4:ba:
         4c:26:6e:2b:7e:92:c1:9f:1c:84:f4:f7:bc:e1:7c:63:b3:b5:
         e5:2a:7f:97:68:d6:f6:79:1b:2b:ed:eb:dd:d0:e3:ba:b2:95:
         35:e5:6d:ff:3f:81:1f:0a:6b:d7:67:b0:c3:b8:4e:ae:8b:91:
         2d:52:57:65:d7:f6:3a:0d:16:a5:50:3f:5a:16:6d:8f:36:88:
         d0:bb:ed:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 07:52:46 2026 by rpki-client