Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File:                     VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier:          fmShZtle59jkoCUBYULn83ZrZDduz3y+SwMAqVfau+c=
Subject key identifier:   A6:DB:A7:45:F5:4A:75:BA:60:6F:26:14:B0:71:5D:78:45:F6:7D:71
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer:       /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial:       01A0D56FF81ACF6613F6682C91DAE82276CD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number:          1A77
Signing time:             Thu 24 Sep 2026 22:01:19 +0000
Manifest this update:     Thu 24 Sep 2026 22:01:19 +0000
Manifest next update:     Fri 25 Sep 2026 22:01:19 +0000
Files and hashes:         1: 995GI0e38zU8lemuxEhgW-JmXKE.roa (hash: 0RU0zI+57Nl/53lm9lxkXUz5k1Q7dLHjCN5YyCpRTO0=)
                          2: Cy7Rx4953-jX_LAEsh6knsBwiwI.roa (hash: RbeQiV/5rjUIyCDMoB3diQP9Z25QG9q9RvXT9QU6AAY=)
                          3: ERektKYX8bQYLZ6hhAfOvva6TN0.roa (hash: BUZ494WA2RKIxudCXcjO8KHU4mHDrQO+xeY/KFK20Bk=)
                          4: Rph0-ywhZvi016wnJgS4mZ5Aq4Q.roa (hash: gI+MWy+X8E8yCdq+Mv/fudVnXvOj/7Bs5b4jgd3W/FI=)
                          5: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: d9E8eWVObvqzl8Tey7ghYv0N/pHJ5/Q1UG5wVqJlwf4=)
                          6: gvMEp1TMCJyhHJ9Ml5_cvvewGSY.roa (hash: ONubWKJOgWsNndyiyHgp5asOkTdD3CWbVh2afwmX/iY=)
                          7: nCefriJl2VPKegNYyVwj2ynX1o4.roa (hash: DrdI9RW4C32/rl7W/jweDQ18afw7p4Ra4A85oKVHBRw=)
                          8: opQiFkBqkVj4L844lKnzaIRQSzs.roa (hash: pr16BH5jtBeIewsVLh8sVivtAzs4fVPRiPHTfoJlwLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 21:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:6f:f8:1a:cf:66:13:f6:68:2c:91:da:e8:22:76:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
        Validity
            Not Before: Sep 24 22:01:19 2026 GMT
            Not After : Sep 25 22:01:19 2026 GMT
        Subject: CN=a6dba745f54a75ba606f2614b0715d7845f67d71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:20:5e:c1:01:4a:12:b6:1b:10:43:51:f5:da:
                    4a:08:18:5a:2e:74:4f:96:ae:64:a3:28:f8:80:87:
                    d0:09:35:67:27:61:e6:b5:ea:10:57:8d:fa:4e:68:
                    4f:07:68:3f:2d:14:ff:f3:ae:5a:45:ca:90:e4:54:
                    26:b6:61:9b:f2:24:d1:92:2f:5f:08:81:d1:7c:aa:
                    fc:f5:cc:d1:29:75:9c:7e:27:07:39:98:2f:45:9c:
                    94:98:f2:77:77:0b:b7:ce:b4:9a:24:3b:33:1c:b9:
                    ae:c9:fb:ed:c3:de:8d:b9:30:01:10:9d:a5:1c:af:
                    41:fb:ec:e5:52:a7:37:90:40:be:13:40:07:7a:35:
                    0d:e3:a1:15:98:e3:5a:5a:ee:1c:e1:ac:3c:32:21:
                    2a:f8:9c:b3:f7:53:e6:5d:4e:5a:1c:e9:4a:ed:71:
                    88:ed:2d:5d:a1:a0:46:68:ff:33:c0:3e:0b:54:53:
                    4b:05:87:fc:97:b5:e3:71:72:d0:a1:e2:6d:1b:77:
                    dc:2f:32:25:8a:e0:ff:96:90:a0:8d:06:fd:1b:e2:
                    4b:c4:0a:e0:e8:17:dd:8a:5e:5d:de:79:00:8e:18:
                    1a:8d:2f:8b:bd:c0:fe:ba:4c:68:6e:5c:07:06:ee:
                    43:bc:4c:9b:d7:2e:5b:41:60:ef:06:cc:92:e1:dd:
                    f5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:DB:A7:45:F5:4A:75:BA:60:6F:26:14:B0:71:5D:78:45:F6:7D:71
            X509v3 Authority Key Identifier:
                keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:2f:db:39:0b:44:4c:fc:22:40:84:47:7e:c3:16:96:80:bd:
         9f:ba:a9:35:da:a8:32:de:fe:a0:e3:45:bc:72:e7:e2:41:13:
         a5:07:f0:1c:68:dd:6b:5d:3d:e0:59:48:0f:8b:a2:51:c2:10:
         b7:fd:6b:e7:0a:9e:11:f3:7f:fb:b3:fa:18:70:4f:ef:ed:dc:
         83:06:7b:64:dc:a9:f3:43:5b:3e:6c:30:1a:ae:c9:ba:c1:24:
         62:a6:43:76:1c:9d:ac:48:96:54:f1:8a:7c:4c:9c:1d:ea:4e:
         28:91:5c:20:1f:04:e4:21:51:84:1a:b1:03:7f:1a:7c:f5:98:
         41:54:ba:17:3d:ef:57:e3:1f:0e:2e:f4:b9:c0:c9:3c:b5:c7:
         de:1f:54:a7:d6:0d:d8:10:15:b8:62:28:77:84:7e:30:4f:ef:
         b8:c9:98:ec:55:ce:e9:e9:53:16:8e:14:c0:67:2a:c2:1d:03:
         95:90:d3:9d:4d:7b:86:6d:8f:2f:e9:d5:c8:d1:2b:3b:3e:ac:
         46:c5:85:a8:84:ac:12:7c:fc:ab:c3:13:c8:7a:2d:a1:fd:db:
         a8:93:b2:de:0f:9c:44:22:6a:41:6b:ed:00:f4:76:7e:a7:12:
         c2:08:7d:0f:c0:f0:97:61:21:05:c4:1f:90:19:ca:ad:11:c5:
         2f:43:89:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 05:48:47 2026 by rpki-client