Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
File:                     VrS_zQFkrXxmiK8iJGyC4Zld01E.mft (raw, json)
Hash identifier:          vwz0ylLUUiu/NwpwNVpQcjN9YQKN/RdHNjZPdeyrji8=
Subject key identifier:   FF:BF:50:BC:7B:7B:67:C6:E4:9B:D9:58:8E:86:CE:94:BF:14:0E:99
Authority key identifier: 56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51
Certificate issuer:       /CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
Certificate serial:       01A127307CE95C91B742538713CD479AC83A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
Manifest number:          1A97
Signing time:             Sat 10 Oct 2026 19:00:51 +0000
Manifest this update:     Sat 10 Oct 2026 19:00:51 +0000
Manifest next update:     Sun 11 Oct 2026 19:00:51 +0000
Files and hashes:         1: H72aDLmziajxH7j-buUE4Es0RIo.roa (hash: hI4MdmQURw2gDSqP3qZ28v2HkIRtU1OHtdMVA31r6DE=)
                          2: VrS_zQFkrXxmiK8iJGyC4Zld01E.crl (hash: I2PsYNVn3ajY2pvIdru1mQmQr4oDabfzeuIJycb1pvM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 Oct 2026 11:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:27:30:7c:e9:5c:91:b7:42:53:87:13:cd:47:9a:c8:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b4bfcd0164ad7c6688af22246c82e1995dd351
        Validity
            Not Before: Oct 10 19:00:51 2026 GMT
            Not After : Oct 11 19:00:51 2026 GMT
        Subject: CN=ffbf50bc7b7b67c6e49bd9588e86ce94bf140e99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ff:3e:37:4e:1e:81:97:24:1a:cb:10:2a:a8:
                    1a:21:15:11:f2:30:75:f0:12:88:aa:58:b1:0f:9c:
                    42:03:80:79:5f:2b:cc:08:a5:36:69:a6:76:22:46:
                    b6:04:fa:c5:af:cc:f5:52:18:2b:a7:1e:eb:4c:02:
                    ba:a0:db:fd:74:ef:0b:2a:be:9f:8e:57:5d:22:0d:
                    58:f8:fa:19:27:6a:a9:3f:70:53:b0:ad:df:ac:e1:
                    b9:fa:f8:28:df:82:6e:a8:7e:66:38:9a:d9:8b:ec:
                    70:5d:c5:f3:3f:85:a7:0b:a1:6e:b2:24:8b:1a:4c:
                    f6:ae:5e:3c:0c:bd:e9:3b:d7:85:c2:87:30:34:78:
                    1f:3d:72:8f:90:8b:40:d6:32:8d:c3:23:4d:40:cc:
                    dc:70:c9:5e:3a:e6:23:fe:f0:1a:29:b4:16:36:82:
                    a0:23:64:9d:9b:e6:a5:89:59:90:7f:7e:cc:6e:05:
                    97:95:3e:97:41:58:d0:52:90:b2:ef:8c:a7:a8:4c:
                    b7:8a:57:7e:a6:84:9a:84:bf:4b:a4:7d:ca:ce:b1:
                    2b:59:66:f2:6b:a8:01:f6:1c:d7:3c:2a:97:30:3b:
                    07:ca:53:1f:2e:8a:69:1b:4b:b9:16:5c:40:7b:20:
                    94:63:3c:33:a8:69:67:69:3f:94:fd:68:00:ee:8d:
                    b0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BF:50:BC:7B:7B:67:C6:E4:9B:D9:58:8E:86:CE:94:BF:14:0E:99
            X509v3 Authority Key Identifier:
                keyid:56:B4:BF:CD:01:64:AD:7C:66:88:AF:22:24:6C:82:E1:99:5D:D3:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrS_zQFkrXxmiK8iJGyC4Zld01E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/e03e0f-f3a6-4c55-addd-241665f49d25/1/VrS_zQFkrXxmiK8iJGyC4Zld01E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:1e:f8:16:fd:35:88:97:bb:fb:85:c2:48:ac:bb:c1:2b:fa:
         9b:71:31:20:17:5e:f1:63:3c:7c:39:9c:25:66:c2:31:07:ab:
         f5:32:97:80:af:ee:e1:d3:e7:e9:f3:31:3a:a1:76:84:fd:9b:
         e5:36:25:08:6c:4d:46:3d:9d:6f:0f:11:8d:af:09:13:dc:51:
         f9:97:de:76:b5:74:ec:d9:3f:d8:55:e3:68:7e:a3:44:2a:ed:
         97:08:96:dc:8f:45:fc:ce:e2:ba:69:ac:35:1f:26:a1:2c:83:
         3b:da:04:df:00:9a:48:75:39:44:93:4e:2f:e1:d0:ca:b2:00:
         40:00:19:9d:eb:ae:e7:32:08:6c:2b:37:e2:10:c8:41:e5:8a:
         83:29:fd:1e:f2:88:00:eb:65:45:ed:e2:10:7e:7a:fd:a9:3a:
         53:30:c2:b7:b4:2d:97:d1:74:0e:b1:7f:a9:33:af:0a:63:c0:
         d4:dc:0a:6d:d2:b3:6f:98:e3:af:c5:56:4d:0d:5d:da:e4:f4:
         74:e8:8d:7e:8c:89:9b:ac:32:13:f6:11:c4:e7:a7:5e:39:83:
         02:b2:d7:ca:f6:bb:3d:8d:85:35:46:a2:4e:e0:ac:8a:d9:db:
         82:04:eb:c7:a3:5c:86:b7:2b:9e:06:b0:a6:5d:35:fd:ab:ff:
         7a:71:8c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 23:20:24 2026 by rpki-client