Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
File:                     V3zTsjkfRybBqonV7T0ECCMlI1U.mft (raw, json)
Hash identifier:          4iS95Oso4EAxi+RQ5zafvzgH/qvbaOF/PUlmwWVQ044=
Subject key identifier:   AA:B5:9C:6E:46:13:67:03:CB:D8:73:D0:30:79:B2:84:7A:C9:83:B3
Authority key identifier: 57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55
Certificate issuer:       /CN=577cd3b2391f4726c1aa89d5ed3d040823252355
Certificate serial:       01A0D98393CB6F943633E19BA21FCEBFE46C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
Manifest number:          05E1
Signing time:             Fri 25 Sep 2026 17:01:13 +0000
Manifest this update:     Fri 25 Sep 2026 17:01:13 +0000
Manifest next update:     Sat 26 Sep 2026 17:01:13 +0000
Files and hashes:         1: 4nSUIwtH1PWVtjZBsb7u8aGIHdg.roa (hash: bX+Qa++BgGAVTurdoW+HtFnLZYYAEuUvxiVv/7oFu2g=)
                          2: V3zTsjkfRybBqonV7T0ECCMlI1U.crl (hash: ict+RPFzTmHV3N6qS4aWNcm6La/ABB0kAjRc/2XgoD4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 15:59:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d9:83:93:cb:6f:94:36:33:e1:9b:a2:1f:ce:bf:e4:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=577cd3b2391f4726c1aa89d5ed3d040823252355
        Validity
            Not Before: Sep 25 17:01:13 2026 GMT
            Not After : Sep 26 17:01:13 2026 GMT
        Subject: CN=aab59c6e46136703cbd873d03079b2847ac983b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:31:dd:12:ae:cf:45:96:52:74:b5:11:00:48:
                    7d:0f:b1:2e:24:44:26:e6:e4:7e:a5:a1:59:eb:04:
                    7a:64:da:cf:fc:9e:6a:bf:e0:fe:5d:ec:13:62:3e:
                    7f:5f:ca:93:3b:f0:ff:cc:9b:4d:25:37:c3:0f:82:
                    70:ca:21:d2:84:d9:de:07:f9:c3:4f:76:19:79:11:
                    16:db:7d:f7:f1:bf:80:dc:14:db:a6:dd:2c:f4:ef:
                    88:c7:65:c7:46:3c:17:3f:ac:35:41:25:f4:a2:3e:
                    9d:40:0c:70:6f:e3:ae:8b:4f:d9:9c:84:30:14:e8:
                    f3:65:f4:7e:fc:0c:16:b2:03:3c:ce:b4:af:72:f0:
                    37:54:84:7f:98:86:d4:2b:e5:c6:62:4f:0c:a7:7e:
                    df:16:c4:cc:68:98:65:61:bb:57:93:52:6e:52:5d:
                    c8:43:62:a4:20:72:03:59:1a:5c:e7:57:7d:1a:b4:
                    dc:65:0e:fc:9e:e2:08:b8:18:f4:48:12:64:55:c1:
                    cc:63:7a:08:80:ef:cc:a5:fe:2d:a1:82:e1:ac:c7:
                    27:f2:3b:53:33:55:b4:4d:49:2b:d9:93:c1:b5:13:
                    7b:1a:c2:c8:5d:19:95:8d:df:f6:a7:b6:7f:45:0c:
                    89:46:26:90:09:e1:6c:77:f8:1c:25:dd:52:08:ea:
                    f4:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:B5:9C:6E:46:13:67:03:CB:D8:73:D0:30:79:B2:84:7A:C9:83:B3
            X509v3 Authority Key Identifier:
                keyid:57:7C:D3:B2:39:1F:47:26:C1:AA:89:D5:ED:3D:04:08:23:25:23:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V3zTsjkfRybBqonV7T0ECCMlI1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/4b82fe-ff73-4b58-a21a-00fd05d3cd1d/1/V3zTsjkfRybBqonV7T0ECCMlI1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:7a:da:fb:c0:db:3c:38:11:dd:07:91:46:12:bc:de:b7:c7:
         97:eb:78:a8:cd:13:3e:5b:ab:93:f1:e3:a5:47:07:d1:5e:0f:
         d4:05:88:a4:db:d9:3b:70:bd:24:1c:4a:2e:84:7b:42:1c:d1:
         b9:80:93:41:38:83:f2:26:d2:6f:b2:2d:91:2c:12:c7:8f:fa:
         ff:23:90:de:7e:18:6e:54:62:43:cc:71:34:49:44:44:f8:19:
         f0:66:bd:0e:9e:45:f7:27:46:43:26:82:f0:e5:f9:86:9e:2e:
         03:31:5a:81:85:c6:52:63:45:92:9c:26:2e:10:90:8a:49:bb:
         cc:b8:cd:b2:62:b3:a0:00:f7:e0:b1:30:5a:b1:0c:06:9e:13:
         60:86:18:76:81:3e:8d:45:fa:4a:5c:db:79:7a:83:d6:19:1c:
         b3:6b:51:5c:ac:3e:58:4c:20:bc:cc:52:2f:66:81:7a:09:c1:
         69:4e:9e:80:48:fb:a2:b7:7f:86:73:71:42:75:a9:b2:c9:19:
         7a:cf:74:54:d7:1b:0e:81:3f:d2:29:e2:f4:24:cc:b2:f9:fc:
         d9:a9:e5:23:38:33:e7:35:74:8f:76:b7:9d:94:50:cc:d6:1d:
         cd:a2:1f:71:2b:6e:bf:dc:fe:00:99:70:78:82:c9:c3:25:cc:
         4c:c3:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:35:43 2026 by rpki-client