Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File:                     V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier:          /89w4YcNNLXJHiFbKiIX2/Ih3v2bSEOeg+MNF6NbJdE=
Subject key identifier:   B4:4C:70:96:91:B9:9D:0F:7F:BB:9D:89:AF:04:61:3C:A1:6E:87:0B
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer:       /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial:       01A0E1E2B26E65C8FEEA4B55B76A21F66BD9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number:          1A30
Signing time:             Sun 27 Sep 2026 08:02:05 +0000
Manifest this update:     Sun 27 Sep 2026 08:02:05 +0000
Manifest next update:     Mon 28 Sep 2026 08:02:05 +0000
Files and hashes:         1: 1K2LFFiurWkSS6BehPIABgELzig.roa (hash: eUzuwicyTeWiMVFNehYoQf9+T/XhqLc10wnGWFbChM0=)
                          2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: cz5FzSnw0VHMOJfTvaFXZyl3ED5KSCKyPHOKvehYn4M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 04:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e1:e2:b2:6e:65:c8:fe:ea:4b:55:b7:6a:21:f6:6b:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
        Validity
            Not Before: Sep 27 08:02:05 2026 GMT
            Not After : Sep 28 08:02:05 2026 GMT
        Subject: CN=b44c709691b99d0f7fbb9d89af04613ca16e870b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:fc:eb:c8:15:5d:5a:f0:70:e3:ba:92:59:ae:
                    a9:de:56:d9:2c:de:07:54:f7:11:cf:fb:12:91:bc:
                    33:a7:a2:26:32:13:4d:01:98:6e:e4:21:df:13:fa:
                    6e:cd:00:31:fa:59:fb:9d:34:40:0a:68:db:7e:59:
                    c1:66:a8:c0:76:2d:66:47:2e:5e:67:3c:89:7a:ee:
                    60:83:cf:e5:ab:0a:ce:ef:14:35:cf:41:36:7d:49:
                    e7:7d:a9:51:58:18:94:df:02:ec:04:c0:72:32:13:
                    7e:00:81:31:77:dd:b7:5b:58:00:b5:87:35:09:e1:
                    a6:b6:75:60:ac:b2:6e:3c:7d:d7:15:eb:e6:b0:f0:
                    2d:62:1b:6a:52:6d:1b:df:09:2c:97:1f:d1:fd:3e:
                    e6:d3:be:08:5d:be:e2:52:4d:db:16:04:86:ea:46:
                    ad:7b:ba:f0:37:ff:8c:c4:1e:9d:b8:91:cd:fd:7c:
                    da:1b:ed:ca:22:9d:c9:60:2a:1a:d5:fd:31:87:b8:
                    42:40:4d:8f:a6:d5:f5:c3:ae:da:70:a3:5f:cf:ca:
                    dd:fd:36:01:33:75:3d:b0:9e:65:f4:5a:e8:36:5d:
                    c0:45:70:a8:f1:67:d6:60:ea:63:c6:58:a0:2f:47:
                    33:86:c9:4e:c3:ad:66:e4:f4:94:35:95:8e:50:6b:
                    b7:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:4C:70:96:91:B9:9D:0F:7F:BB:9D:89:AF:04:61:3C:A1:6E:87:0B
            X509v3 Authority Key Identifier:
                keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:cc:dd:3f:27:dc:bf:ee:99:59:41:33:f8:76:e5:5b:39:20:
         3b:ce:7a:99:df:78:0d:3d:a3:cc:94:51:ea:29:4f:31:a7:fe:
         5c:65:c7:68:f7:47:4d:47:97:b8:a1:1b:eb:c6:31:d7:93:21:
         62:6f:e5:fb:f3:82:06:ac:5b:0f:4e:7e:05:10:4d:01:aa:0c:
         88:e6:c3:42:41:46:94:55:aa:49:f1:14:75:77:bd:74:00:57:
         4f:b5:2d:f9:63:a7:02:56:0f:5f:e5:ce:e3:6e:42:bd:25:8f:
         79:f2:06:7c:ee:0d:9b:fe:48:cb:81:94:3f:e5:87:ce:ff:6b:
         f4:f7:1d:01:64:28:c0:f1:af:52:0f:a6:ba:2f:c9:aa:a9:30:
         d7:ab:6f:b2:41:c2:22:09:d8:40:2c:c1:78:7f:5c:7d:f2:94:
         f7:02:ae:05:b9:b1:56:db:6f:a7:15:42:95:bf:0c:0a:aa:17:
         3e:12:83:68:f5:75:72:c7:22:9c:3d:9a:8f:43:f3:bf:e2:6e:
         ae:28:e5:f2:56:6a:af:4b:ed:0d:ab:fe:93:04:80:69:8f:8a:
         df:82:0a:b5:5b:de:dd:a1:18:78:a5:e0:1d:2d:95:1e:56:c3:
         e7:0e:a1:1c:4c:60:85:42:8c:c7:c5:26:c2:a3:10:17:7c:fb:
         76:f1:24:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 12:02:57 2026 by rpki-client