Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
File:                     vlV3m8iwu-Xlegd1WxMopXycrWA.mft (raw, json)
Hash identifier:          y/MRIeeX+3ympgOhRTG1yInHG69tDQ+4DvHlzdOeVtE=
Subject key identifier:   80:EA:0C:8C:E0:3E:A3:88:74:5F:CE:CC:4E:37:AD:E3:15:17:AB:86
Authority key identifier: BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60
Certificate issuer:       /CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
Certificate serial:       01A0D0EE2C4454D5B5E0C4C91F93B3FC9F62
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
Manifest number:          0F03
Signing time:             Thu 24 Sep 2026 01:01:04 +0000
Manifest this update:     Thu 24 Sep 2026 01:01:04 +0000
Manifest next update:     Fri 25 Sep 2026 01:01:04 +0000
Files and hashes:         1: vlV3m8iwu-Xlegd1WxMopXycrWA.crl (hash: VaiWhtDFBsjRzIleGOTLcJS8p8dn6hRYl5oMZc9AMDY=)
                          2: x7LFS5UgrUJ14mlTCPnotTPf6hc.roa (hash: 6AjgB2F4VwsbK+XIA3o+kcHAJtFnsqariEYyVKqEcus=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:ee:2c:44:54:d5:b5:e0:c4:c9:1f:93:b3:fc:9f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be55779bc8b0bbe5e57a07755b1328a57c9cad60
        Validity
            Not Before: Sep 24 01:01:04 2026 GMT
            Not After : Sep 25 01:01:04 2026 GMT
        Subject: CN=80ea0c8ce03ea388745fcecc4e37ade31517ab86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ce:43:8e:c8:63:01:6e:b4:ba:d1:01:a8:87:
                    63:65:1e:11:27:6e:79:4d:d0:13:63:d1:58:df:09:
                    b3:69:d7:f4:4d:37:81:3f:2f:bf:cc:b8:ea:d2:cb:
                    a4:08:e9:6e:0b:5c:39:23:40:32:d2:49:6a:35:bb:
                    38:c6:9c:74:47:85:e7:87:2f:5a:f4:65:c1:79:02:
                    ff:07:8a:df:70:14:15:81:0e:b7:ec:c0:32:f3:87:
                    7e:cd:bb:58:eb:40:34:4c:2b:29:69:23:7a:a7:83:
                    d0:7e:47:15:12:ef:08:e9:b5:fe:8b:36:da:e8:31:
                    04:bd:68:65:39:8e:18:84:49:5c:12:b0:db:c9:1f:
                    b2:13:78:bf:1c:ee:7d:5a:22:50:8e:f2:9c:ca:c0:
                    86:12:8d:09:3e:47:5a:8a:16:39:bc:c8:d7:8f:48:
                    83:8b:1e:02:d3:68:c4:de:5c:15:a5:67:7f:13:11:
                    2d:b6:13:1f:5c:f9:cd:e9:bb:d3:f7:56:ae:b7:0b:
                    43:e8:b6:54:31:bb:1b:0c:e6:84:09:86:28:06:37:
                    26:e9:8c:84:04:fe:12:60:84:10:c3:06:43:0a:fb:
                    77:65:07:65:95:b0:94:fd:31:a5:e6:3e:ac:37:ba:
                    f6:35:4b:09:fd:2b:9c:66:ab:57:d5:bf:de:41:22:
                    74:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EA:0C:8C:E0:3E:A3:88:74:5F:CE:CC:4E:37:AD:E3:15:17:AB:86
            X509v3 Authority Key Identifier:
                keyid:BE:55:77:9B:C8:B0:BB:E5:E5:7A:07:75:5B:13:28:A5:7C:9C:AD:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlV3m8iwu-Xlegd1WxMopXycrWA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/4e0bb4-dcc2-4140-b20c-b18d9e71c16a/1/vlV3m8iwu-Xlegd1WxMopXycrWA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:63:19:75:86:54:68:dc:e4:cd:64:34:fa:e4:a0:94:82:49:
         43:b8:b4:70:6b:cd:89:21:56:b3:83:a5:8a:8d:2d:60:8d:e8:
         58:a5:4d:5e:8f:29:01:3f:fb:80:c5:9f:e7:ef:8f:85:39:c6:
         9d:09:91:f0:80:97:59:a9:b7:3b:cb:3f:0b:de:23:90:0c:4d:
         25:f6:5e:cf:04:c2:ba:f3:26:8b:f2:56:4c:c9:f2:ce:2a:d2:
         a4:b9:31:55:06:ac:17:d2:65:fc:78:92:3b:9e:23:0a:c8:ba:
         f1:f2:96:66:01:c6:d2:01:a7:9f:2a:d3:cf:0f:0c:81:9e:1f:
         eb:5f:24:66:73:95:50:7c:73:b3:83:e8:17:98:95:75:fe:32:
         a0:7d:f4:4f:0a:1d:de:00:fc:d3:88:99:81:3a:68:98:ce:fa:
         56:72:ee:13:2b:ec:5d:d8:de:34:45:e5:38:93:38:bd:a7:f1:
         61:cb:1e:65:2e:19:7b:41:81:16:4f:95:51:b0:08:ef:4c:ca:
         7b:51:22:f3:41:06:36:3c:21:20:cc:71:7a:39:f9:db:d4:4a:
         20:f9:02:70:64:be:5d:50:cd:72:2c:07:7c:dc:e6:cb:c2:38:
         e8:33:b0:65:f4:dc:d7:e0:2f:78:d1:42:c8:8c:9b:66:89:b8:
         5b:82:d7:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:38:29 2026 by rpki-client