Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
File:                     vu8TjGK4F0xqgIMG7aV-koBd6YU.mft (raw, json)
Hash identifier:          vaF2FsuxkZJ6hR/yC1wsboe+36oo6NXGnoATRWR24YQ=
Subject key identifier:   69:00:D8:C9:67:65:C5:2F:9E:4E:2E:05:23:A0:C7:E5:4B:DA:E7:EF
Authority key identifier: BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85
Certificate issuer:       /CN=beef138c62b8174c6a808306eda57e92805de985
Certificate serial:       01A0E36350A3FA457C2A7401D3A690BC3FF7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
Manifest number:          0690
Signing time:             Sun 27 Sep 2026 15:02:11 +0000
Manifest this update:     Sun 27 Sep 2026 15:02:11 +0000
Manifest next update:     Mon 28 Sep 2026 15:02:11 +0000
Files and hashes:         1: T0yo1RTWcLkKjj9BCwI7fzMhqKs.roa (hash: q8a/g/tCJJ065beXU3o3AgznSWXuuLeSniWGL98Zjek=)
                          2: vu8TjGK4F0xqgIMG7aV-koBd6YU.crl (hash: JrKGV/KB1mmNQCCJc5MCKXHrCNgcNZKFwK2n28+czOs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 28 Sep 2026 14:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:e3:63:50:a3:fa:45:7c:2a:74:01:d3:a6:90:bc:3f:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beef138c62b8174c6a808306eda57e92805de985
        Validity
            Not Before: Sep 27 15:02:11 2026 GMT
            Not After : Sep 28 15:02:11 2026 GMT
        Subject: CN=6900d8c96765c52f9e4e2e0523a0c7e54bdae7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:66:8a:6e:23:5d:c7:91:1e:8d:7a:e5:06:ce:
                    64:ba:14:74:78:28:cb:e9:a9:ce:79:aa:c3:c8:47:
                    7c:57:71:dc:11:a6:23:57:d4:08:c6:8b:f1:61:e1:
                    ef:d5:72:5f:2c:5b:2f:78:e9:2e:de:55:99:cb:4a:
                    57:f1:2f:78:22:f1:0d:93:6a:bf:24:5c:39:5f:e7:
                    ff:46:51:23:35:4d:83:4d:31:8c:e8:87:9d:2c:40:
                    71:14:78:ab:94:f4:82:f4:bc:d2:6d:d9:0d:62:41:
                    56:60:5b:6c:d6:87:4d:fe:4e:30:ce:41:e0:15:28:
                    f7:c1:b0:fe:cd:af:e4:d0:6e:1e:b5:c0:2a:1c:30:
                    cc:82:36:01:23:6d:77:0f:b1:3c:d1:ae:cc:fc:e1:
                    3a:e3:46:77:88:27:77:93:0f:49:e9:c6:9b:4a:e3:
                    f4:cf:98:3d:8f:81:f6:6d:53:fb:0e:fd:b8:4c:9b:
                    38:31:c8:6d:4f:60:ae:5f:f2:5d:4f:02:9d:a6:cb:
                    4f:0b:70:92:0b:7b:8a:72:0f:64:cb:8a:a8:c6:6d:
                    40:5e:0d:bd:8a:5b:0c:9b:32:a4:71:88:ff:7e:9f:
                    b6:a5:a2:2a:8a:8c:de:69:24:67:01:9a:26:2d:a6:
                    05:b5:dd:b0:4f:77:d5:12:0a:f7:d0:5a:29:84:45:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:00:D8:C9:67:65:C5:2F:9E:4E:2E:05:23:A0:C7:E5:4B:DA:E7:EF
            X509v3 Authority Key Identifier:
                keyid:BE:EF:13:8C:62:B8:17:4C:6A:80:83:06:ED:A5:7E:92:80:5D:E9:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu8TjGK4F0xqgIMG7aV-koBd6YU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/f4e4f1-b7ff-4781-b976-57270082fe0b/1/vu8TjGK4F0xqgIMG7aV-koBd6YU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:2f:5b:f5:31:2f:be:d5:60:17:79:e2:33:b9:2c:58:e4:b9:
         de:06:66:78:53:74:3a:71:f4:cf:23:48:00:46:14:34:8e:64:
         73:e5:36:22:73:02:ff:26:09:77:25:6d:c7:3c:8e:1f:bc:07:
         60:5a:c8:73:2e:1a:d5:38:d5:50:cc:e9:e4:4b:ed:18:37:e0:
         61:d0:40:7d:2f:e7:ca:57:f2:36:fb:68:4d:a0:7a:1a:e9:39:
         de:07:b7:bb:06:53:f2:31:6a:2c:1c:9c:17:23:a7:7c:7f:fa:
         5f:a0:6c:a5:64:48:e3:b1:f3:79:bb:99:36:e8:e3:b8:cd:e5:
         7c:ee:98:e8:30:c4:d5:2d:0a:b7:b5:08:24:81:2c:3b:a1:e0:
         4b:7a:0c:22:35:4c:aa:4b:70:94:b2:ce:64:8a:29:e0:76:c4:
         50:9d:10:71:40:ea:60:ee:40:78:42:92:14:97:8d:2b:39:11:
         2f:d8:a6:06:e0:34:fa:53:de:2f:c8:00:a8:36:fc:ec:c2:df:
         f9:3a:59:b2:f8:c2:ee:35:c4:f1:49:db:30:ff:c4:d0:fa:ed:
         62:2a:77:c7:99:52:9e:6a:6f:dd:8b:37:80:cc:a5:70:25:b2:
         65:12:0a:6a:7d:ce:ce:e1:6e:47:92:2c:b0:1d:a0:05:d0:f8:
         14:3f:62:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:58:44 2026 by rpki-client