Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
File:                     VwLHy8I1Jyt6zNez8LDkfGHHXis.mft (raw, json)
Hash identifier:          PTDvCuFS13z3dB96FlGB+sI8nVsHMHL1kPhaLM9Oc8k=
Subject key identifier:   8E:FA:92:50:71:F8:6A:50:DD:39:09:BC:63:BA:51:75:39:8E:78:8A
Authority key identifier: 57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B
Certificate issuer:       /CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
Certificate serial:       01A0D012C19EAB35D593673F5750A0786F0B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
Manifest number:          E5
Signing time:             Wed 23 Sep 2026 21:01:25 +0000
Manifest this update:     Wed 23 Sep 2026 21:01:25 +0000
Manifest next update:     Thu 24 Sep 2026 21:01:25 +0000
Files and hashes:         1: Dv1loStZYAsjb_Af0DKMu_bevS8.roa (hash: Zb9q97rROgQhDovcWngVEaqZebMrRktFUPt7d2lNmQc=)
                          2: VwLHy8I1Jyt6zNez8LDkfGHHXis.crl (hash: TX1nLCCqfPoRDoNMYuZh243kbvDVg8i0tDNt8vV+ZqU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 21:01:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d0:12:c1:9e:ab:35:d5:93:67:3f:57:50:a0:78:6f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5702c7cbc235272b7accd7b3f0b0e47c61c75e2b
        Validity
            Not Before: Sep 23 21:01:25 2026 GMT
            Not After : Sep 24 21:01:25 2026 GMT
        Subject: CN=8efa925071f86a50dd3909bc63ba5175398e788a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:75:bb:8f:74:7f:2a:02:a4:f0:2d:cc:81:f2:
                    b2:5f:f0:c7:2d:0f:e0:35:98:fa:2a:84:7e:7d:ac:
                    73:15:2b:79:f5:52:18:d7:91:41:2a:32:25:25:24:
                    d2:78:04:fe:a9:f5:f9:08:00:c1:c3:b6:a7:5f:f8:
                    53:66:79:ac:ae:5f:eb:3a:dc:2e:b8:83:26:91:43:
                    7b:bd:10:65:de:35:76:1d:e4:e0:2f:6a:46:3a:8b:
                    31:fb:0b:ca:e4:f5:be:b2:63:89:7a:11:0d:78:93:
                    bc:ba:bb:5d:8f:64:18:89:84:db:26:16:10:ca:46:
                    40:1d:16:a8:9e:17:5b:32:3f:b2:13:f8:d0:69:0e:
                    78:d5:c9:ae:c9:48:8f:17:bb:54:da:c9:c7:1d:84:
                    d4:32:30:3b:f6:da:0e:c7:53:a8:f6:2e:de:55:7b:
                    e5:c2:d3:99:cb:21:2b:a8:64:b2:47:c5:19:f9:e9:
                    42:46:c3:72:23:b3:3c:ff:19:37:2f:24:f0:cd:cd:
                    f8:38:1e:ff:4c:5a:d9:60:ff:bc:a2:93:3d:d5:cb:
                    a6:7d:89:74:fe:8a:a2:4c:3b:71:67:b4:fa:3c:ba:
                    c9:57:13:2c:cc:59:db:07:05:27:63:0c:e5:9e:da:
                    e3:50:28:44:d1:b5:c7:ac:b7:cb:de:a4:08:70:cb:
                    0a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:FA:92:50:71:F8:6A:50:DD:39:09:BC:63:BA:51:75:39:8E:78:8A
            X509v3 Authority Key Identifier:
                keyid:57:02:C7:CB:C2:35:27:2B:7A:CC:D7:B3:F0:B0:E4:7C:61:C7:5E:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwLHy8I1Jyt6zNez8LDkfGHHXis.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/2a60ac-dc83-4ca3-b788-21ec6565c9be/1/VwLHy8I1Jyt6zNez8LDkfGHHXis.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:30:c1:9d:1f:6b:9f:93:ab:b4:2b:83:2d:5f:4d:5f:ad:2e:
         b0:b7:cd:2e:37:9f:11:90:1f:da:c1:8d:db:b6:8b:dd:19:9a:
         ee:6b:b1:35:e3:58:f2:27:b0:e5:55:c1:d5:f4:a9:ae:7a:f7:
         84:a9:69:c5:be:15:8d:05:ef:85:75:85:dd:0c:f7:f8:30:0e:
         56:be:0f:a0:97:bd:4f:0b:09:b7:7d:24:f9:3c:30:b3:fb:4b:
         3e:a4:20:55:77:bf:4e:b6:ab:65:6b:73:24:f4:7a:75:40:f5:
         7c:0e:17:1a:33:d1:a0:17:c5:36:2f:1b:01:f9:13:8e:1b:c5:
         5f:02:cb:06:e8:98:a7:2a:19:55:6c:ef:ce:f1:40:68:ec:1f:
         3a:05:4a:3d:8c:13:7c:e6:aa:b4:ee:52:97:8d:fc:be:96:44:
         af:55:6c:a2:fc:fb:7a:32:ce:c9:fb:ba:8c:3c:4c:5b:f3:e5:
         9f:0a:1f:f8:c3:f0:56:76:fc:56:94:35:a5:d2:b4:a6:87:3f:
         67:32:94:7c:e4:4b:71:a9:54:f9:61:6c:76:ea:42:21:13:04:
         c9:0c:39:e0:a9:4e:5b:34:44:e1:42:07:aa:6d:5d:f2:e4:7a:
         a4:eb:7c:62:fe:60:5b:a7:7e:06:a2:43:67:32:68:87:e0:a8:
         74:28:fa:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 06:31:06 2026 by rpki-client