Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
File:                     VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json)
Hash identifier:          0rDgqwLMBVCuV+RYQyZRP4olCvFMsPVc82Lu9QSE7pU=
Subject key identifier:   51:67:C0:F0:30:81:7B:79:7D:A1:7A:E2:1A:AA:6D:9B:19:3F:80:EC
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Certificate issuer:       /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial:       01A06D27B9E759CEA30F3532D20E7995E15E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
Manifest number:          0939
Signing time:             Fri 04 Sep 2026 16:01:55 +0000
Manifest this update:     Fri 04 Sep 2026 16:01:55 +0000
Manifest next update:     Sat 05 Sep 2026 16:01:55 +0000
Files and hashes:         1: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: /y0IxmAFStV6XxxZJCwXDNmLl9H8I1e/QLHbjBF+DxI=)
                          2: da21FZlB-EiwRoOLCN5ITMfxNFo.roa (hash: 1w1sUJ0dtbKqnb7RxW32/zqJ1lJ/MMxyHIhHBbfSnXc=)
                          3: jCXew-LM4stUKDAZjHPkm0CcjHk.roa (hash: OKyuhMm85OLa4bavn5P/TH9jpfhep7ElblfCCsZsrhU=)
                          4: rSBkW65hC7ab29bJ4AU0NuL624g.roa (hash: PQXW1iGB9abxie2k7zu6yoynTk5cvhSDeO4aK1Kj0iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:27:b9:e7:59:ce:a3:0f:35:32:d2:0e:79:95:e1:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
        Validity
            Not Before: Sep  4 16:01:55 2026 GMT
            Not After : Sep  5 16:01:55 2026 GMT
        Subject: CN=5167c0f030817b797da17ae21aaa6d9b193f80ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:35:74:0e:d4:84:27:9e:08:bc:78:42:c5:d8:
                    45:55:c6:b0:28:7a:5e:bf:7d:cf:a8:2c:40:73:11:
                    a3:b7:ba:a0:65:fb:db:8a:ac:ca:d1:04:19:5d:83:
                    e7:4c:c2:7f:82:16:5a:a2:db:25:63:a6:1a:d0:f6:
                    5d:d2:f0:78:70:75:bb:c9:3c:6f:ca:76:fc:56:00:
                    66:1f:c7:77:39:27:81:97:8f:f6:18:bd:b5:a0:7a:
                    ec:84:f5:94:64:e5:d9:51:3d:24:ab:28:79:7e:9d:
                    61:d2:8e:88:45:ef:32:bb:2d:ca:0f:d0:78:71:84:
                    7d:9a:88:00:71:69:10:82:23:61:9e:76:7d:7c:c0:
                    7b:e0:49:c3:df:7f:a7:25:21:e1:83:26:63:3b:67:
                    d6:3e:b6:ba:0a:9a:4e:71:f6:a4:9c:24:92:80:c8:
                    e0:42:70:a7:c5:7b:bb:f9:96:74:c1:f9:b1:fa:5b:
                    42:0e:4f:cb:51:2a:41:73:fc:e6:47:41:67:64:f1:
                    30:88:e6:cd:85:75:7d:c4:fd:ac:9b:79:cd:30:b7:
                    6e:aa:7c:17:09:98:a9:17:08:4b:65:77:82:d3:2e:
                    15:5b:f7:27:5f:7c:1f:58:99:d6:4d:25:ff:1f:ae:
                    b1:fc:e1:b4:96:1b:80:6e:81:57:59:af:17:14:91:
                    21:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:C0:F0:30:81:7B:79:7D:A1:7A:E2:1A:AA:6D:9B:19:3F:80:EC
            X509v3 Authority Key Identifier:
                keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:ee:d4:3b:f1:a8:81:fd:d1:43:ef:ad:81:f5:df:9b:76:a3:
         cf:de:67:a1:4e:7a:1e:57:cd:96:09:8d:99:d1:0e:76:6e:a7:
         ba:ca:61:f4:cf:28:c2:ec:e1:f2:32:5c:48:55:14:fb:2f:c5:
         6d:54:08:6b:f8:96:7e:8f:b7:b3:50:68:7f:eb:2f:91:1b:6f:
         53:5b:38:07:4a:82:00:89:a7:2f:65:ee:02:29:52:48:78:ef:
         aa:36:19:04:c8:95:bb:2c:85:49:44:87:ea:71:11:c8:d2:0f:
         b4:ab:88:02:80:db:91:50:bb:3b:67:c7:21:8e:50:5e:d6:17:
         d9:15:06:13:b7:ec:80:2b:19:9f:42:ff:73:09:f5:1f:bd:9c:
         f2:fe:52:b2:a4:12:f7:e0:32:27:29:1d:36:76:c4:3b:9c:cf:
         1f:c3:27:11:1b:34:2c:31:a8:aa:2d:24:2d:36:06:f7:17:23:
         6f:49:7f:bb:42:f9:38:f8:c3:78:08:cb:20:6d:0e:49:48:1e:
         1f:47:9b:7a:aa:72:ce:f9:ca:d2:d6:a6:80:77:4b:09:22:a8:
         07:c5:66:e0:41:af:5c:90:bc:c8:8f:d7:01:4d:d8:eb:9f:7b:
         f6:a9:d6:65:d6:05:54:d4:cd:db:b9:ef:36:9f:a8:68:f2:35:
         93:55:e5:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:35:14 2026 by rpki-client