Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
File:                     V27gKsYF8LuYu81jeprfrkg6boQ.mft (raw, json)
Hash identifier:          qM+PEH1EQ1BWzHOT2TcPI4dl3iz0S+gQRgFeRQBzj2E=
Subject key identifier:   B1:F4:0A:52:2D:65:44:BD:18:C0:E9:22:05:01:24:00:D3:FD:6F:02
Authority key identifier: 57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84
Certificate issuer:       /CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
Certificate serial:       01A08D5701E78FA145B880475609B50AB8F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
Manifest number:          143E
Signing time:             Thu 10 Sep 2026 22:01:24 +0000
Manifest this update:     Thu 10 Sep 2026 22:01:24 +0000
Manifest next update:     Fri 11 Sep 2026 22:01:24 +0000
Files and hashes:         1: 0i0XuDvoPgs1nd1NeD83B2IScVA.roa (hash: YNJF/olVt/Dil/zKrwDDUgcE/N5peyDf18kFIpNKPX8=)
                          2: V27gKsYF8LuYu81jeprfrkg6boQ.crl (hash: GIUciK3GoguUGj+venjsuCZR0Jz9IOz1kmThOuaHUGE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 22:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8d:57:01:e7:8f:a1:45:b8:80:47:56:09:b5:0a:b8:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576ee02ac605f0bb98bbcd637a9adfae483a6e84
        Validity
            Not Before: Sep 10 22:01:24 2026 GMT
            Not After : Sep 11 22:01:24 2026 GMT
        Subject: CN=b1f40a522d6544bd18c0e92205012400d3fd6f02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:36:6c:aa:21:c8:ed:51:b8:ab:f5:bf:6f:d1:
                    b3:e5:db:92:1f:d7:b6:6f:52:72:8b:9c:23:f3:1e:
                    7d:91:c7:1e:cb:98:cb:95:f1:85:33:fe:da:13:af:
                    d8:66:9c:fc:00:58:3b:e7:8e:b2:fb:6b:f5:3d:61:
                    47:dd:ba:e8:4c:65:4c:18:2b:fa:25:c0:ba:a5:1f:
                    01:f8:c7:49:bc:3f:de:86:3d:7a:48:f6:56:50:72:
                    b5:88:f3:01:97:08:7c:c7:ae:f3:ca:15:43:2a:ee:
                    71:a2:1e:64:a1:8c:47:79:bf:ca:fe:a4:3a:8c:77:
                    00:3b:5c:1a:1e:42:4b:fb:f1:65:12:f9:28:b7:7b:
                    72:55:ef:ab:f7:8f:2d:f5:d2:67:21:3a:54:ef:84:
                    2f:05:a4:e9:40:ff:0a:ae:53:84:84:68:36:fa:30:
                    55:27:46:f0:1b:24:95:58:37:54:66:a1:4f:c7:f4:
                    b6:14:0c:c2:00:f3:77:10:57:84:34:8a:6e:ee:74:
                    e1:db:a8:15:5a:9a:d3:f7:26:4c:e8:68:0f:2a:c4:
                    db:dd:69:3f:bd:26:31:59:11:bd:21:20:ca:f5:65:
                    7c:37:90:12:a0:ad:f3:00:df:22:ad:27:d5:87:ff:
                    da:89:db:86:e3:49:e9:b4:84:8f:25:51:12:b1:d5:
                    77:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F4:0A:52:2D:65:44:BD:18:C0:E9:22:05:01:24:00:D3:FD:6F:02
            X509v3 Authority Key Identifier:
                keyid:57:6E:E0:2A:C6:05:F0:BB:98:BB:CD:63:7A:9A:DF:AE:48:3A:6E:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V27gKsYF8LuYu81jeprfrkg6boQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f81a66-6706-495b-9e0a-b089d18fc09b/1/V27gKsYF8LuYu81jeprfrkg6boQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:a2:85:b0:d9:fd:e8:5f:97:ba:ab:b2:9e:2a:16:0d:8f:eb:
         b5:57:dc:e7:bd:3c:f6:6b:9a:3b:da:8d:e9:25:f7:ea:ae:80:
         da:19:9c:a7:91:68:64:d5:86:14:22:56:52:23:49:25:19:46:
         95:72:92:27:bd:07:27:42:49:d4:ba:9d:cb:dc:b1:e1:dd:74:
         89:9b:5a:7c:46:32:3e:92:27:d7:a2:60:9c:04:fd:42:18:c0:
         ec:44:a8:c2:5b:14:bb:0a:f8:bd:4c:b3:1e:03:e6:3f:f6:2f:
         e8:1c:57:72:16:25:40:25:c2:2c:2b:e9:c7:5c:7b:ea:38:f7:
         13:74:44:d4:f8:8e:c1:14:ad:42:2e:a6:72:9a:07:76:7c:f6:
         6c:26:7e:2f:24:10:c3:16:19:02:15:c9:54:ee:b8:53:31:97:
         c4:e3:4f:a8:60:0d:8d:e3:d4:46:b4:fc:f8:7d:c0:fb:8a:08:
         93:a2:6b:1f:94:61:57:8f:88:10:76:46:8a:47:a3:a5:69:0c:
         85:16:49:1b:6e:ad:74:71:14:30:9c:a2:34:8b:a4:e5:6b:fd:
         40:2d:f8:f0:a2:37:7e:d6:9e:f7:76:d2:7f:75:2f:a2:a6:06:
         7d:2f:19:b6:7e:de:ea:ac:3d:f5:04:57:58:ae:82:91:c2:8e:
         f8:05:03:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 03:34:24 2026 by rpki-client