Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
File:                     dVSsTH9FHFu5OC-81G1wxMD53lY.mft (raw, json)
Hash identifier:          UYiTeVVSkGXZzTDh7itvE4UnVvIAnTbiq/pQQrgZUIY=
Subject key identifier:   7F:BB:A3:30:09:88:09:08:A0:E6:F8:4B:B7:D2:03:9B:4B:E7:82:B6
Authority key identifier: 75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56
Certificate issuer:       /CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
Certificate serial:       01A0B5508200D4E4DD38F7106E3DF5E3305B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
Manifest number:          1A74
Signing time:             Fri 18 Sep 2026 16:19:07 +0000
Manifest this update:     Fri 18 Sep 2026 16:19:07 +0000
Manifest next update:     Sat 19 Sep 2026 16:19:07 +0000
Files and hashes:         1: 1A0OgYXG3iVS7dYyDn-eVIhO8eM.roa (hash: FrUEKKMZAguXIpXWScc68qO/IKUabeFzGLn6njmAiyg=)
                          2: 8dKEBvqW0GYmkZiIWQJZSYQLqLU.roa (hash: kjvVcc0xOxJUg+x1ocm3gLplTcfZBpQ+nllVK3oSP4I=)
                          3: BYRF65R_gvTrOamV1sFiMyQQwwo.roa (hash: UcJdHpYQj1TR2O2eeL78WCxx+T3hnx4QNGLSHOCWD40=)
                          4: Clokdo8iEnkyRg1-72rcFdu0uTM.roa (hash: qI/NxfPHzKCTkxa3q3ZgfCGrWFBeBUVuUQo7H3Os6L4=)
                          5: IULcSReBl6BR3I_U3liy7HZAnac.roa (hash: 8rcQZaYhRzic9A6LKK6K6/YTQNKz/3wSmuzt2vfN2vM=)
                          6: WQ40HwqNRKlQ2HQVL_yje1GhYzc.roa (hash: trnRLeQIkkiLw857V7VhCIi+fD4BZsqXF3LsWGBOzyc=)
                          7: X5-PcFCXcBmeXFytRndx1GWZR6M.roa (hash: CusHkyVTE5E1hf9Dcr6iJxa9rL7UUSerxewweRWup5Q=)
                          8: cpXyEOPsQYnhoiU9YXgEHRotygE.roa (hash: 1cwR9tQfEOIHfGITqs8rBDCiCASn32+xpW4m0FX9NNo=)
                          9: dVSsTH9FHFu5OC-81G1wxMD53lY.crl (hash: JEduR03o7wKY5KVdPryqZ4QIRTRqK9zrkaak/Z73elI=)
                          10: ht0ZHZI605xUDKgSuTW22dQeuGI.roa (hash: 4Wq4/BC9bk0nDo/1dAW7K8pSTWikWYSsafNCxLUrqSo=)
                          11: x0ebLIn0t6JXubFvQS7oR3d-wBo.roa (hash: ZkNINB/VjvBW0O1ekeXPpLo6DfUsQAyBCtiUYgei5OI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 19 Sep 2026 08:15:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:b5:50:82:00:d4:e4:dd:38:f7:10:6e:3d:f5:e3:30:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7554ac4c7f451c5bb9382fbcd46d70c4c0f9de56
        Validity
            Not Before: Sep 18 16:19:07 2026 GMT
            Not After : Sep 19 16:19:07 2026 GMT
        Subject: CN=7fbba33009880908a0e6f84bb7d2039b4be782b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:85:79:37:b2:ff:bb:40:7f:68:1b:1e:8c:
                    16:da:80:91:ac:d7:53:8f:b8:69:33:e9:76:4e:a8:
                    d1:59:de:db:ba:66:12:78:d8:f8:35:17:ff:7b:c2:
                    eb:18:31:2b:8c:a2:5a:80:28:c7:7b:49:55:57:b7:
                    de:49:c7:e9:85:24:d4:5e:ff:37:99:05:c6:51:69:
                    e8:7c:68:49:4b:1e:c6:71:72:9a:14:6e:90:ac:b2:
                    15:0a:79:77:da:de:f1:84:52:15:7d:fb:32:6d:39:
                    5d:dd:ad:e5:4e:da:cb:d4:07:59:aa:66:3d:4c:20:
                    21:92:c2:7f:78:2d:11:9a:a3:d8:ae:0b:42:f1:a4:
                    5e:4b:22:4c:f4:3b:ce:85:00:e9:46:e5:0c:e6:e9:
                    08:fb:01:85:18:07:00:1a:83:e6:28:02:da:34:02:
                    59:80:e6:18:4f:36:5c:6d:f4:1c:96:87:2d:b3:09:
                    3b:7d:61:86:a7:00:77:08:93:68:b2:ce:b7:46:28:
                    8c:22:e0:e8:7d:76:ee:90:01:e4:8e:c3:5a:92:63:
                    a6:e4:2c:a8:c5:21:56:aa:b6:57:16:74:4c:db:d6:
                    c9:4d:1a:b5:b4:60:33:c5:06:0d:35:6e:46:79:26:
                    b9:aa:22:25:c7:64:9c:60:f4:ac:90:3b:17:7f:8c:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:BB:A3:30:09:88:09:08:A0:E6:F8:4B:B7:D2:03:9B:4B:E7:82:B6
            X509v3 Authority Key Identifier:
                keyid:75:54:AC:4C:7F:45:1C:5B:B9:38:2F:BC:D4:6D:70:C4:C0:F9:DE:56

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVSsTH9FHFu5OC-81G1wxMD53lY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/87a00a-b6f6-4721-a828-d9337db39d1f/1/dVSsTH9FHFu5OC-81G1wxMD53lY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:1f:52:58:d0:b9:03:32:90:ab:8e:96:4b:51:f7:05:58:38:
         1a:e2:57:aa:3e:44:44:37:f7:04:b4:05:5e:44:00:d3:60:91:
         d1:ba:37:cb:9a:7b:54:7d:61:5a:70:db:db:0d:d0:05:bb:af:
         ec:32:06:1f:e9:36:36:f4:d6:f9:e1:d5:c1:53:9c:cc:a5:26:
         3c:d6:c5:0d:be:cc:0f:4c:24:9c:b3:2d:96:93:24:ea:6b:b4:
         d9:3a:1e:7b:eb:bf:0f:33:49:82:b4:0a:67:79:18:dc:b9:78:
         f2:2b:3e:3b:92:a6:41:3c:a5:49:b0:0d:48:58:99:81:1e:aa:
         b0:b9:c3:09:91:4f:6d:d1:31:c5:8f:a9:1a:65:7d:ad:6d:78:
         18:bc:04:46:f1:46:ad:d1:7c:fd:b4:16:ec:24:d6:28:53:9c:
         4e:80:b8:ff:dc:47:e9:a3:c8:63:0f:b9:22:71:34:4f:fc:35:
         17:1f:24:72:53:f1:45:57:0c:ba:4e:04:6b:2e:2c:83:26:96:
         2e:17:20:d6:7c:3e:bb:64:b9:7d:25:1b:c6:2b:62:55:f3:a1:
         3f:d2:b2:07:0f:8a:f2:fb:55:f2:b2:c4:67:84:a2:53:82:75:
         22:d5:ca:60:d8:0e:fb:78:f0:7b:50:2f:fd:5b:6c:a9:06:2c:
         76:b4:13:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 19:10:53 2026 by rpki-client