Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
File:                     VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft (raw, json)
Hash identifier:          D89KPbVoVCFXM4YFTFXZntFtv2GpxMcuTZb/3L3eSEY=
Subject key identifier:   49:70:F4:52:30:67:02:D5:4E:0E:08:2B:7C:8D:D5:E8:C5:CA:7F:95
Authority key identifier: 54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28
Certificate issuer:       /CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
Certificate serial:       01A0035E851278A7257D1C5E26150DFA8BF6
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
Manifest number:          1A03
Signing time:             Sat 15 Aug 2026 03:02:01 +0000
Manifest this update:     Sat 15 Aug 2026 03:02:01 +0000
Manifest next update:     Sun 16 Aug 2026 03:02:01 +0000
Files and hashes:         1: 9gK4FgXH9pzUHb_OgQw9DCHAKyU.roa (hash: 0t8+O9jLtAo/1H+w73CAi6kuuXrnIZhfR+LlCnD8Ix8=)
                          2: VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl (hash: D/Eu8tqkSn8bQCx7UOzOx1eunjlXB5NQY02HEOhK7MY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:85:12:78:a7:25:7d:1c:5e:26:15:0d:fa:8b:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f7ea90d2a2b4202e578b25ba139b3c8e62928
        Validity
            Not Before: Aug 15 03:02:01 2026 GMT
            Not After : Aug 16 03:02:01 2026 GMT
        Subject: CN=4970f452306702d54e0e082b7c8dd5e8c5ca7f95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f2:f9:73:50:38:c8:ad:cd:6b:c9:fe:79:c2:
                    18:cd:56:24:e1:54:d8:f3:63:29:ab:fd:9a:39:b2:
                    b7:75:10:7d:e3:51:fc:15:6b:ec:f8:23:36:f4:67:
                    bc:66:ec:8e:fe:bf:d9:be:ce:29:e5:04:c1:5d:1e:
                    d7:ae:b7:7c:a6:0b:74:7b:4a:46:8a:ea:76:81:66:
                    39:cd:3c:9d:88:fc:4c:b8:ee:9a:65:ef:e3:34:f9:
                    19:48:2b:70:46:8e:67:52:74:56:ca:41:de:ce:a1:
                    d1:51:0a:e0:19:92:ed:1d:75:57:66:24:51:d8:e8:
                    cc:90:fa:4f:86:19:ac:20:e4:ce:7c:cd:55:5f:7c:
                    ba:94:fd:f7:90:ec:09:4d:5d:7c:61:1d:80:c4:90:
                    8f:10:b1:c2:e2:9d:e7:8f:ca:f4:54:c3:0d:0a:8c:
                    6c:f1:36:a0:f0:a3:70:3e:c9:96:17:c3:45:64:63:
                    ca:2f:f5:51:0d:d3:ae:db:e5:fb:6f:52:cc:b4:1a:
                    68:15:05:36:cf:95:88:9c:fa:cf:cc:f7:1f:52:37:
                    c2:b1:3c:79:34:46:c0:d3:ed:e5:bb:85:6b:1a:a3:
                    fe:1e:d3:dc:7e:df:8a:0b:07:38:dd:ab:35:09:5c:
                    f6:89:6a:83:77:a1:47:be:59:e9:0e:8e:9c:f1:01:
                    f9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:70:F4:52:30:67:02:D5:4E:0E:08:2B:7C:8D:D5:E8:C5:CA:7F:95
            X509v3 Authority Key Identifier:
                keyid:54:2F:7E:A9:0D:2A:2B:42:02:E5:78:B2:5B:A1:39:B3:C8:E6:29:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c5e51e-fb41-42e3-be69-ee1e1ded2f9f/1/VC9-qQ0qK0IC5XiyW6E5s8jmKSg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:d4:db:f8:3a:bd:08:f4:76:cc:82:13:7a:f1:a0:20:c1:b4:
         96:68:4a:d6:90:bf:45:9e:bc:02:12:bb:4a:f3:6d:59:13:99:
         80:27:cf:a3:c6:dd:a4:b2:92:d1:c7:4e:7e:66:ea:b9:89:c1:
         8b:fd:96:fb:c5:bf:d5:af:87:4f:f7:e8:f2:a8:af:e3:09:8f:
         b5:cb:8d:f5:c7:d4:df:96:aa:f6:be:d8:ff:81:74:af:4d:e9:
         b7:a0:6c:fc:65:bd:c6:2a:00:d9:38:78:36:f0:7e:44:52:a6:
         55:60:37:14:c1:2d:82:d3:45:c5:43:71:9e:e1:9b:d7:48:50:
         4f:c4:ed:da:c4:54:e3:f3:f7:67:b0:64:6e:d2:0c:7a:26:a9:
         90:3f:f5:64:f0:03:fb:25:1d:33:62:39:68:3b:9e:35:3c:0b:
         1c:b3:8d:1f:b6:c1:4b:42:2c:af:76:d8:62:a2:2e:ba:e3:76:
         71:c2:68:fd:1b:67:ac:4e:36:24:69:73:35:d3:5a:cf:f4:4a:
         e2:ab:69:46:05:f8:e9:fd:50:6c:ca:5e:4b:c0:87:52:ad:7c:
         ef:f3:5a:fa:38:aa:99:b1:b3:a6:c7:84:18:6a:b0:dc:9e:15:
         99:32:53:89:6a:78:5e:fe:87:1a:b1:ff:df:62:15:be:8a:87:
         c6:51:48:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXoUSeKclfRxeJhUN+ov2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY3ZWE5MGQyYTJiNDIwMmU1NzhiMjViYTEzOWIzYzhl
NjI5MjgwHhcNMjYwODE1MDMwMjAxWhcNMjYwODE2MDMwMjAxWjAzMTEwLwYDVQQD
Eyg0OTcwZjQ1MjMwNjcwMmQ1NGUwZTA4MmI3YzhkZDVlOGM1Y2E3Zjk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivL5c1A4yK3Na8n+ecIYzVYk4VTY
82Mpq/2aObK3dRB941H8FWvs+CM29Ge8ZuyO/r/Zvs4p5QTBXR7Xrrd8pgt0e0pG
iup2gWY5zTydiPxMuO6aZe/jNPkZSCtwRo5nUnRWykHezqHRUQrgGZLtHXVXZiRR
2OjMkPpPhhmsIOTOfM1VX3y6lP33kOwJTV18YR2AxJCPELHC4p3nj8r0VMMNCoxs
8Tag8KNwPsmWF8NFZGPKL/VRDdOu2+X7b1LMtBpoFQU2z5WInPrPzPcfUjfCsTx5
NEbA0+3lu4VrGqP+HtPcft+KCwc43as1CVz2iWqDd6FHvlnpDo6c8QH5IQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFElw9FIwZwLVTg4IK3yN1ejFyn+VMB8GA1UdIwQY
MBaAFFQvfqkNKitCAuV4sluhObPI5ikoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjkt
ZWUxZTFkZWQyZjlmLzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9jNWU1MWUtZmI0MS00MmUzLWJlNjktZWUxZTFkZWQyZjlm
LzEvVkM5LXFRMHFLMElDNVhpeVc2RTVzOGptS1NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAitTb+Dq9
CPR2zIITevGgIMG0lmhK1pC/RZ68AhK7SvNtWROZgCfPo8bdpLKS0cdOfmbquYnB
i/2W+8W/1a+HT/fo8qiv4wmPtcuN9cfU35aq9r7Y/4F0r03pt6Bs/GW9xioA2Th4
NvB+RFKmVWA3FMEtgtNFxUNxnuGb10hQT8Tt2sRU4/P3Z7BkbtIMeiapkD/1ZPAD
+yUdM2I5aDueNTwLHLONH7bBS0Isr3bYYqIuuuN2ccJo/RtnrE42JGlzNdNaz/RK
4qtpRgX46f1QbMpeS8CHUq187/Na+jiqmbGzpseEGGqw3J4VmTJTiWp4Xv6HGrH/
32IVvoqHxlFINQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:21 2026 by rpki-client