Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File:                     Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier:          iztkUV3yZujp7yh9tD1sgvgvgE9/FB1hbFT3+cxIPBo=
Subject key identifier:   D3:45:2C:80:B5:A0:DF:4C:D9:F2:E8:17:94:E4:84:F0:31:E2:E5:D6
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer:       /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial:       01A12FFCFE31D654936DD59E43D6388555EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number:          1A9D
Signing time:             Mon 12 Oct 2026 12:01:11 +0000
Manifest this update:     Mon 12 Oct 2026 12:01:11 +0000
Manifest next update:     Tue 13 Oct 2026 12:01:11 +0000
Files and hashes:         1: TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa (hash: Qu2IYNlx3K5ylZfshukrlEjDYd3s5hf2xdzeBfabSNs=)
                          2: V7ODURGwxz4tURBL4H9BoCPbplc.roa (hash: lDSKkdtVb6mF6CecrHvF/q0QF6YgykJ09spaIwO99EU=)
                          3: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: yz4nGs3MHKP+YJXIA7pu65AhbqAvGA0n6/yVLJPbI44=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 13 Oct 2026 12:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:2f:fc:fe:31:d6:54:93:6d:d5:9e:43:d6:38:85:55:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
        Validity
            Not Before: Oct 12 12:01:11 2026 GMT
            Not After : Oct 13 12:01:11 2026 GMT
        Subject: CN=d3452c80b5a0df4cd9f2e81794e484f031e2e5d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:38:59:64:0c:37:b0:3f:36:56:b4:73:21:
                    d3:8b:76:27:d1:5c:33:06:cb:cc:85:fc:0d:3a:a5:
                    42:6a:af:dd:01:17:cc:5d:3f:75:f9:e6:4e:b0:f8:
                    31:8e:0c:b4:60:9f:4f:6e:f3:42:e7:d2:89:9c:e4:
                    97:74:2e:d2:78:78:fb:9b:30:f5:22:b6:81:a4:e5:
                    3c:83:be:ee:6e:76:1a:89:bd:2b:62:47:71:fb:ce:
                    cf:cd:d0:ad:77:8c:7c:7d:cd:23:6f:cd:c2:13:26:
                    2f:7b:28:dc:1c:c3:8a:bc:6f:3b:47:02:72:ea:66:
                    8a:ea:f6:46:55:84:ad:2f:c1:a3:5a:3f:f8:fc:df:
                    0a:bd:bf:f5:81:2d:04:74:0f:87:92:98:e6:78:60:
                    4e:13:d3:99:c4:71:99:32:4a:ca:b1:bb:ef:e8:14:
                    0e:a4:c7:c7:c4:96:5c:b1:61:d9:5a:ce:18:44:1f:
                    a0:f3:dd:ec:89:99:92:aa:5a:85:e1:98:47:5a:46:
                    c4:0b:a7:b9:00:8f:95:bf:aa:cf:aa:de:27:85:78:
                    b3:cd:4b:18:3c:12:72:44:a0:23:bb:41:d7:ff:2a:
                    ee:bc:ea:02:bb:1e:8c:e9:62:ee:17:ee:d0:9a:2d:
                    ad:2c:51:d2:1b:b5:41:98:92:de:c0:ef:fc:5e:99:
                    83:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:45:2C:80:B5:A0:DF:4C:D9:F2:E8:17:94:E4:84:F0:31:E2:E5:D6
            X509v3 Authority Key Identifier:
                keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:5f:66:5e:b2:b7:76:2a:a0:18:f2:7b:34:59:84:d8:67:a8:
         3a:ce:46:41:f5:2c:a9:ce:c5:0b:8c:1b:ae:9d:8f:60:77:9d:
         17:f3:66:bb:9f:6e:c1:1f:16:17:4d:06:93:1b:45:1a:8d:bd:
         73:02:57:8b:6f:ca:71:55:21:c6:51:e2:ca:7f:02:a0:0c:13:
         4d:85:55:78:eb:52:38:46:59:a9:a2:60:9c:46:bc:fe:5d:4b:
         af:56:b8:64:ea:61:11:94:3d:f8:dc:01:f4:67:4a:ba:07:ce:
         cb:77:86:1a:65:8e:e1:ed:95:ec:4d:6d:30:c2:93:5f:5a:f9:
         d7:1c:69:c4:6d:17:ff:a6:f2:97:ab:6e:89:3b:10:ad:46:6b:
         db:af:71:04:b9:09:b6:db:84:07:32:f0:c8:d0:43:90:e0:a9:
         39:99:83:0a:60:81:9e:c5:d0:f4:4e:4b:13:65:77:8b:22:6b:
         39:d1:4c:27:4d:5d:26:84:94:bd:a8:54:6f:81:17:2d:2c:cf:
         3e:c5:82:99:73:17:29:b8:6d:f3:29:3d:dd:c6:2c:c1:39:65:
         7e:fa:98:2a:a3:52:12:bf:be:06:05:05:22:9d:ea:d0:78:e5:
         b8:a5:84:d4:3c:b2:3e:f7:70:53:fd:f1:cd:76:25:94:d6:6c:
         cb:22:95:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:48:06 2026 by rpki-client