Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
File:                     Vr1_at_sbUTRbT4_eY4_K9INo_8.mft (raw, json)
Hash identifier:          KMQG5pi/33VgIZ2nricDGU/KkhbV7mb77P/wQru4j14=
Subject key identifier:   7B:1B:DC:FB:24:D6:68:26:25:61:1D:F2:94:50:AA:4A:C5:0D:AD:12
Authority key identifier: 56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF
Certificate issuer:       /CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
Certificate serial:       01A133D9C56EA11661A8863F651F7A7302E1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
Manifest number:          1A9F
Signing time:             Tue 13 Oct 2026 06:01:12 +0000
Manifest this update:     Tue 13 Oct 2026 06:01:12 +0000
Manifest next update:     Wed 14 Oct 2026 06:01:12 +0000
Files and hashes:         1: TvG3Q6EJi73UFGx8HGDQbEV3WNc.roa (hash: Qu2IYNlx3K5ylZfshukrlEjDYd3s5hf2xdzeBfabSNs=)
                          2: V7ODURGwxz4tURBL4H9BoCPbplc.roa (hash: lDSKkdtVb6mF6CecrHvF/q0QF6YgykJ09spaIwO99EU=)
                          3: Vr1_at_sbUTRbT4_eY4_K9INo_8.crl (hash: 1KslkS/IRDD/X9UA/1SrBMhNhGHWGgZ6KuhJIFXWzOE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 14 Oct 2026 06:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:33:d9:c5:6e:a1:16:61:a8:86:3f:65:1f:7a:73:02:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56bd7f6adfec6d44d16d3e3f798e3f2bd20da3ff
        Validity
            Not Before: Oct 13 06:01:12 2026 GMT
            Not After : Oct 14 06:01:12 2026 GMT
        Subject: CN=7b1bdcfb24d6682625611df29450aa4ac50dad12
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f2:d4:44:c0:20:ee:0f:fd:60:3f:e2:62:f3:
                    54:bb:fb:71:da:f0:d4:82:f2:78:a5:fd:3b:a2:1c:
                    05:45:6d:dc:8d:77:3e:14:d7:6b:76:03:d4:ca:ae:
                    95:f0:70:64:cb:db:12:0b:31:f4:a9:09:e7:1d:d9:
                    a4:9e:d9:d1:a6:4d:bb:59:41:80:b8:04:22:7a:bd:
                    12:19:f1:bb:db:27:e2:cf:80:b1:34:c8:ad:e5:39:
                    c5:89:9f:52:c8:0a:af:c5:5f:b4:88:48:da:89:db:
                    2b:0e:48:67:34:01:4e:46:e6:bd:17:a4:fe:72:78:
                    22:a7:10:c4:01:38:16:a5:90:08:89:b6:70:e4:69:
                    31:34:ba:18:b7:f3:14:46:2f:58:8e:07:85:a3:37:
                    a1:0a:7c:4c:22:d5:55:04:32:77:de:77:28:26:58:
                    64:e4:9c:33:d7:44:34:3f:e2:38:f1:5f:d0:9a:78:
                    39:2a:99:b5:41:3e:9d:2f:64:35:7c:69:c6:69:27:
                    b1:b7:5c:3d:17:62:2c:7c:05:d5:4e:df:5c:89:54:
                    3c:21:ed:89:2e:4b:c4:e7:24:84:de:83:f9:5e:84:
                    e5:86:16:47:79:d1:36:b0:50:22:a6:27:d0:44:d3:
                    6d:5f:a4:c4:e2:67:39:66:34:b8:21:86:2f:5c:3b:
                    88:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1B:DC:FB:24:D6:68:26:25:61:1D:F2:94:50:AA:4A:C5:0D:AD:12
            X509v3 Authority Key Identifier:
                keyid:56:BD:7F:6A:DF:EC:6D:44:D1:6D:3E:3F:79:8E:3F:2B:D2:0D:A3:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vr1_at_sbUTRbT4_eY4_K9INo_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/30/754af9-78df-4bd1-b480-527c81958649/1/Vr1_at_sbUTRbT4_eY4_K9INo_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:76:b6:e8:3b:a5:da:26:93:c4:c5:4c:cc:4c:5c:4e:01:3e:
         d0:bf:fd:25:7b:4f:73:94:d9:2c:0f:fa:e4:ae:64:7f:83:2c:
         2b:d2:b4:f8:ea:d0:e4:9f:3d:ff:32:57:99:2a:ed:ba:e6:dc:
         c1:21:9a:eb:5b:75:d7:36:75:f2:a2:bd:d8:72:d1:6a:7b:57:
         05:01:e8:b4:2e:ff:3d:48:30:48:a9:63:6d:cf:d2:64:ed:7d:
         ab:65:cb:9a:cc:a5:3c:a9:83:f7:5a:15:c5:bb:c2:4a:ab:bc:
         79:70:7a:02:2f:91:30:bb:15:37:6a:f6:be:8a:88:44:af:f5:
         62:a8:19:7a:37:66:cd:44:38:33:f2:43:96:61:bd:09:fb:1e:
         e5:41:ff:8d:86:d7:76:c1:87:07:b1:27:3e:ab:98:14:25:49:
         01:87:61:0a:21:f3:8f:34:b1:49:11:d5:a0:1f:0c:6c:f0:b1:
         55:29:89:b9:4f:5c:bb:da:57:05:a6:4d:9d:ae:6e:80:1e:11:
         9f:bd:ee:09:e2:a6:34:12:dc:fa:a8:51:88:be:b2:9c:8d:b4:
         63:b2:4f:3a:7e:ed:d5:5b:f7:db:f3:38:14:da:c6:79:29:45:
         6c:9a:f5:9a:2f:f9:60:56:3d:d8:9f:e7:56:9c:89:07:89:27:
         ed:5d:a9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 16:30:27 2026 by rpki-client