Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
File:                     VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft (raw, json)
Hash identifier:          HLwdsz5GNdtj19HczdjF8jMpgpALUBXWHacQB/JGRNk=
Subject key identifier:   E4:35:9F:5F:1F:79:98:83:DF:2E:50:DF:60:12:CB:48:65:A5:FD:BF
Authority key identifier: 56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6
Certificate issuer:       /CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
Certificate serial:       01A17FD01EA9E5B4E50A1E4AD395AAD5CCD7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
Manifest number:          0140
Signing time:             Wed 28 Oct 2026 00:01:48 +0000
Manifest this update:     Wed 28 Oct 2026 00:01:48 +0000
Manifest next update:     Thu 29 Oct 2026 00:01:48 +0000
Files and hashes:         1: 0nv-S98ulLoBxUbeunIyyHswlb4.roa (hash: wXc4tA/MdxZd0ahPnwNsbJs8ojwvndGATxFJmx4jZGI=)
                          2: 4F4qBS1aUOeI4r2IYjZ440HEYYc.roa (hash: 8Hh9bMFx7Obxr6Uz1wbDd5w4WNADW1KEkIRWrr5hPME=)
                          3: 6S9TC5KFrvNh_FP--N7LB0uDWDk.roa (hash: /ZidtI9Los7lnP2xwos5GWLgFkE8A5plIAVg9Rs5yOE=)
                          4: AesIsA5zD6TDjr3LqtdVTNdYf3I.roa (hash: vyS4qfd1NHAIdM7TEHjC217Lv2lF89k5Wv6PxPzeJUs=)
                          5: OdBmG6fU-UEhnEKntxCaonyyB4w.roa (hash: zZOVEl4vhmKrOMSZUOhczKKn2MWTdVMJKBavMTbZMl0=)
                          6: VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl (hash: 5C3tp4TFhB/JO0wl+XONp6YcrXH1RIPUbPNNsbLY7MM=)
                          7: mFDb7QhlFMpJcx21UYZqsSeYD7w.roa (hash: tW4kQqWznqKEJSkh3cW125W6koEqfnSDc+Z1EK7o2js=)
                          8: sHz6n2GQw_YbFRkDZr8AJAIJKCk.roa (hash: 2uUaKaqnXjYRfBDPcREAVlMI7n+cIkRs0thYn8PfX5g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 22:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7f:d0:1e:a9:e5:b4:e5:0a:1e:4a:d3:95:aa:d5:cc:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c0ff08907a984b8e7763e7aa8a9fc8af51eda6
        Validity
            Not Before: Oct 28 00:01:48 2026 GMT
            Not After : Oct 29 00:01:48 2026 GMT
        Subject: CN=e4359f5f1f799883df2e50df6012cb4865a5fdbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:c5:27:1f:8f:e6:03:0e:e5:a1:14:b2:38:84:
                    98:95:0b:3f:2a:61:d9:bf:bf:81:41:23:27:9e:b3:
                    62:05:42:1e:6a:14:38:24:a7:6e:ce:bf:30:7e:15:
                    af:8a:ad:4d:cb:7a:93:a5:a2:7d:2e:77:14:40:b3:
                    3f:34:0e:04:73:47:6f:2e:46:04:3a:61:3f:c3:35:
                    56:eb:94:f0:9c:99:64:78:41:2a:7e:69:13:4b:da:
                    55:8e:ab:e6:55:48:9a:02:93:20:f8:e2:18:33:27:
                    f3:33:f0:e9:01:cd:d4:22:1a:1f:cc:84:fb:b2:5e:
                    0f:fd:68:1a:83:57:fc:3b:fe:69:86:f2:65:35:df:
                    2c:a5:a1:87:3c:b7:29:f8:05:89:14:60:a2:19:74:
                    bc:ec:4a:17:34:5b:6d:5d:16:47:5c:dc:00:6b:c1:
                    9f:ea:8e:d2:c3:f1:d4:d5:47:23:ed:d9:a0:4b:fd:
                    e2:03:c8:9e:16:de:df:8a:0b:4d:7f:eb:07:08:7d:
                    20:a2:28:12:da:df:6c:a5:8c:56:8d:fc:a3:51:e3:
                    1c:79:e2:47:7c:ce:bd:19:23:d5:a9:ef:f2:ce:47:
                    25:09:9a:3a:e7:7e:7b:3e:26:ca:28:f6:a6:1d:53:
                    ee:be:db:6e:1e:6c:1b:21:e7:c4:ab:ea:c7:13:7b:
                    ef:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:35:9F:5F:1F:79:98:83:DF:2E:50:DF:60:12:CB:48:65:A5:FD:BF
            X509v3 Authority Key Identifier:
                keyid:56:C0:FF:08:90:7A:98:4B:8E:77:63:E7:AA:8A:9F:C8:AF:51:ED:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsD_CJB6mEuOd2PnqoqfyK9R7aY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/b8ea5b-3dd4-4374-a793-c5e6d23f8b09/1/VsD_CJB6mEuOd2PnqoqfyK9R7aY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:72:80:b2:6c:32:62:65:50:c6:96:09:35:c8:88:da:ad:d8:
         0a:b8:f4:ce:df:c5:17:03:39:bc:15:7e:7b:03:6a:11:2f:cf:
         2d:93:c9:b5:52:54:f3:08:78:92:84:20:a5:6d:72:8e:5d:50:
         66:02:63:ac:94:b4:3b:2d:2a:21:ce:5c:5b:dc:36:b1:82:3d:
         6d:c8:0b:f4:c5:f2:f7:f9:06:65:9b:cd:01:26:f3:55:d6:04:
         bc:13:d8:f7:07:a8:cd:9c:40:84:3c:0b:48:bd:9e:dd:4f:78:
         4e:15:9a:9f:8e:fa:c8:75:0e:b5:fa:f3:df:b5:65:a9:63:08:
         de:e7:a4:bc:21:4d:d8:b5:61:40:ac:6c:30:e8:ac:d5:9e:d3:
         27:7e:a1:d1:95:f9:58:32:c5:0f:35:20:59:1f:03:b4:41:6d:
         5e:ca:f9:06:75:a0:55:13:96:26:f7:38:7e:89:c1:5d:3d:bc:
         ef:45:38:32:07:f4:6e:c4:bf:5d:f4:eb:68:7d:f1:9f:e9:74:
         53:89:d3:0a:c6:14:30:8d:0b:2b:0c:c9:76:9c:72:4e:16:45:
         a2:1b:69:35:3e:1f:90:e7:0b:18:49:09:e0:86:6d:a8:a7:1b:
         55:6b:9d:4a:a6:e5:42:bd:8e:d1:5c:24:20:d4:ed:16:d2:59:
         9c:87:45:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 06:17:11 2026 by rpki-client