Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
File:                     vG0u13lNMhfPqv4crVP3Vbgs46k.mft (raw, json)
Hash identifier:          j59B48DxkVLTJ9PhX6AVvfZMwGvzIUzImwp0fP0Poks=
Subject key identifier:   AF:79:53:2A:84:0F:41:5A:7F:F0:7A:B2:A9:FA:6E:49:28:AF:58:A4
Authority key identifier: BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9
Certificate issuer:       /CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
Certificate serial:       01A06DCBA6040C2D56FBF24861B27A0FB978
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
Manifest number:          1A37
Signing time:             Fri 04 Sep 2026 19:00:57 +0000
Manifest this update:     Fri 04 Sep 2026 19:00:57 +0000
Manifest next update:     Sat 05 Sep 2026 19:00:57 +0000
Files and hashes:         1: DnP6GcDKWF77PKsQ6HasKB8i_K0.roa (hash: 5rS9bW+Cd7FZhz3igcUd9hkUorfrY7/8Znu4PQmJGxs=)
                          2: vG0u13lNMhfPqv4crVP3Vbgs46k.crl (hash: ebAdzBhC6KYTdO8b5Kas5UhTYldkysQEjZBloZGAt5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 19:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:cb:a6:04:0c:2d:56:fb:f2:48:61:b2:7a:0f:b9:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6d2ed7794d3217cfaafe1cad53f755b82ce3a9
        Validity
            Not Before: Sep  4 19:00:57 2026 GMT
            Not After : Sep  5 19:00:57 2026 GMT
        Subject: CN=af79532a840f415a7ff07ab2a9fa6e4928af58a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:47:54:46:bd:9b:69:1b:b4:e2:0e:7b:a7:34:
                    88:fa:ab:86:08:1d:ec:55:2c:b5:37:dd:d5:64:fb:
                    5c:25:aa:e2:d5:83:0b:45:fc:6d:b7:ac:7c:f5:c3:
                    32:a4:05:cc:a2:c7:ef:87:8c:a0:1d:cb:fe:37:0f:
                    2a:73:5b:49:2d:e7:b8:2b:a8:24:c8:94:94:34:19:
                    3d:90:8a:96:88:75:66:d5:90:7f:ce:e4:41:e2:e1:
                    02:8d:aa:9f:fc:e1:ca:79:3c:98:cf:6f:ee:9a:00:
                    09:48:65:94:42:56:d6:96:98:39:81:b9:c4:6b:3f:
                    35:cb:ec:fc:80:13:7d:33:a4:a2:a3:34:cd:33:fa:
                    d9:e2:f8:5d:52:e4:7c:f2:8c:16:4f:18:30:22:f8:
                    1f:81:14:a4:72:67:76:ca:f3:40:7f:d0:02:b7:52:
                    66:83:77:aa:9e:1a:fc:a4:98:a4:59:23:4a:0d:16:
                    1a:52:c4:af:06:98:85:e8:69:c0:3b:b7:40:74:d7:
                    60:3a:a3:d1:c9:18:da:b9:c8:82:2c:9d:c0:81:51:
                    91:13:fc:3d:e8:50:d5:d9:4c:22:f0:f1:06:9f:98:
                    e8:03:96:e0:50:1a:d4:97:ca:67:08:46:c3:9e:10:
                    dc:67:4d:a9:67:66:3c:6b:98:bc:f3:58:2a:a1:38:
                    02:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:79:53:2A:84:0F:41:5A:7F:F0:7A:B2:A9:FA:6E:49:28:AF:58:A4
            X509v3 Authority Key Identifier:
                keyid:BC:6D:2E:D7:79:4D:32:17:CF:AA:FE:1C:AD:53:F7:55:B8:2C:E3:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vG0u13lNMhfPqv4crVP3Vbgs46k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/7d2944-1ed6-4fcd-8c5c-77b4bbe35a9e/1/vG0u13lNMhfPqv4crVP3Vbgs46k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:f3:60:19:70:5e:6c:6e:6a:b2:84:c2:b9:26:c5:f6:79:8c:
         27:0b:cb:42:97:c8:cc:44:d2:8d:61:91:d8:78:b6:5a:ac:b8:
         96:87:24:9c:80:a0:44:dd:c5:4a:02:5e:49:70:e9:b1:2c:ce:
         5c:14:36:dc:01:62:40:df:5b:e1:4e:8e:a7:f0:39:ed:30:38:
         a1:fe:38:a0:1e:e1:90:05:dd:a3:45:db:21:93:5d:29:88:2b:
         55:ed:e2:d7:73:fc:88:2e:bf:ea:ed:fd:a3:cc:fb:82:25:3c:
         16:0a:6c:a1:78:47:0b:da:e6:48:66:62:f4:c1:61:04:a7:bb:
         83:b2:97:76:7b:e0:ac:bc:0a:48:19:f3:49:40:d2:fc:a3:52:
         25:89:68:d9:c5:45:da:29:f3:6b:6f:2f:3a:9d:23:4f:11:a8:
         2a:e4:4f:6c:ea:21:f2:94:39:03:08:73:08:ac:55:e0:4d:b1:
         3e:0d:97:2a:19:e3:0c:83:ea:32:e7:be:23:e9:3c:c1:5d:5b:
         38:45:1f:f8:ff:02:76:1a:b4:c2:fd:ba:12:ca:53:6e:22:ae:
         cc:5d:9a:8c:76:54:08:d1:10:af:42:f0:aa:69:35:03:8f:37:
         1b:00:65:d3:8e:60:63:24:bb:5b:24:cd:fd:da:c1:a3:e2:64:
         62:90:cf:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:21:36 2026 by rpki-client