Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
File:                     vj908rbk4o6f9so8yjpdeMosrWo.mft (raw, json)
Hash identifier:          phLB3MOSDgVesZgbu3iZbWeMgrLQaji7dpn1HHVAIwY=
Subject key identifier:   18:BD:87:0E:1A:24:6B:A9:D7:86:0C:26:C8:19:4E:C8:E1:74:C0:7E
Authority key identifier: BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A
Certificate issuer:       /CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
Certificate serial:       01A020C2FB3F838F9E38846ADB2D685C34FF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
Manifest number:          0D7E
Signing time:             Thu 20 Aug 2026 20:00:44 +0000
Manifest this update:     Thu 20 Aug 2026 20:00:44 +0000
Manifest next update:     Fri 21 Aug 2026 20:00:44 +0000
Files and hashes:         1: MvJCT3rODSbi8r5Yig7Zau3fVYg.roa (hash: v5cvUo1XgH2QKdF5b1BDHLNAaTTQsofJqdwu6TbQduU=)
                          2: _I0ELtqqH9_1AnQxXz6nDa_MLb0.roa (hash: 1LUJQ/J1lHS6C7fhnj/l9wTpaJ2jMriIIAsUqH5einU=)
                          3: vj908rbk4o6f9so8yjpdeMosrWo.crl (hash: Hs9M19LgxTKoNAN9VOChFCh4Fdhnv6VRdA57hCWIVBE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Aug 2026 13:32:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:20:c2:fb:3f:83:8f:9e:38:84:6a:db:2d:68:5c:34:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3f74f2b6e4e28e9ff6ca3cca3a5d78ca2cad6a
        Validity
            Not Before: Aug 20 20:00:44 2026 GMT
            Not After : Aug 21 20:00:44 2026 GMT
        Subject: CN=18bd870e1a246ba9d7860c26c8194ec8e174c07e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:17:81:fb:6f:7c:6c:10:aa:31:42:c1:9c:9d:
                    dd:39:1a:c1:8f:9c:e5:06:57:8f:5a:7a:02:c0:25:
                    a7:db:bc:5e:6c:d0:68:93:85:54:78:96:70:11:bf:
                    f9:3d:59:f0:ed:11:b6:e9:2b:3d:d9:18:51:b5:ef:
                    b6:84:94:4a:a7:6e:6a:5a:d3:2d:42:84:75:d7:fb:
                    73:91:32:43:16:30:2d:d7:74:fd:16:ef:fe:d0:9c:
                    94:b4:5c:ba:50:3b:1f:69:db:3b:66:0a:01:d5:b1:
                    b5:b4:0b:a1:3f:22:73:1b:22:b9:2b:17:3d:6b:6e:
                    9b:a0:81:c3:e2:52:0e:d6:83:1b:41:c2:f3:ca:df:
                    65:0c:39:e2:16:6e:3e:d9:e7:fe:32:92:ad:59:09:
                    77:b2:3d:e8:b2:05:79:5f:23:66:0c:38:62:a5:90:
                    ee:fc:32:f3:27:0b:9b:1f:93:a6:c8:11:c1:fb:6c:
                    f9:9b:cf:19:36:51:5b:64:ed:a1:16:6e:54:30:d0:
                    31:4e:c9:96:79:3b:5f:a0:46:1d:82:60:33:26:83:
                    b3:fc:df:d7:da:aa:2e:22:d2:40:c5:03:16:2a:71:
                    4c:4d:5f:66:a5:72:c8:74:71:ba:5a:e9:a4:0c:a6:
                    d9:26:14:8e:ee:08:df:33:9b:e1:88:38:6b:9a:fd:
                    f9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:BD:87:0E:1A:24:6B:A9:D7:86:0C:26:C8:19:4E:C8:E1:74:C0:7E
            X509v3 Authority Key Identifier:
                keyid:BE:3F:74:F2:B6:E4:E2:8E:9F:F6:CA:3C:CA:3A:5D:78:CA:2C:AD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vj908rbk4o6f9so8yjpdeMosrWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/005a47-b13c-42d7-8332-d099617beb56/1/vj908rbk4o6f9so8yjpdeMosrWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7d:18:64:e5:90:ef:1d:9e:0d:bf:1d:fe:c8:0f:b3:bf:3e:00:
         db:c7:0c:2e:87:e3:79:5f:97:c9:8f:11:93:26:24:9c:ce:b8:
         16:12:2c:cb:bd:0f:c1:22:53:5e:70:24:b8:b8:45:10:6e:4e:
         cc:ef:f5:ad:f4:39:ff:3a:1a:9f:01:72:03:ed:b7:cb:0f:4f:
         53:8a:3a:08:f4:66:4a:50:45:cb:c8:1d:7f:63:a2:00:3f:30:
         39:8c:48:bd:c2:3f:52:f2:30:e9:2e:d4:b0:34:7a:0b:5d:a1:
         8b:7d:93:3e:68:d1:c3:f9:fe:4d:bc:1a:12:2d:9a:fd:b1:9e:
         63:0e:bd:d1:be:f2:f3:24:c7:57:c1:64:62:1d:d6:fd:19:f2:
         66:6d:11:ee:1d:da:9f:99:16:63:63:61:f4:44:c1:e4:34:6f:
         4a:50:45:c1:26:69:c0:36:2b:d7:11:a0:be:c2:e5:57:b8:05:
         ce:95:39:6b:e9:02:34:36:b1:68:82:c2:e8:ff:57:eb:0f:9e:
         3b:f7:04:24:ef:5b:66:a6:b9:23:c6:d2:47:5f:6d:3a:8e:96:
         00:dd:2f:85:45:de:84:f6:1f:f6:0f:7d:38:cf:d6:57:cb:e5:
         c9:1e:ac:98:24:91:de:ba:64:ee:fc:28:79:6c:88:ec:cb:ed:
         cc:b1:1b:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:47 2026 by rpki-client