Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File:                     VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier:          aOpXpqcWIpuWdggXozfuX5WqyKN3AyPbiCcQZuf9PF8=
Subject key identifier:   EA:17:54:13:07:76:54:F0:14:41:CB:2B:EA:61:37:F5:E3:15:D9:AF
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer:       /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial:       01A191309E781BF850A03BCBF27A9CC71D7D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number:          1ACF
Signing time:             Sat 31 Oct 2026 09:00:44 +0000
Manifest this update:     Sat 31 Oct 2026 09:00:44 +0000
Manifest next update:     Sun 01 Nov 2026 09:00:44 +0000
Files and hashes:         1: Q56vED3-1_h936Q-ifWJs53c2GY.roa (hash: OY22bFuEd/zv+11Gst6hYDrj07QiCcY3HPOcMh0b7Ks=)
                          2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: SegNTRXcWQmS7FCY7wPwHaCEpL17tdq3n5xbHT11fDg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 01 Nov 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:91:30:9e:78:1b:f8:50:a0:3b:cb:f2:7a:9c:c7:1d:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
        Validity
            Not Before: Oct 31 09:00:44 2026 GMT
            Not After : Nov  1 09:00:44 2026 GMT
        Subject: CN=ea175413077654f01441cb2bea6137f5e315d9af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:ff:28:e0:ce:c6:0a:2d:74:63:ac:1d:33:
                    2b:9d:94:31:f7:50:0e:e2:3e:ee:85:95:3d:21:18:
                    5f:4b:07:ae:58:86:c2:ef:07:3d:b8:f2:79:37:91:
                    87:29:48:88:46:e0:2e:cb:07:fc:09:44:1d:c2:3e:
                    ae:45:c7:53:c2:bf:fe:08:5a:05:c8:9e:87:0c:69:
                    a8:55:ae:7b:b9:a3:65:b3:a8:18:3d:09:b6:50:5c:
                    ba:83:0b:32:eb:f5:18:a2:47:c9:55:d6:d6:5c:e6:
                    b7:b1:4d:c0:92:9b:6f:58:2f:f1:f5:6d:c7:52:f2:
                    e7:dc:d0:f8:ef:36:80:76:87:11:b6:4c:90:27:c5:
                    f8:14:b1:7f:a5:cd:af:9f:95:b4:5f:1c:31:4c:6e:
                    8d:eb:af:07:2f:b9:cd:46:26:ef:c4:5a:69:9d:91:
                    7f:a2:f4:0a:e8:f0:d8:63:98:89:64:4d:d3:37:9c:
                    97:7d:53:09:1f:9b:00:c6:25:b7:3c:53:33:a3:d5:
                    d1:cb:ad:f1:d2:d0:79:81:88:16:28:4e:c5:18:21:
                    70:0c:5b:df:89:e7:d4:45:25:e3:14:ee:29:f8:4b:
                    e0:78:25:dd:1d:85:5a:70:a7:53:e3:76:79:e7:2b:
                    b5:80:d0:2e:97:d1:60:77:30:94:5c:5f:46:81:81:
                    33:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:17:54:13:07:76:54:F0:14:41:CB:2B:EA:61:37:F5:E3:15:D9:AF
            X509v3 Authority Key Identifier:
                keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:52:01:4a:28:48:75:4f:3e:30:b4:ed:9b:0b:cd:19:42:a2:
         85:3f:79:d8:b3:63:64:89:40:89:ea:13:bb:b5:0e:ff:2e:3d:
         ec:76:0b:b0:b3:c5:77:8f:c2:fc:da:cf:7c:50:0c:3e:6e:23:
         4e:b3:f7:4c:aa:5b:2f:ae:ba:0a:4b:23:da:b6:14:ab:c3:a1:
         07:77:2e:c1:ea:07:e5:36:81:4b:4b:8f:76:22:4b:bc:db:d6:
         14:4c:7c:74:17:ae:f9:04:16:66:80:5c:cf:12:2f:32:cd:22:
         f5:f8:22:16:c1:2b:24:d7:3b:3d:6d:0f:55:00:db:43:b7:5b:
         d0:9b:68:c8:06:f5:f7:bb:d6:0e:0b:cb:e7:ae:e8:39:ea:74:
         f5:b2:3c:8e:1c:bb:d8:7a:03:8d:a2:16:e6:80:88:72:b2:23:
         af:21:d5:f0:54:89:04:2d:91:79:2f:2f:17:d5:92:fd:6c:21:
         dc:f2:01:1c:62:95:2a:6e:7a:40:c3:84:99:58:53:bd:7a:65:
         93:2f:f5:d5:cb:77:2b:12:66:29:b5:9e:92:53:67:1a:7a:1a:
         35:be:a9:51:b4:01:07:40:be:0b:c9:0a:f8:c6:3c:cc:8a:1e:
         e4:ea:75:45:30:39:d8:6f:ec:0d:40:75:9c:5c:d8:fb:4a:30:
         07:a2:df:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 12:43:05 2026 by rpki-client