Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
File:                     Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft (raw, json)
Hash identifier:          YC2yW8uDEh3DmHRjcyP8EMhordcWghS9iGY0rcHiJek=
Subject key identifier:   10:AC:6D:B5:EC:3F:3C:71:AF:77:1E:59:13:6C:6B:01:DE:EE:FD:21
Authority key identifier: 56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB
Certificate issuer:       /CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
Certificate serial:       01A08A551FE288F1FE24B85FDAE860594C9E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
Manifest number:          3A
Signing time:             Thu 10 Sep 2026 08:00:29 +0000
Manifest this update:     Thu 10 Sep 2026 08:00:29 +0000
Manifest next update:     Fri 11 Sep 2026 08:00:29 +0000
Files and hashes:         1: 1ip8fjzOcrfIt7VhM4hKeIFL-gg.roa (hash: x6BAzNpNpkWkay1RbF1WheGdHSR/NN8khVO2J2kHcRM=)
                          2: Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl (hash: hfh9CMC0oyVHuuRpM2ehgyzPrDR7fhpk0wtb1i44f1Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8a:55:1f:e2:88:f1:fe:24:b8:5f:da:e8:60:59:4c:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=563fb0a10fc5909f1090b6feecdaf784b32562eb
        Validity
            Not Before: Sep 10 08:00:29 2026 GMT
            Not After : Sep 11 08:00:29 2026 GMT
        Subject: CN=10ac6db5ec3f3c71af771e59136c6b01deeefd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:0c:88:14:e5:dd:3f:32:bd:72:ef:f8:25:39:
                    5e:45:e9:e9:62:99:bc:8b:64:38:fa:da:41:08:36:
                    64:37:af:08:45:ba:e6:ea:a2:7a:98:f8:c1:fc:e7:
                    af:46:ce:cf:bf:e5:b8:f7:df:85:5a:65:4f:ff:13:
                    c1:b3:1b:cc:fe:94:2b:5f:c8:62:cd:08:7b:7d:d0:
                    5f:cc:22:50:da:9f:b0:65:e5:af:99:be:95:9f:28:
                    97:62:b4:99:f0:25:82:4a:f3:16:89:85:ba:f3:34:
                    03:aa:bf:d6:de:af:59:6a:88:81:b3:d7:f1:13:bc:
                    c4:a1:b9:45:11:df:59:c0:6a:31:ff:dd:47:32:68:
                    d4:cc:8c:18:de:90:53:12:32:e6:ff:f8:d2:3a:f5:
                    b7:ed:ea:23:ba:06:d2:e6:d4:33:51:2d:ef:13:d2:
                    bb:99:56:21:bd:0d:be:f3:c2:ee:95:5e:06:b9:9a:
                    49:95:3e:6f:7e:e5:55:4e:fe:49:63:43:b4:28:02:
                    b3:48:bd:72:a9:58:0e:68:19:fd:eb:72:02:d5:1d:
                    cb:b2:4f:09:f9:aa:92:3f:a5:05:1b:30:5a:a5:99:
                    02:8f:c0:a3:d1:5a:77:c0:d3:f3:3e:4d:4d:ad:bb:
                    bb:c1:22:bd:76:00:57:fd:e1:8e:14:6a:f5:80:e7:
                    18:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:AC:6D:B5:EC:3F:3C:71:AF:77:1E:59:13:6C:6B:01:DE:EE:FD:21
            X509v3 Authority Key Identifier:
                keyid:56:3F:B0:A1:0F:C5:90:9F:10:90:B6:FE:EC:DA:F7:84:B3:25:62:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/78/7f216a-1e20-4fa7-ab01-e5fab56187ac/1/Vj-woQ_FkJ8QkLb-7Nr3hLMlYus.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:5f:30:82:a3:c2:04:ce:c0:31:2e:83:f6:47:77:a2:58:03:
         6e:4d:5f:c1:52:16:74:96:35:3e:05:b5:8d:60:76:95:15:47:
         30:f8:e0:99:2b:03:14:6c:e9:0e:1e:07:65:ac:7e:1b:5c:ed:
         0b:0e:5f:76:14:ad:cd:93:6d:b8:c7:61:57:08:3d:ad:4c:05:
         80:b0:00:59:5a:bb:c5:8a:d3:54:db:fe:81:c9:ed:53:e3:a9:
         95:a7:1c:e1:a0:88:bd:73:bc:9d:ba:44:1d:be:c9:8e:e6:e6:
         15:f5:aa:49:e6:0c:dd:34:79:64:37:7c:6d:ee:69:9a:c1:d0:
         57:cb:a1:c9:cb:ec:10:f8:5c:3e:74:25:67:28:d0:37:fa:0d:
         4b:64:04:6f:2d:f6:6f:ce:67:0d:d7:6d:9a:76:19:da:7e:4d:
         78:ac:68:83:33:fb:8d:8e:67:40:56:a3:b3:12:10:05:1b:1c:
         f2:5a:a0:b9:65:4b:fa:4d:71:4f:34:52:4c:83:4b:65:5f:5f:
         06:18:41:03:a0:6a:04:4a:f8:93:d4:4f:cf:be:55:2a:99:19:
         ac:03:cd:fd:5f:a6:be:49:52:3a:a6:74:b4:d4:08:4d:0e:e5:
         ac:bc:22:e3:39:a5:00:3c:1b:9e:1d:91:e9:54:c2:7a:28:22:
         22:a6:df:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKVR/iiPH+JLhf2uhgWUyeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2M2ZiMGExMGZjNTkwOWYxMDkwYjZmZWVjZGFmNzg0YjMy
NTYyZWIwHhcNMjYwOTEwMDgwMDI5WhcNMjYwOTExMDgwMDI5WjAzMTEwLwYDVQQD
EygxMGFjNmRiNWVjM2YzYzcxYWY3NzFlNTkxMzZjNmIwMWRlZWVmZDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgyIFOXdPzK9cu/4JTleRenpYpm8
i2Q4+tpBCDZkN68IRbrm6qJ6mPjB/OevRs7Pv+W499+FWmVP/xPBsxvM/pQrX8hi
zQh7fdBfzCJQ2p+wZeWvmb6VnyiXYrSZ8CWCSvMWiYW68zQDqr/W3q9ZaoiBs9fx
E7zEoblFEd9ZwGox/91HMmjUzIwY3pBTEjLm//jSOvW37eojugbS5tQzUS3vE9K7
mVYhvQ2+88LulV4GuZpJlT5vfuVVTv5JY0O0KAKzSL1yqVgOaBn963IC1R3Lsk8J
+aqSP6UFGzBapZkCj8Cj0Vp3wNPzPk1Nrbu7wSK9dgBX/eGOFGr1gOcY/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBCsbbXsPzxxr3ceWRNsawHe7v0hMB8GA1UdIwQY
MBaAFFY/sKEPxZCfEJC2/uza94SzJWLrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmotd29RX0ZrSjhRa0xiLTdOcjNoTE1sWXVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC83ZjIxNmEtMWUyMC00ZmE3LWFiMDEt
ZTVmYWI1NjE4N2FjLzEvVmotd29RX0ZrSjhRa0xiLTdOcjNoTE1sWXVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC83ZjIxNmEtMWUyMC00ZmE3LWFiMDEtZTVmYWI1NjE4N2Fj
LzEvVmotd29RX0ZrSjhRa0xiLTdOcjNoTE1sWXVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACl8wgqPC
BM7AMS6D9kd3olgDbk1fwVIWdJY1PgW1jWB2lRVHMPjgmSsDFGzpDh4HZax+G1zt
Cw5fdhStzZNtuMdhVwg9rUwFgLAAWVq7xYrTVNv+gcntU+Oplacc4aCIvXO8nbpE
Hb7JjubmFfWqSeYM3TR5ZDd8be5pmsHQV8uhycvsEPhcPnQlZyjQN/oNS2QEby32
b85nDddtmnYZ2n5NeKxogzP7jY5nQFajsxIQBRsc8lqguWVL+k1xTzRSTINLZV9f
BhhBA6BqBEr4k9RPz75VKpkZrAPN/V+mvklSOqZ0tNQITQ7lrLwi4zmlADwbnh2R
6VTCeigiIqbfIg==
-----END CERTIFICATE-----
Generated at Thu Sep 10 14:28:50 2026 by rpki-client