Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
File:                     Vg0eibTnQuaQYqldNR3uqWtRePs.mft (raw, json)
Hash identifier:          7DlPwnpzhPtGngAYKIrvBb4dR/5/o4r3kKymASiBbUQ=
Subject key identifier:   25:BE:A3:B0:D2:FE:F8:36:C5:34:90:23:B2:3B:4F:40:C6:B9:AA:11
Authority key identifier: 56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB
Certificate issuer:       /CN=560d1e89b4e742e69062a95d351deea96b5178fb
Certificate serial:       01A08B6816E934C4B49C17BD3C368CE3034A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
Manifest number:          07B9
Signing time:             Thu 10 Sep 2026 13:00:49 +0000
Manifest this update:     Thu 10 Sep 2026 13:00:49 +0000
Manifest next update:     Fri 11 Sep 2026 13:00:49 +0000
Files and hashes:         1: 69w8AqG0QlGDdYLGtlWFSiiHDvY.roa (hash: 1UEV58sRkYlzIERqqNu2R4Ag1gBBYPAAaxlqrTywEuI=)
                          2: Vg0eibTnQuaQYqldNR3uqWtRePs.crl (hash: KPVLi7t2nePlzi+4jZkXxwb21P4Gd6zEQhQui89rzSo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 13:00:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8b:68:16:e9:34:c4:b4:9c:17:bd:3c:36:8c:e3:03:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560d1e89b4e742e69062a95d351deea96b5178fb
        Validity
            Not Before: Sep 10 13:00:49 2026 GMT
            Not After : Sep 11 13:00:49 2026 GMT
        Subject: CN=25bea3b0d2fef836c5349023b23b4f40c6b9aa11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bc:55:d4:53:3b:16:e0:d0:44:0b:ab:61:b7:
                    49:90:57:89:d8:ff:bc:7b:85:91:89:a4:9d:b2:94:
                    06:4d:fb:ae:c3:3c:c3:62:a6:6d:c6:cf:23:13:4d:
                    60:39:90:b5:8f:2c:dd:5a:bb:c6:97:64:58:ab:b6:
                    46:73:f7:92:cc:47:d6:05:68:6f:5a:09:af:6c:16:
                    4d:51:81:6d:60:ae:db:27:0f:3f:bf:f4:37:bb:c6:
                    72:83:d6:22:35:67:95:68:72:55:40:38:ec:c0:10:
                    5a:62:72:2e:15:c9:0d:8d:5e:2a:f1:34:71:aa:4b:
                    67:15:36:31:ed:18:3e:37:1c:4d:bf:f1:86:d2:53:
                    cd:9f:9c:d6:50:56:ae:a8:a1:4f:01:7b:13:cb:8f:
                    df:cd:d7:74:2d:8a:bf:b7:6f:8e:47:ec:08:15:d8:
                    c9:2f:59:40:b1:35:59:58:a0:d7:52:76:e7:44:e7:
                    d0:69:44:e5:c3:db:40:24:fd:b3:74:38:72:91:21:
                    ad:08:70:4b:60:98:53:ad:c1:2e:7a:59:fc:ec:5d:
                    1c:fa:d1:85:0d:46:95:98:c1:6e:87:3d:db:3c:d9:
                    f8:7c:f8:f9:f2:bd:76:7c:c6:60:f8:40:c9:1a:82:
                    87:a3:52:6d:3b:8a:4c:52:74:ac:0b:e7:e6:97:b5:
                    72:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:BE:A3:B0:D2:FE:F8:36:C5:34:90:23:B2:3B:4F:40:C6:B9:AA:11
            X509v3 Authority Key Identifier:
                keyid:56:0D:1E:89:B4:E7:42:E6:90:62:A9:5D:35:1D:EE:A9:6B:51:78:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vg0eibTnQuaQYqldNR3uqWtRePs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/91/8a734a-d2b8-411e-a557-50d6ba6aacb8/1/Vg0eibTnQuaQYqldNR3uqWtRePs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:d7:ab:68:07:30:89:e6:e1:71:3c:5e:c4:54:c5:3f:09:56:
         b5:0f:57:a7:f1:b2:b9:cc:9a:b1:6a:9d:a7:35:2b:01:23:e6:
         b2:65:07:cf:cb:2a:4d:04:a8:a3:f3:c4:5f:65:b8:54:26:b8:
         54:bc:c4:e7:ce:a1:44:d0:0d:a7:7d:49:bd:00:c6:25:c9:55:
         ac:63:e6:61:f8:af:96:8d:11:61:80:59:60:92:8f:87:59:58:
         52:c5:ea:11:0b:bc:80:5c:fd:0e:b0:ec:f9:3e:f4:b7:06:34:
         8f:4e:5c:06:6d:a0:5e:11:74:a5:32:91:d8:4f:89:fb:dc:f8:
         23:cd:76:e2:e6:12:7e:48:ad:bc:d5:cc:b9:80:0c:1e:3b:63:
         9b:0a:44:3d:c2:66:42:c9:e3:85:09:85:43:92:bf:90:c2:a7:
         6e:69:05:61:44:2f:b7:6b:ae:37:d2:3e:27:7a:55:a6:80:98:
         e4:4d:76:4f:1c:8c:64:ad:74:e6:3c:0d:76:3f:bc:b1:ff:26:
         95:dc:97:0f:ee:37:c0:8f:c9:52:c2:07:f0:8a:3c:0d:a9:aa:
         ba:96:f6:82:fb:fe:f9:18:a7:ed:37:79:d4:6e:9f:71:c2:63:
         4e:b0:30:47:c6:3f:29:42:41:2e:1a:ef:b3:c0:3c:0d:ed:a6:
         62:81:19:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:57:12 2026 by rpki-client