Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
File:                     vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft (raw, json)
Hash identifier:          ghfKFNMM+GcTfzXKFj47MPAFpgerJeo4iuMIsmouwDA=
Subject key identifier:   A3:D3:0D:AC:82:4F:52:97:13:11:FF:7A:FF:13:87:36:0B:FE:6D:44
Authority key identifier: BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8
Certificate issuer:       /CN=beed14bf4e46b13579583f97ff85910d103a53f8
Certificate serial:       01A1697DFF2E2F45713A5EEBCE5D4D93C4B1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
Manifest number:          1A4E
Signing time:             Fri 23 Oct 2026 16:00:27 +0000
Manifest this update:     Fri 23 Oct 2026 16:00:27 +0000
Manifest next update:     Sat 24 Oct 2026 16:00:27 +0000
Files and hashes:         1: pSiIaWRx2UGN4D5EcKFTNV-8gHw.roa (hash: EWBZ2UHTAmxrD1L9UAKAHW/cTFQz9Hh3HcW2rFyIPpw=)
                          2: vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl (hash: k38KJEbqEIqwsyLsG+p4bW1LzXZzEBEKzsHK9mrQfL8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 24 Oct 2026 16:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:69:7d:ff:2e:2f:45:71:3a:5e:eb:ce:5d:4d:93:c4:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beed14bf4e46b13579583f97ff85910d103a53f8
        Validity
            Not Before: Oct 23 16:00:27 2026 GMT
            Not After : Oct 24 16:00:27 2026 GMT
        Subject: CN=a3d30dac824f52971311ff7aff1387360bfe6d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:1d:7f:35:cd:a0:52:2b:79:dc:0f:10:c7:84:
                    6c:0b:1d:14:c2:60:0c:32:1e:a3:5a:1b:ad:81:0e:
                    4f:b7:71:2d:e6:c9:54:bc:d0:ad:bd:b0:9c:53:a8:
                    57:fb:b4:aa:58:42:cd:40:f1:e3:1e:60:02:a3:23:
                    c1:ed:44:6d:c5:c4:a5:0a:33:75:20:ee:00:9e:88:
                    f2:b5:14:5f:1e:ad:91:5d:cf:8c:c7:94:f3:87:45:
                    df:c7:99:3d:31:62:01:b4:96:60:9c:4c:58:a9:d0:
                    54:fa:8a:c0:ff:4f:fb:3c:e2:7f:41:74:d1:57:43:
                    63:98:c7:60:06:86:6f:27:2a:de:9d:eb:ba:b8:54:
                    b6:f0:ea:20:d1:8f:91:d2:37:1f:ae:a7:ea:37:98:
                    6f:de:f9:65:66:e8:9e:30:29:89:c5:ec:9d:be:ec:
                    2e:e1:ab:ae:08:08:11:b9:87:06:a5:a1:a7:c8:a2:
                    e7:7c:52:e7:38:32:7e:56:96:72:21:dd:2b:47:96:
                    78:64:0c:7f:e9:d5:5c:5b:15:b7:13:0e:ed:08:52:
                    0d:02:9d:6c:77:43:33:de:99:1e:0e:fa:da:e6:cc:
                    6b:53:8d:98:d0:fd:6f:9f:af:87:02:a0:71:c0:18:
                    5d:bd:82:03:82:5f:1d:7a:9a:ae:22:70:ec:70:b1:
                    23:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D3:0D:AC:82:4F:52:97:13:11:FF:7A:FF:13:87:36:0B:FE:6D:44
            X509v3 Authority Key Identifier:
                keyid:BE:ED:14:BF:4E:46:B1:35:79:58:3F:97:FF:85:91:0D:10:3A:53:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vu0Uv05GsTV5WD-X_4WRDRA6U_g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/0047b7-f1e6-41a8-a8d2-4801198e75ca/1/vu0Uv05GsTV5WD-X_4WRDRA6U_g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:7b:6f:7f:22:d7:6e:ab:2f:bd:35:b4:57:a9:21:f3:f2:72:
         73:c6:85:e4:a6:34:fb:56:71:33:fe:3f:5f:a2:a6:c7:ee:77:
         54:5b:5c:e4:92:54:0d:88:f7:1d:34:e1:e2:2e:10:b4:8d:6f:
         38:20:68:b6:db:b2:8b:f3:fc:a8:7f:2e:b0:27:4e:5a:ef:83:
         94:0a:59:d9:53:af:6a:d9:21:64:f6:ce:26:8d:1e:96:3e:dc:
         0a:56:c4:ef:75:9d:06:e7:cd:b7:a1:fc:e6:a5:46:91:90:6d:
         80:7e:74:b0:25:49:16:ec:db:8f:eb:9d:0b:7e:90:54:09:da:
         91:c0:45:ac:ba:c7:0f:d4:5e:c1:5c:32:aa:43:ac:dc:fe:94:
         1b:9d:6c:f1:ce:aa:48:1b:dc:f6:a5:f9:9f:54:af:e2:75:99:
         d1:0c:6d:90:a1:11:c2:39:1a:58:55:b3:7f:d5:87:f4:3a:6a:
         18:51:67:ba:14:da:03:8e:18:82:98:6b:65:a4:01:8d:d3:02:
         5a:a1:ab:9c:27:b4:21:b5:53:a9:a7:31:8d:ac:77:39:fc:ef:
         3d:91:9c:71:1e:40:38:e7:2a:24:4f:4f:f7:a0:b8:0c:2b:4f:
         26:56:bf:2a:0c:41:0c:84:85:96:12:d7:fb:d6:74:34:58:8b:
         50:d9:62:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 23:59:41 2026 by rpki-client