Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File:                     VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier:          sdY+lO3NahJ3k1SIC/U0gzBiOjyEBH6Sd8guqpqXJTg=
Subject key identifier:   82:F8:07:2C:00:76:58:FE:43:DE:60:14:7D:BD:54:2F:E9:6F:C5:5A
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer:       /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial:       01A06CF0177C976F5D05E86E74D305D59439
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number:          03BE
Signing time:             Fri 04 Sep 2026 15:01:08 +0000
Manifest this update:     Fri 04 Sep 2026 15:01:08 +0000
Manifest next update:     Sat 05 Sep 2026 15:01:08 +0000
Files and hashes:         1: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=)
                          2: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=)
                          3: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=)
                          4: JsExkxn6ORep1Qkd7h1bnFYNnP8.roa (hash: w/DL5qJe1mUIHpRScRPUTBRiJWpSst+kv/3eNPLA4cI=)
                          5: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=)
                          6: UmIpX_CW_WbjKOu7gSBIxfUav1k.roa (hash: xh/FWCV9oxmR8lumYAFioa1l3O3b6ExwSOvllJh6Tdc=)
                          7: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: 7wbzORT47CtComK7rPLYyl7gwtlrPaqKzaEsMu3BK9Y=)
                          8: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=)
                          9: iZ1IBZHMOSVPY1cP2YQ2mxDWXSA.roa (hash: /iUGvduptZ/JP8lKXh14YGIQgG7bREfF9xL+2QGrNB0=)
                          10: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=)
                          11: oIQSTPuHbbYGlcgLa4wIObpfB0Y.roa (hash: T3/R9exHSgP0k2kmjvxBvwzSyy0v3tasEbkkEODMBfE=)
                          12: ugdaZFijHYOlbpSUgTHvHNMkx3I.roa (hash: xF9mxjozl+pvQpm1H66f/KhL1MOe8lYaF6cLypnqfxo=)
                          13: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=)
                          14: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 15:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6c:f0:17:7c:97:6f:5d:05:e8:6e:74:d3:05:d5:94:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
        Validity
            Not Before: Sep  4 15:01:08 2026 GMT
            Not After : Sep  5 15:01:08 2026 GMT
        Subject: CN=82f8072c007658fe43de60147dbd542fe96fc55a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:47:73:d8:bd:fd:bb:38:44:6e:c6:bf:df:10:
                    0b:ad:47:c8:eb:64:ea:08:61:b3:31:ba:4a:19:4e:
                    55:bd:e8:21:e1:95:cf:20:2a:b1:9c:7a:ce:1b:13:
                    6c:39:97:8d:e2:53:3a:50:10:f5:90:60:4c:ba:7c:
                    7d:87:35:1f:eb:80:c7:18:a7:7e:e4:75:ba:ec:bf:
                    dd:01:0a:5f:8d:63:32:1f:0b:0f:44:71:da:5a:96:
                    f5:51:d8:97:ee:ed:19:cc:bb:ff:54:c8:0c:40:34:
                    eb:30:0c:5a:16:90:e2:c2:99:92:97:61:2d:b6:99:
                    5a:10:58:37:7a:09:0d:85:34:55:13:1e:8a:bf:7f:
                    fd:3f:eb:ec:f5:2c:8c:da:3f:90:5c:8c:bb:c4:03:
                    41:82:73:26:33:b1:47:7a:39:35:07:91:fb:4a:ae:
                    ec:40:81:31:19:4b:3c:7d:5e:ac:00:04:e7:b0:80:
                    b4:d1:3c:ae:9e:bb:ef:be:19:c5:54:7f:92:7c:2e:
                    92:c5:c0:54:4b:1e:11:cf:98:81:eb:f9:83:f3:93:
                    86:6b:fe:40:26:a7:e1:3f:fb:98:ec:57:f5:7d:fa:
                    47:51:b1:80:ae:c3:8e:4b:be:8b:f5:27:b3:5d:23:
                    21:60:e6:b6:51:cc:5e:ad:eb:0a:b7:df:9a:fe:54:
                    69:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:F8:07:2C:00:76:58:FE:43:DE:60:14:7D:BD:54:2F:E9:6F:C5:5A
            X509v3 Authority Key Identifier:
                keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:94:1a:91:1e:bc:a3:59:2a:61:09:84:4e:e7:50:92:bf:84:
         eb:dd:18:a7:ea:ff:87:9e:8c:02:3a:3b:a8:16:3b:f0:7a:48:
         7a:82:67:ab:8c:80:85:31:66:0d:2d:e2:64:31:c2:30:61:cd:
         d2:44:91:96:c7:6a:04:1b:17:44:55:30:53:6e:69:02:ad:b6:
         a3:76:5b:60:26:38:94:02:5a:b6:08:a4:19:ab:b7:98:d4:ba:
         82:a3:21:86:45:25:dc:b6:4d:ce:65:6d:69:98:12:82:77:8c:
         1c:dd:a5:11:c8:d6:9d:ef:c3:bf:d0:07:00:43:51:95:b1:dd:
         bb:18:db:99:e4:84:fc:32:a3:d1:73:ef:68:d6:35:db:f8:35:
         39:24:eb:79:0f:99:27:4d:4c:9d:27:cd:37:99:7c:1e:e4:c9:
         ad:90:9e:90:b2:69:13:94:0c:c8:4e:14:52:da:fa:e2:8c:86:
         8d:35:6b:98:7f:df:97:a0:12:63:01:ee:6a:c1:3f:dd:fc:a0:
         9e:24:c7:80:ee:2a:36:30:65:02:af:69:a7:6d:13:41:31:0b:
         ec:5d:ec:7e:97:30:1c:9a:a1:87:95:9a:26:f7:73:b1:dd:94:
         c7:4b:99:c9:a4:0f:be:4a:21:4a:22:07:c5:7d:12:cb:3d:91:
         2b:60:3e:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:46:17 2026 by rpki-client