Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.mft
File:                     Vklrt20fDKhZXX3ZA1tFmkwsqpo.mft (raw, json)
Hash identifier:          ySHF4z8Z9ckCT0mHTXvtyAZPN3hZE5wugevHmHli2V8=
Subject key identifier:   6C:47:F7:FA:29:E6:6E:60:D5:56:A9:3F:9E:62:84:C2:1B:9D:52:94
Authority key identifier: 56:49:6B:B7:6D:1F:0C:A8:59:5D:7D:D9:03:5B:45:9A:4C:2C:AA:9A
Certificate issuer:       /CN=56496bb76d1f0ca8595d7dd9035b459a4c2caa9a
Certificate serial:       01A03F3BAB21810C2C4732A09ADFD5A42780
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vklrt20fDKhZXX3ZA1tFmkwsqpo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.mft
Manifest number:          9A
Signing time:             Wed 26 Aug 2026 18:01:10 +0000
Manifest this update:     Wed 26 Aug 2026 18:01:10 +0000
Manifest next update:     Thu 27 Aug 2026 18:01:10 +0000
Files and hashes:         1: 0eTxnYXv6xLAUw-CZHke-K3TCsI.roa (hash: IiwtzJFKIzZIy5TSTy6MHSgtxDJ1itROpu1u6yoZCA8=)
                          2: Vklrt20fDKhZXX3ZA1tFmkwsqpo.crl (hash: js+mJS5ah9oJwl/SDnCaI/OxiNkn3SNjPfAJ9TeWHiE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vklrt20fDKhZXX3ZA1tFmkwsqpo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 27 Aug 2026 18:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:3f:3b:ab:21:81:0c:2c:47:32:a0:9a:df:d5:a4:27:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56496bb76d1f0ca8595d7dd9035b459a4c2caa9a
        Validity
            Not Before: Aug 26 18:01:10 2026 GMT
            Not After : Aug 27 18:01:10 2026 GMT
        Subject: CN=6c47f7fa29e66e60d556a93f9e6284c21b9d5294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:5a:06:95:b8:19:ea:a0:d3:50:cd:97:78:06:
                    2f:dd:20:3a:c2:8c:8e:f0:34:2d:d4:e7:76:6a:5e:
                    a5:41:86:02:93:5e:5d:9e:71:0b:8b:fa:aa:04:42:
                    2c:b1:d9:f1:66:fa:b4:a6:fb:59:1f:c9:82:e7:f1:
                    35:67:75:b8:70:d5:f7:a5:c0:c9:66:4d:e6:d5:60:
                    8c:c3:ae:46:27:4f:6c:4e:38:90:ce:d5:e7:31:56:
                    e1:a8:fb:69:8d:f1:cc:8e:c1:59:7e:0f:14:13:b5:
                    26:c2:c2:3e:3e:ce:7a:3c:22:cc:75:aa:09:1e:7e:
                    f7:40:e4:b4:73:ab:31:89:d1:63:d9:ec:b9:0e:ed:
                    c1:07:03:c5:1e:dc:35:04:2c:2e:a1:44:a4:97:44:
                    0a:54:c6:a3:2b:9f:83:b5:f0:2b:f6:38:0a:b1:eb:
                    14:9f:c4:5c:74:66:d2:b7:60:00:46:37:ea:a5:43:
                    a3:70:b5:89:8b:67:2e:cc:99:b2:95:30:1c:a3:c4:
                    96:47:5a:d7:79:35:7d:7c:36:4b:c6:85:fe:0f:e1:
                    49:1f:7a:6b:bd:ed:41:24:61:b2:2c:a1:e8:f4:fb:
                    bb:e2:a6:78:8e:cd:0d:a9:08:11:ef:59:e3:2d:28:
                    63:f0:46:df:b9:af:2e:fb:9b:f4:57:85:a5:79:6c:
                    8e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:47:F7:FA:29:E6:6E:60:D5:56:A9:3F:9E:62:84:C2:1B:9D:52:94
            X509v3 Authority Key Identifier:
                keyid:56:49:6B:B7:6D:1F:0C:A8:59:5D:7D:D9:03:5B:45:9A:4C:2C:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vklrt20fDKhZXX3ZA1tFmkwsqpo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/7ae257-3c1a-4d1b-bd82-b9b4473208fd/1/Vklrt20fDKhZXX3ZA1tFmkwsqpo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:a2:16:1a:c4:76:3b:34:d6:d1:dc:d7:41:f8:d7:86:fc:ef:
         7d:f5:fa:eb:c6:c1:85:9e:c1:c6:af:46:46:12:74:11:c8:bd:
         ad:ca:f8:64:c0:9d:1b:05:6e:11:26:6a:dd:9b:93:1f:0d:af:
         fc:bf:f4:5c:de:e0:38:a7:9f:ce:c2:36:44:1c:f3:69:6f:c7:
         2c:3b:74:63:30:5a:f3:74:17:78:e6:a5:9b:5b:a5:17:03:a6:
         01:24:eb:65:e2:36:30:6f:ce:53:84:13:d8:4e:34:25:1e:f6:
         81:a6:07:f0:95:8b:be:8d:60:35:ff:0a:a0:ca:41:67:7e:c7:
         ff:86:fd:e4:96:8b:ac:24:b1:ac:52:6f:0a:e4:71:dd:69:45:
         9c:38:c3:c6:00:7f:39:77:02:a2:f0:df:87:99:07:cf:03:9e:
         3e:8f:7f:11:14:b2:66:fb:b4:24:6f:04:37:fa:13:73:a7:bc:
         ff:0a:0b:8d:e5:9a:fc:e9:96:c5:d9:fb:14:13:1a:d9:79:aa:
         79:af:3b:c6:8b:49:fc:57:b9:f5:84:70:28:a6:75:70:50:bb:
         03:d2:ca:4c:af:dc:a6:b4:ff:e0:12:b1:5c:d3:aa:8a:7a:da:
         c1:9c:35:78:72:09:91:18:ab:2b:55:c0:9b:3d:ee:11:b9:1c:
         1a:b3:95:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:16:50 2026 by rpki-client