Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File:                     VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier:          v/3+fX258uc9wtIp/srTobWb23J+XK+qhscgcim5eTY=
Subject key identifier:   70:8F:E2:06:2D:49:94:C0:B2:B9:3C:46:19:CF:E7:78:40:E4:EA:AB
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer:       /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial:       01A06E030637636E39521EEAAEE657D70A89
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number:          0653
Signing time:             Fri 04 Sep 2026 20:01:26 +0000
Manifest this update:     Fri 04 Sep 2026 20:01:26 +0000
Manifest next update:     Sat 05 Sep 2026 20:01:26 +0000
Files and hashes:         1: 1XLn2EcayJXCpeoADdUargrZ6uQ.roa (hash: 9EjMpW/7TLzpMCvVuiux2e1xySwJuLaEjWMRwlKneqc=)
                          2: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
                          3: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
                          4: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: nEK9c2sS7iJd5E+P3JuthQio7ak9JW+e9HEcRlkaVg0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6e:03:06:37:63:6e:39:52:1e:ea:ae:e6:57:d7:0a:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
        Validity
            Not Before: Sep  4 20:01:26 2026 GMT
            Not After : Sep  5 20:01:26 2026 GMT
        Subject: CN=708fe2062d4994c0b2b93c4619cfe77840e4eaab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:e8:ad:38:4a:d2:35:f2:b4:32:48:af:39:
                    48:ee:fd:52:37:27:26:43:b2:70:2e:b1:67:a1:82:
                    27:c0:ed:31:67:4a:c4:68:f9:a6:dc:85:c4:87:ca:
                    2c:11:0e:8c:2b:64:a1:c3:f8:b6:11:14:99:4f:88:
                    72:8b:93:aa:5d:e2:ea:33:a0:3c:d5:61:e0:d4:fa:
                    ed:58:05:5c:be:d5:2e:a2:8d:b6:de:ce:49:86:fe:
                    10:95:62:33:f2:a5:51:37:e1:ac:77:4f:10:ed:01:
                    71:76:47:ae:f3:d6:10:a8:04:4a:e8:f6:94:bb:79:
                    f5:b9:66:96:50:03:ea:eb:57:a0:28:35:7e:33:bc:
                    01:12:01:83:3e:37:cc:52:bf:03:2e:db:b2:e1:df:
                    e8:bc:fc:26:b8:23:ab:48:16:7b:8e:de:46:1a:b9:
                    2a:bb:ae:f2:81:59:52:70:f3:e9:a9:db:22:f1:1f:
                    b5:d4:f4:55:cf:25:67:bf:f3:fa:d5:b7:92:d9:7a:
                    e3:60:33:46:72:18:e9:56:4a:dd:9f:34:27:ee:be:
                    48:2e:9a:92:29:20:97:cc:c6:0e:55:3b:d3:f7:ad:
                    e6:2c:7e:83:ae:1c:30:e3:09:47:92:08:c3:d2:54:
                    1c:d7:16:13:3d:a1:0e:a1:d5:2c:6f:bf:e7:e8:44:
                    cb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:8F:E2:06:2D:49:94:C0:B2:B9:3C:46:19:CF:E7:78:40:E4:EA:AB
            X509v3 Authority Key Identifier:
                keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:65:a1:dd:8e:31:bc:a3:82:72:15:95:90:c1:36:8c:65:b1:
         03:9f:82:56:a8:cf:f0:13:88:20:c6:b4:6e:10:f6:76:a8:bf:
         a5:ad:7e:f3:93:07:5f:d8:51:70:bb:8e:1e:cb:88:3a:0a:a6:
         63:55:ce:db:8d:3b:25:4d:30:5b:71:38:af:e1:db:25:fb:d0:
         ca:b4:39:19:9f:6d:aa:90:02:af:4f:f1:8c:fd:83:dc:ab:37:
         fe:8d:4b:af:03:40:f7:32:94:65:04:88:3a:50:46:31:7f:f3:
         78:e8:13:e7:2b:72:c2:36:20:8c:f4:54:e8:cf:e6:7c:0c:81:
         0a:23:12:86:94:8b:6f:2f:b5:a3:3f:8e:54:7e:56:51:6b:c8:
         98:bc:db:e7:69:33:18:a8:93:77:2c:0a:ad:8e:36:88:57:3a:
         62:fb:fa:bd:4d:ab:eb:6a:0a:5b:30:82:bb:85:cc:31:92:68:
         bc:45:da:1e:d6:26:24:55:a5:2e:df:0d:f6:05:8a:2c:15:08:
         bd:35:c3:4c:aa:5b:f4:a4:51:1d:2b:dc:34:55:a8:55:87:52:
         76:e3:6a:10:9e:82:f9:17:b1:ee:b2:1d:e5:4e:48:39:c7:f7:
         14:c9:b1:cd:f1:60:9b:8a:44:c3:45:11:d8:77:dc:13:75:d5:
         06:35:bf:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:49:22 2026 by rpki-client