Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
File:                     VHd3rO-MSS5QEb3ewSmviuyXS3c.mft (raw, json)
Hash identifier:          tMlhPyJDyb6XrselXWXYbYDogSyDXhu0Z3CUXKWEvTM=
Subject key identifier:   A1:4F:7F:FF:7F:12:12:33:18:4A:31:FF:40:A8:41:9F:4E:D9:7F:D0
Authority key identifier: 54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77
Certificate issuer:       /CN=547777acef8c492e5011bddec129af8aec974b77
Certificate serial:       01A08C0D2F6FB32047BF0A67FE139812DDD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
Manifest number:          0260
Signing time:             Thu 10 Sep 2026 16:01:09 +0000
Manifest this update:     Thu 10 Sep 2026 16:01:09 +0000
Manifest next update:     Fri 11 Sep 2026 16:01:09 +0000
Files and hashes:         1: H5HaxNWVOqxU799AVgPxEXn01qU.roa (hash: mWDQsDbJvuwqHmN/2vnE3qUbbfA/iapxxfRizly7drk=)
                          2: VHd3rO-MSS5QEb3ewSmviuyXS3c.crl (hash: nWRkTQlWXlEl4YDkj9krMo9dPf6Kham1wbWk6acXhvQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 11 Sep 2026 14:07:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:8c:0d:2f:6f:b3:20:47:bf:0a:67:fe:13:98:12:dd:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547777acef8c492e5011bddec129af8aec974b77
        Validity
            Not Before: Sep 10 16:01:09 2026 GMT
            Not After : Sep 11 16:01:09 2026 GMT
        Subject: CN=a14f7fff7f121233184a31ff40a8419f4ed97fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7c:84:90:b0:3b:a3:3f:87:d1:45:16:a7:4a:
                    ba:e3:5f:3e:67:69:49:35:d1:f0:17:0b:ac:e0:5f:
                    91:f2:bf:ab:8c:02:ff:79:ed:7c:02:57:3e:40:39:
                    7e:fe:3c:0d:30:ae:a7:0f:13:a4:1b:c6:b6:87:b0:
                    00:2a:c6:53:e8:bb:9a:21:6c:8d:64:a5:48:49:e5:
                    70:e2:17:eb:d0:30:9b:67:bf:b2:b4:2a:60:54:02:
                    0d:c1:54:f7:d3:a8:a5:d2:87:e9:a3:16:c2:1a:68:
                    4f:49:6d:f6:59:20:ca:9b:a5:b5:0a:b1:f6:97:d7:
                    79:ef:04:bb:f3:de:7b:e4:33:5c:91:93:ef:c9:c5:
                    d7:c0:66:80:4d:ab:d5:b7:43:c8:1e:76:48:09:b9:
                    32:09:33:64:96:dd:9e:ff:b7:ae:5b:b6:25:3b:bf:
                    62:f3:04:c2:17:eb:3b:d1:b7:f9:93:67:80:aa:49:
                    59:e2:7c:77:a9:3a:7c:d5:53:f6:b9:6a:04:bb:d7:
                    07:c2:53:16:f0:5c:72:21:ee:1d:92:17:a6:33:cd:
                    c6:97:93:de:50:b4:ac:a6:6a:7d:f0:93:06:90:8d:
                    36:6b:34:a0:17:54:5c:be:81:41:39:ed:00:08:ec:
                    b1:ed:d8:39:55:00:88:ae:9a:38:14:11:d0:e2:a4:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4F:7F:FF:7F:12:12:33:18:4A:31:FF:40:A8:41:9F:4E:D9:7F:D0
            X509v3 Authority Key Identifier:
                keyid:54:77:77:AC:EF:8C:49:2E:50:11:BD:DE:C1:29:AF:8A:EC:97:4B:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHd3rO-MSS5QEb3ewSmviuyXS3c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/70b11a-4f9f-42e6-809b-e58923ea32be/1/VHd3rO-MSS5QEb3ewSmviuyXS3c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6f:f1:83:77:fe:dd:44:44:e5:a8:86:62:bb:27:7b:84:65:6c:
         51:5f:47:6e:a6:0a:26:8b:2d:41:33:40:9b:ba:40:81:cf:c4:
         02:07:48:bc:dc:e9:49:92:c3:89:5a:5f:b3:61:c4:4f:bf:29:
         82:f3:37:d8:06:dd:b7:62:68:4a:fd:39:ae:df:d8:25:69:8f:
         56:8b:46:b1:2d:51:a0:d6:23:b7:c3:80:6b:67:90:7f:cc:91:
         e2:1d:2f:1c:13:0a:dd:8b:b2:ab:15:0a:4f:a9:23:9c:ec:0c:
         e6:12:19:af:c6:68:56:c5:cf:6e:a5:d8:10:28:12:78:52:f7:
         b6:b2:ce:42:a4:2e:32:dc:16:01:de:e0:74:a0:9d:f3:bd:18:
         25:14:2a:a7:f4:9e:c0:af:91:ae:17:0d:33:eb:c0:93:5a:e3:
         a7:c4:28:dc:35:89:2d:ef:c5:29:67:ce:6c:c4:99:7a:cc:ef:
         b2:ce:55:69:ce:5f:fb:19:b7:d5:19:df:04:9e:81:30:b5:e6:
         a6:35:57:df:07:1c:be:92:d4:b0:87:5f:eb:74:d9:24:80:5e:
         9e:f9:50:03:64:f2:0c:24:db:26:ed:4d:4f:f7:4d:57:d8:13:
         7d:f8:a2:1c:98:70:40:0c:64:e9:b6:7a:46:bd:4b:07:cb:f8:
         1f:dd:c1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:56:10 2026 by rpki-client