Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
File:                     elVsGaRVbzb3YAAG2OrNH6P0OfI.mft (raw, json)
Hash identifier:          x8fZ/GNhPLDdTHzKD4GzUqLQYVvMLXU1ys+N/hRfuwI=
Subject key identifier:   6D:9B:2B:7A:6F:83:57:7A:0E:96:7E:81:74:DE:C9:C1:22:80:7F:00
Authority key identifier: 7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2
Certificate issuer:       /CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
Certificate serial:       01A0D5DDDFF4ED5E12C96F59AFA05CE8A6A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
Manifest number:          0A27
Signing time:             Fri 25 Sep 2026 00:01:22 +0000
Manifest this update:     Fri 25 Sep 2026 00:01:22 +0000
Manifest next update:     Sat 26 Sep 2026 00:01:22 +0000
Files and hashes:         1: 1-uV7uXuf0A9RrE6AAeiKjQ4SbpA.roa (hash: MZz9ZW2Zi0k4HU9dqfp0ig+8Gbo1pNfmpBwGUkNoQpg=)
                          2: elVsGaRVbzb3YAAG2OrNH6P0OfI.crl (hash: qdmbB/zQNfAVhDMs2UGMoPMfDYDcDlWrz/Mj1WuorsI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 26 Sep 2026 00:01:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d5:dd:df:f4:ed:5e:12:c9:6f:59:af:a0:5c:e8:a6:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a556c19a4556f36f7600006d8eacd1fa3f439f2
        Validity
            Not Before: Sep 25 00:01:22 2026 GMT
            Not After : Sep 26 00:01:22 2026 GMT
        Subject: CN=6d9b2b7a6f83577a0e967e8174dec9c122807f00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:30:63:75:e8:c2:5e:d4:2c:88:f2:36:b0:0d:
                    fa:3f:23:96:80:62:57:e9:4d:c8:c6:91:a6:9b:53:
                    33:98:bb:16:b6:eb:32:26:df:b6:36:82:d7:61:8a:
                    c4:d1:9d:b8:9f:f0:ce:fa:d8:07:e7:09:99:20:61:
                    e8:af:c1:ee:4b:ae:19:46:6c:d8:a7:f7:25:67:15:
                    62:04:3e:9f:0c:4b:07:db:64:8d:17:61:f6:9a:49:
                    08:36:d9:c2:ab:45:6c:5e:7b:f2:c2:70:63:5d:d2:
                    51:a5:47:2b:ac:9d:bc:20:cf:14:65:33:04:c5:d4:
                    8f:8f:6a:7f:3f:a8:0c:be:87:78:4a:5d:97:d4:c6:
                    a1:2a:6c:9a:f3:f3:6f:b0:b3:b9:1a:2d:a2:fa:e1:
                    c4:26:9e:90:c3:8b:68:1a:02:6c:23:35:45:64:77:
                    80:21:8b:34:fb:b9:33:62:ab:31:da:2d:8c:0c:66:
                    e3:49:a0:5b:b4:90:4b:b3:23:1e:45:a8:9c:d3:d1:
                    3d:77:1c:4b:22:43:83:7a:ab:d0:16:02:fb:ae:66:
                    96:66:4d:cd:62:5b:ac:ad:2d:bc:07:de:77:cf:23:
                    f8:10:8b:13:79:8d:5f:3b:42:48:e6:0d:0e:ea:21:
                    a2:a1:47:6a:84:49:1e:b6:33:36:6f:5b:ff:1c:28:
                    43:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:9B:2B:7A:6F:83:57:7A:0E:96:7E:81:74:DE:C9:C1:22:80:7F:00
            X509v3 Authority Key Identifier:
                keyid:7A:55:6C:19:A4:55:6F:36:F7:60:00:06:D8:EA:CD:1F:A3:F4:39:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elVsGaRVbzb3YAAG2OrNH6P0OfI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/842046-3f5f-4f4e-930c-e3d0a0ace398/1/elVsGaRVbzb3YAAG2OrNH6P0OfI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ee:76:92:6c:c9:2f:49:89:f4:5c:70:02:cc:65:4c:6b:98:
         54:b7:38:cb:7c:fe:63:99:57:91:e9:c6:5b:c5:a1:d8:f6:cd:
         a0:32:3d:10:b4:b1:7c:59:e2:e1:64:8a:c4:9d:a6:f6:69:a6:
         db:50:c3:72:39:b6:20:57:96:de:d2:2e:8e:33:3d:45:60:92:
         08:bd:e8:84:29:ff:15:49:1d:98:14:05:15:39:05:49:30:c0:
         db:11:d2:19:35:38:f5:e0:ab:6a:0a:e9:14:53:75:ba:a3:c3:
         6a:33:bb:7d:f1:71:b3:a9:e1:76:67:06:e2:ea:7f:1a:a3:14:
         c3:b9:c7:d0:99:98:e7:a6:e9:34:b2:d8:3f:f5:bd:1a:34:27:
         79:aa:be:36:b4:d7:e7:90:d2:79:a6:b8:14:d0:b3:49:78:77:
         69:79:88:98:51:f0:a9:b1:24:47:a3:4f:c5:66:34:e1:7f:25:
         f5:df:5a:4e:33:c7:0a:dd:3c:91:21:c7:11:cd:d9:ba:1a:ca:
         1b:7d:69:c1:2a:e8:2b:99:ba:45:f6:4a:af:0d:7d:5a:00:0f:
         82:a5:98:ab:f1:dc:4e:50:bf:70:a1:4d:f5:3b:12:87:1d:4d:
         24:29:96:6b:ff:8d:85:a5:a3:dc:2a:f9:40:72:4a:d7:db:0b:
         c3:89:e4:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 10:50:53 2026 by rpki-client