Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          PU9Jb/xOJrJJDoyjrq11X+JXiULbm9COkI5RB/kURpM=
Subject key identifier:   56:7B:26:06:D7:15:1C:75:2E:8E:68:54:48:0E:14:43:D3:F9:BB:41
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       01A06D5D8721C7646D0430EC39F1B16EE03D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          04A3
Signing time:             Fri 04 Sep 2026 17:00:40 +0000
Manifest this update:     Fri 04 Sep 2026 17:00:40 +0000
Manifest next update:     Sat 05 Sep 2026 17:00:40 +0000
Files and hashes:         1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
                          2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: C5y0EDxdGEU1uiEBSqtWz30WFt0KPa8wMvjffrPFBh0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 05 Sep 2026 16:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6d:5d:87:21:c7:64:6d:04:30:ec:39:f1:b1:6e:e0:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Sep  4 17:00:40 2026 GMT
            Not After : Sep  5 17:00:40 2026 GMT
        Subject: CN=567b2606d7151c752e8e6854480e1443d3f9bb41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c3:a4:30:77:ee:d2:cb:61:20:c4:c9:ba:fe:
                    ba:f3:2c:c8:3a:37:84:87:9a:43:bd:92:d5:4f:ea:
                    ae:79:ce:fd:c4:bb:7f:de:f5:db:1f:f9:eb:93:dd:
                    ac:2b:ab:df:41:b4:d0:dd:9f:9f:4e:81:ee:5a:8c:
                    ee:6a:79:99:e6:09:fc:bb:09:24:c9:ca:4b:05:26:
                    78:3a:bc:e4:b6:1e:48:36:33:a7:71:1c:4d:7a:40:
                    cb:ba:55:00:80:22:cb:e4:6f:76:52:92:b8:89:01:
                    98:c9:f7:cc:5a:b3:a5:bd:b8:a7:03:a7:88:bc:0c:
                    63:ac:d0:a8:ea:1c:3a:e2:30:43:ef:89:2c:25:98:
                    b7:9b:d6:30:86:25:26:bb:57:20:84:17:b1:c1:1b:
                    d3:f5:e4:d1:c3:64:f9:76:ff:c3:18:bc:02:ee:26:
                    8e:2f:29:41:21:58:35:7a:84:4e:83:6d:1e:44:59:
                    b9:f2:dc:56:58:44:2b:df:e9:c7:22:40:95:9d:4e:
                    9f:b9:29:ce:fb:26:2c:44:f3:5d:a4:e6:73:19:90:
                    95:08:47:ec:b5:46:87:9f:e7:cf:3f:0c:f3:ab:1e:
                    a7:07:c4:88:fe:51:c3:58:9f:cf:45:b8:bb:82:a8:
                    31:27:75:c3:2b:8a:1e:e0:38:bf:43:6c:85:17:93:
                    78:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:7B:26:06:D7:15:1C:75:2E:8E:68:54:48:0E:14:43:D3:F9:BB:41
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c7:fb:5b:77:1e:0f:a7:2a:58:c6:ac:e8:34:a2:65:7f:dc:
         6d:29:5a:5f:12:eb:c0:19:fa:e6:93:de:86:c0:7d:a4:84:58:
         85:1c:1c:e5:8a:7e:16:67:53:cc:75:30:6c:c2:70:f8:28:d8:
         8e:71:40:1b:ad:7f:e2:93:c0:58:a2:bb:08:24:d1:a0:ff:b2:
         9c:f9:ee:d1:7e:ba:67:86:98:e0:b5:45:a9:67:a8:87:45:e0:
         b0:23:52:f1:e8:d3:03:f9:0e:36:ae:8b:86:93:5d:16:f4:ad:
         ac:a0:d0:3a:a2:2e:12:29:e1:43:23:a3:ff:6f:be:34:f8:db:
         c0:0b:53:3b:83:2e:94:8d:fb:90:e3:be:d2:10:ac:a4:8d:bf:
         82:62:42:98:ab:cb:88:6a:68:cf:37:82:f5:e1:4d:9a:7d:ed:
         8c:10:71:06:36:4a:69:da:6a:07:15:98:3c:e4:91:f1:45:5b:
         71:a5:dd:5e:2f:0b:cb:a4:fd:77:95:3a:a7:f1:a5:eb:6d:ae:
         0d:13:5a:fc:a0:e9:32:17:e9:5b:07:28:77:cb:be:89:a6:7c:
         d8:84:89:12:a8:a1:16:8a:f9:1e:31:d8:5a:94:02:90:04:49:
         06:7e:7a:5a:5c:91:d1:f7:2a:42:2b:51:80:ba:46:23:7f:68:
         2d:4f:30:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:45:13 2026 by rpki-client