Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          z6NWotqp+KtCeKQD8+txyWLA7lzrVuMuQJsRViGmGRI=
Subject key identifier:   33:1D:AF:E2:A7:A5:5E:8B:30:C6:27:E4:99:77:E1:C5:8D:9A:78:1E
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       01A11861A3AEAD5A9B786AB603E21CADF1DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          09B8
Signing time:             Wed 07 Oct 2026 22:00:14 +0000
Manifest this update:     Wed 07 Oct 2026 22:00:14 +0000
Manifest next update:     Thu 08 Oct 2026 22:00:14 +0000
Files and hashes:         1: 0mKPMQWV_Qy-vh6NIOs-vGzzkcs.roa (hash: 40hzdqt6UbwBLVWM2lystwa7D/FQ/GMdaZDwu9K4ql4=)
                          2: BS20TmqftUiHcp-uC9dL2gI-BNc.roa (hash: pr6OCsI1Ad/tkV2rABLwG62aqjOA03sElNbNxIP4zvk=)
                          3: IHxGZu_O4SFl3mCd8QYX5eqd12E.roa (hash: 1i0b2nBfdKjb8NkkxZHECgejSLN+yW+3HQmhrGhzeOI=)
                          4: QdcTnt5_sEE-QZP9_nOM9dgWIto.roa (hash: /rQEfXIzrs8kat99vyddHdND/+1w6aQwSOy8QmHuBFg=)
                          5: UMFicQc5pR1BZjbSliFsmn9hVsQ.roa (hash: J5/XGYpI2q8qdb/0SuhhGpJUPu+HCV/urhJXWQ6uRoM=)
                          6: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: YR4VP0Is6hbZEEPjhdX2U35fenucVlwP9oYAq5pt/os=)
                          7: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (hash: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 08 Oct 2026 22:00:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:18:61:a3:ae:ad:5a:9b:78:6a:b6:03:e2:1c:ad:f1:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Oct  7 22:00:14 2026 GMT
            Not After : Oct  8 22:00:14 2026 GMT
        Subject: CN=331dafe2a7a55e8b30c627e49977e1c58d9a781e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:d7:b3:9b:f1:f1:fd:0c:18:31:05:2a:5b:2b:
                    df:17:ee:3b:f2:89:e0:62:6f:33:ee:62:d2:5e:51:
                    83:a6:fc:3f:45:8f:84:74:59:7f:5e:16:e9:29:97:
                    27:5c:ac:05:17:b7:d9:8f:1f:cc:95:4f:85:63:d5:
                    88:ac:92:f7:97:ef:87:04:ca:23:44:e6:8a:ec:aa:
                    55:1f:04:c1:81:b6:ff:ab:2e:78:a8:17:bf:70:ae:
                    d3:5f:2d:0c:49:8e:1c:d7:c8:4a:07:a8:53:1d:9d:
                    70:33:9f:63:12:1a:0b:fa:ac:6f:86:dc:c1:bc:b4:
                    35:4c:18:20:b0:f0:05:93:f7:66:68:a4:60:a0:1d:
                    20:c9:c4:c0:06:5e:7f:12:e8:0e:ee:f8:f9:67:68:
                    0a:b1:9a:a3:ee:b4:c9:07:ca:1a:41:34:68:25:af:
                    34:e4:e1:94:80:d7:3d:b0:61:0c:4e:65:30:1c:6d:
                    b5:ea:18:3d:9e:55:53:a6:f4:0d:12:46:c0:8e:9f:
                    88:91:4a:37:73:cf:be:50:be:05:10:29:d9:b3:26:
                    98:bb:cd:71:e0:72:34:a2:1e:d7:78:cd:7b:6e:46:
                    88:8f:9f:b5:b0:06:82:ec:57:30:71:7c:f2:0e:fc:
                    ab:37:18:99:16:af:cf:f5:ed:b3:5f:fb:c7:38:ce:
                    f3:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:1D:AF:E2:A7:A5:5E:8B:30:C6:27:E4:99:77:E1:C5:8D:9A:78:1E
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:7e:72:16:50:28:41:e6:b1:74:46:65:b8:08:a1:a5:86:a4:
         9b:a2:01:ff:86:39:9c:ef:a8:44:29:af:e4:c6:f4:f4:64:e9:
         f9:68:c6:8b:ae:74:08:fe:06:93:2c:4f:ad:80:47:dc:b5:bc:
         2b:cc:42:b6:bc:a7:b2:7e:24:76:2b:39:8a:45:34:73:35:2a:
         8b:5b:2c:74:fb:8f:2f:47:b8:84:a7:e8:b7:40:48:e4:2f:2e:
         c6:5b:2d:36:9e:d2:bc:60:bc:58:5f:c2:3e:3d:bc:be:88:bd:
         6e:cc:3d:01:a7:85:e7:dc:25:3c:31:2e:f6:c7:02:49:b5:35:
         5f:49:52:db:70:aa:69:cb:1b:18:d4:b2:3d:72:a4:9b:0d:d3:
         3b:8d:19:f3:11:90:b5:b0:3c:5f:5e:f9:d8:a9:77:94:af:a5:
         b3:5a:07:74:fa:3b:7b:59:21:35:55:96:13:12:d8:06:08:1a:
         be:a9:5f:3f:76:c5:52:b9:8a:16:3f:74:f1:f8:9a:c9:d2:6a:
         a0:ab:25:c3:15:f5:0d:ab:71:7f:fc:b3:c7:e2:6c:ea:07:c2:
         58:ca:da:59:2f:46:29:3b:02:13:6a:b6:55:00:2a:e2:5e:05:
         1e:c2:a2:78:6f:9b:74:59:1b:c4:e1:67:32:94:e4:79:3a:90:
         e6:9d:e3:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 05:19:07 2026 by rpki-client