Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
File:                     _vkYxakzDbvm7uF8uaHWL7yFW94.mft (raw, json)
Hash identifier:          g1eOCEkkHZFXHtFTztzMXUfW77q/hIpRI3m5aoXUmws=
Subject key identifier:   82:34:8C:31:26:D0:B2:55:71:87:DE:8D:08:8A:BD:93:1B:7B:5D:50
Authority key identifier: FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE
Certificate issuer:       /CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
Certificate serial:       01A026FC53E515DF6CA4F93EB0F6E7637389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
Manifest number:          0D3D
Signing time:             Sat 22 Aug 2026 01:01:05 +0000
Manifest this update:     Sat 22 Aug 2026 01:01:05 +0000
Manifest next update:     Sun 23 Aug 2026 01:01:05 +0000
Files and hashes:         1: 9CSlDg9AoP6XQftipK09LoZccXE.roa (hash: /0UyKFue8fewRbSVJ3V30gUcuOf6lpAwatxyqWR/sjk=)
                          2: _vkYxakzDbvm7uF8uaHWL7yFW94.crl (hash: gDUhFzyJ34rJBAmfcZ+TYLXapZZoMUX0X3VTMVBVWuY=)
                          3: fzZPCo2MgwRNx0jBproZuv-eSHg.roa (hash: TUdwZLmcSuUajJ8XwoB2OnQqd7+GFsXBXptVyFTtu7c=)
                          4: mykSL7Qh3PSdFsWbgAVoPLK49LQ.roa (hash: fv4E9AvJZausLwDaoGx5qtDafVauUfmM2KAAmLXRacU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Aug 2026 01:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:fc:53:e5:15:df:6c:a4:f9:3e:b0:f6:e7:63:73:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fef918c5a9330dbbe6eee17cb9a1d62fbc855bde
        Validity
            Not Before: Aug 22 01:01:05 2026 GMT
            Not After : Aug 23 01:01:05 2026 GMT
        Subject: CN=82348c3126d0b2557187de8d088abd931b7b5d50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:9f:dd:b9:82:96:ea:5a:6c:73:68:c5:47:29:
                    07:e4:e1:29:fe:70:ae:ff:03:37:f8:7f:2d:15:26:
                    e8:59:fb:4a:1f:73:26:56:9d:1b:0a:9d:f6:7d:4f:
                    29:34:7e:ce:d6:ee:ca:f1:f2:a0:07:97:ac:3b:27:
                    3b:23:0f:bc:96:06:26:b5:59:b0:40:cc:25:3a:47:
                    6f:e8:c2:d5:47:25:60:b6:98:e2:3c:ad:52:d4:8e:
                    ff:ef:f2:8f:ae:9c:07:c2:27:61:d6:eb:48:aa:97:
                    6a:5f:e4:16:76:83:09:f8:07:5e:d1:b6:08:cf:6f:
                    60:dd:00:10:ea:b1:8d:e4:8b:31:ff:bf:ec:5a:13:
                    da:d5:17:a9:90:cf:5e:32:b5:41:c9:2d:c4:bf:03:
                    b6:ba:1d:ac:f5:74:92:b2:74:fd:d4:d2:3f:9d:38:
                    c2:12:ca:26:7e:91:e5:a4:87:51:af:15:67:63:19:
                    46:b1:b2:50:44:e1:bb:2f:98:a8:b2:ee:c0:11:d3:
                    4d:ab:eb:7a:08:a7:88:47:ac:70:2e:83:63:0c:ae:
                    6e:37:8f:d5:ec:1f:e7:69:a3:dc:07:21:97:5d:f9:
                    c1:33:ec:ed:cd:d0:fa:4e:51:73:05:c6:ad:7c:5d:
                    1a:60:b5:db:b2:4a:15:fc:54:f1:70:0b:14:c4:1e:
                    b2:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:34:8C:31:26:D0:B2:55:71:87:DE:8D:08:8A:BD:93:1B:7B:5D:50
            X509v3 Authority Key Identifier:
                keyid:FE:F9:18:C5:A9:33:0D:BB:E6:EE:E1:7C:B9:A1:D6:2F:BC:85:5B:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vkYxakzDbvm7uF8uaHWL7yFW94.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/ed655d-5102-4932-b1db-ba2889afaadd/1/_vkYxakzDbvm7uF8uaHWL7yFW94.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:a8:f7:90:07:51:51:28:9a:30:b1:0e:35:7f:51:be:16:b9:
         be:4d:f8:1c:3f:23:e7:9b:ee:82:c2:47:97:c4:26:3e:8a:1e:
         e2:37:8c:6c:1f:cb:f5:92:72:17:a6:88:de:17:8c:49:a8:8a:
         28:6e:51:03:66:41:ea:dc:59:2a:41:df:ec:c5:61:f2:30:06:
         10:18:b2:4c:fe:8b:fe:0d:4d:1a:82:a9:4c:23:31:dc:61:68:
         96:7a:2d:17:52:c5:58:cc:0f:fe:92:d9:bb:39:1a:52:d2:ad:
         27:fd:6c:b6:62:e5:21:0e:13:9e:e6:d9:27:a3:8d:93:6e:b6:
         ee:a7:f8:ce:24:01:b6:55:eb:cf:ae:02:ed:9d:7a:2b:7b:5d:
         24:1a:95:ab:a6:62:6a:7f:40:d1:fb:be:da:f0:1b:af:96:01:
         95:ca:27:8e:c0:3d:ec:3c:23:f1:5b:42:27:3e:c5:84:50:a8:
         6f:a4:2d:02:98:34:01:8e:33:2f:89:ac:49:33:b0:ee:8c:3e:
         f4:64:4a:ea:1e:71:d6:74:40:e7:36:42:ca:8f:c6:00:e4:a9:
         94:46:fb:a9:49:6d:46:cb:c5:7f:a4:79:20:fc:7d:80:4e:14:
         7a:82:b2:81:27:bb:dc:60:b0:e4:ac:00:bc:d7:bb:9d:d1:97:
         1e:3d:79:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 22 08:45:34 2026 by rpki-client