Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
File:                     VqSYe_jGtM3WV7vC0KXhPptibLk.mft (raw, json)
Hash identifier:          ira23F5zGF7xgKPashYhMuhcStMu5etKY2N2HuVQkMk=
Subject key identifier:   B4:46:EF:0B:F0:A6:ED:22:CD:A5:A1:63:74:2E:19:CF:DF:B9:76:7E
Authority key identifier: 56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9
Certificate issuer:       /CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
Certificate serial:       01A0035D864EB279D3EF2EE62E5659BE1BC8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
Manifest number:          1715
Signing time:             Sat 15 Aug 2026 03:00:55 +0000
Manifest this update:     Sat 15 Aug 2026 03:00:55 +0000
Manifest next update:     Sun 16 Aug 2026 03:00:55 +0000
Files and hashes:         1: VqSYe_jGtM3WV7vC0KXhPptibLk.crl (hash: qpqy2joQ+aA4yYGTjJJFBy3CtbJrnkTAz/myyvUaZT4=)
                          2: i90B_Aw4voLYSZN4ike1cX-64ao.roa (hash: S2axTVSBnRViE7pSNvyWUI1Y+GA1IV83phsw1P/KVYM=)
                          3: mHu2PftrGhok9VGv5OwCSXoy7kI.roa (hash: JIflhy4iOTQx/e8s4VaUUMCa1jVPoZ6lbcfSCtMt09k=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5d:86:4e:b2:79:d3:ef:2e:e6:2e:56:59:be:1b:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a4987bf8c6b4cdd657bbc2d0a5e13e9b626cb9
        Validity
            Not Before: Aug 15 03:00:55 2026 GMT
            Not After : Aug 16 03:00:55 2026 GMT
        Subject: CN=b446ef0bf0a6ed22cda5a163742e19cfdfb9767e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:18:9d:a9:41:8b:68:33:23:7f:6d:8d:e4:93:
                    81:c5:02:27:61:46:3c:5b:04:13:39:9a:8c:42:e9:
                    6f:a6:97:2e:d4:63:b0:db:f5:a8:a2:2a:8b:27:c0:
                    df:f6:a0:ce:6f:01:ba:88:b0:9f:00:65:28:06:39:
                    ce:da:1a:fc:5c:61:ad:02:5d:95:84:3f:85:24:3f:
                    6a:2e:c6:ad:ad:df:02:9e:e9:a0:1c:64:18:13:9a:
                    e2:6d:cf:f6:46:3b:8c:3a:eb:2b:53:77:1c:74:f7:
                    ba:ae:a7:86:a5:c3:ed:e0:6a:6b:c5:1f:43:fa:ba:
                    15:64:83:62:e7:67:ad:61:a7:55:1d:0a:cf:c5:6d:
                    d0:54:62:b6:08:45:ec:6a:6a:52:47:41:a6:c7:b8:
                    6d:3c:fb:7e:67:a3:97:ed:3f:fd:bc:d3:70:0b:4a:
                    80:e0:a6:c4:70:06:05:83:7c:f9:fd:47:3f:8b:c6:
                    44:53:07:e0:2d:8e:f8:44:55:ed:f6:54:1a:2b:69:
                    ba:c0:cf:98:0e:24:34:6e:66:6d:71:7a:19:c3:79:
                    1e:40:cc:49:8f:69:c9:9d:65:54:2e:a7:a7:ba:e1:
                    77:93:36:51:cd:62:c8:0c:3c:4b:74:f4:05:dc:18:
                    de:4b:5d:be:58:50:04:55:5d:b3:2a:5d:60:fc:1e:
                    0c:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:46:EF:0B:F0:A6:ED:22:CD:A5:A1:63:74:2E:19:CF:DF:B9:76:7E
            X509v3 Authority Key Identifier:
                keyid:56:A4:98:7B:F8:C6:B4:CD:D6:57:BB:C2:D0:A5:E1:3E:9B:62:6C:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VqSYe_jGtM3WV7vC0KXhPptibLk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8809dd-667a-4047-8104-de58698b6470/1/VqSYe_jGtM3WV7vC0KXhPptibLk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:4e:9d:b0:78:45:cd:31:45:04:a8:95:a2:4f:59:fe:b6:72:
         d2:b6:92:63:00:4a:3c:ce:08:32:47:4f:48:f0:0e:56:77:c0:
         53:b8:60:ae:2a:03:75:a0:41:f3:f3:23:84:5e:b6:67:75:4d:
         b6:6d:23:c1:cb:f9:aa:f7:aa:ef:f1:c6:d3:2d:5e:cf:08:d4:
         ca:00:02:41:9c:e4:7b:11:78:22:27:9a:04:62:b5:39:0d:2f:
         47:fe:7e:08:56:1d:2f:0a:7f:67:cd:03:8a:ed:0e:56:ee:95:
         c9:71:43:80:f0:c6:a5:66:28:c8:e4:48:9f:a2:01:63:39:75:
         95:ec:ea:95:8a:a3:22:c1:c3:1a:96:c7:a2:f0:01:8b:0b:a6:
         05:18:06:27:52:d6:8c:65:d8:ef:bb:88:93:02:42:a6:d2:f7:
         6b:b4:6f:3a:2e:d3:c5:47:fa:ef:b0:b0:44:11:b3:0e:86:e4:
         8e:96:21:9b:34:95:77:23:f8:fa:eb:5f:b5:02:8a:a7:3a:d9:
         9b:88:52:93:47:4e:b7:ca:a9:64:d1:c5:dd:0a:1a:d0:5a:81:
         30:5b:42:d3:1a:40:d1:34:7c:49:c9:53:e6:88:05:24:4e:6d:
         1f:74:e9:52:a6:6f:d5:16:4f:9c:d0:91:b7:2a:20:26:94:f5:
         ba:9d:42:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADXYZOsnnT7y7mLlZZvhvIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YTQ5ODdiZjhjNmI0Y2RkNjU3YmJjMmQwYTVlMTNlOWI2
MjZjYjkwHhcNMjYwODE1MDMwMDU1WhcNMjYwODE2MDMwMDU1WjAzMTEwLwYDVQQD
EyhiNDQ2ZWYwYmYwYTZlZDIyY2RhNWExNjM3NDJlMTljZmRmYjk3NjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxidqUGLaDMjf22N5JOBxQInYUY8
WwQTOZqMQulvppcu1GOw2/WooiqLJ8Df9qDObwG6iLCfAGUoBjnO2hr8XGGtAl2V
hD+FJD9qLsatrd8CnumgHGQYE5ribc/2RjuMOusrU3ccdPe6rqeGpcPt4GprxR9D
+roVZINi52etYadVHQrPxW3QVGK2CEXsampSR0Gmx7htPPt+Z6OX7T/9vNNwC0qA
4KbEcAYFg3z5/Uc/i8ZEUwfgLY74RFXt9lQaK2m6wM+YDiQ0bmZtcXoZw3keQMxJ
j2nJnWVULqenuuF3kzZRzWLIDDxLdPQF3BjeS12+WFAEVV2zKl1g/B4MRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRG7wvwpu0izaWhY3QuGc/fuXZ+MB8GA1UdIwQY
MBaAFFakmHv4xrTN1le7wtCl4T6bYmy5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQt
ZGU1ODY5OGI2NDcwLzEvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84ODA5ZGQtNjY3YS00MDQ3LTgxMDQtZGU1ODY5OGI2NDcw
LzEvVnFTWWVfakd0TTNXVjd2QzBLWGhQcHRpYkxrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQk6dsHhF
zTFFBKiVok9Z/rZy0raSYwBKPM4IMkdPSPAOVnfAU7hgrioDdaBB8/MjhF62Z3VN
tm0jwcv5qveq7/HG0y1ezwjUygACQZzkexF4IieaBGK1OQ0vR/5+CFYdLwp/Z80D
iu0OVu6VyXFDgPDGpWYoyORIn6IBYzl1lezqlYqjIsHDGpbHovABiwumBRgGJ1LW
jGXY77uIkwJCptL3a7RvOi7TxUf677CwRBGzDobkjpYhmzSVdyP4+utftQKKpzrZ
m4hSk0dOt8qpZNHF3Qoa0FqBMFtC0xpA0TR8SclT5ogFJE5tH3TpUqZv1RZPnNCR
tyogJpT1up1CEw==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:23:09 2026 by rpki-client