Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
File:                     Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft (raw, json)
Hash identifier:          1M7+SaA8Do2YZQGwwN7VH2Q+xfB1kjO5347PTgwYKhU=
Subject key identifier:   52:32:99:E0:4F:D7:12:AB:19:84:1B:4C:04:A6:8E:61:35:09:46:FC
Authority key identifier: 56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13
Certificate issuer:       /CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
Certificate serial:       01A04CC0121C6EB5FCD2A42FA6075B2CA34A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
Manifest number:          13C1
Signing time:             Sat 29 Aug 2026 09:00:50 +0000
Manifest this update:     Sat 29 Aug 2026 09:00:50 +0000
Manifest next update:     Sun 30 Aug 2026 09:00:50 +0000
Files and hashes:         1: 2DgeL0YmrOu9jBlL_GSUZUo0_Xk.roa (hash: 5v2bWeSNyUn4+oUjg0+VSbHVkaiGm0vFpqqmfJbIvXU=)
                          2: 4D9r9RN5T1GqSVDtczGI79beDVM.roa (hash: Y+J7VZ+8OQ1Ij53aUcGBnMKEONK3oBElTqaeO4u6KVI=)
                          3: Pcz7Dliz3LaSKytN9QUGEYaE7mU.roa (hash: 930wXICUDTbLDrUXBubgrmHOoNVvW4+zzIQc6MQtwss=)
                          4: RSMBBVev2a0S8DZ5lqE9Y7ujwPw.roa (hash: 8ZE3OtSW1eUXFtuWSE8buEOHcCFwviGH0F22sTUYJrc=)
                          5: Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl (hash: zhQJTRzERF1V6YFjNCWEq3TLyudskKMXFuPqviVLa+c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 30 Aug 2026 09:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:4c:c0:12:1c:6e:b5:fc:d2:a4:2f:a6:07:5b:2c:a3:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56afcd8fb40aae1d243c2a8ce2541a69987eed13
        Validity
            Not Before: Aug 29 09:00:50 2026 GMT
            Not After : Aug 30 09:00:50 2026 GMT
        Subject: CN=523299e04fd712ab19841b4c04a68e61350946fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b1:8c:eb:b2:71:11:e3:1f:0b:eb:75:c9:dd:
                    e8:63:82:fc:11:bd:d9:a9:5a:38:d2:70:e1:70:f2:
                    9d:2b:45:ea:ce:6b:30:0f:69:90:26:a3:34:b5:86:
                    65:de:81:f2:02:6f:18:0e:8f:9d:93:3c:52:d5:1f:
                    80:10:3a:7c:c6:f5:7f:75:df:e4:f1:5b:c4:08:ec:
                    93:53:1c:05:3b:ce:f9:3d:1a:da:01:32:cf:52:81:
                    d6:5e:67:ac:c5:73:bb:55:f3:07:85:e1:d4:cc:5f:
                    35:53:15:41:fa:a2:55:b3:40:e9:f8:95:f5:c1:f2:
                    13:8a:b7:f0:b3:99:8f:a8:1e:50:db:1c:5c:5f:a1:
                    f5:04:fa:0d:50:44:4b:1f:d4:ac:14:11:b2:e3:7b:
                    6c:dc:b6:b0:56:67:4f:75:3c:71:a2:bf:ed:9f:ff:
                    2a:c2:7a:20:e5:09:da:c1:7f:ea:36:cd:75:1b:fc:
                    d6:d1:ad:72:81:61:59:b0:f2:88:01:f0:e5:c4:b2:
                    b3:a2:d4:d5:9e:60:e9:31:9a:9d:b5:97:48:4b:1c:
                    03:18:ea:52:79:bb:4e:7e:76:7c:16:ad:f6:6a:0f:
                    bd:12:b0:84:60:8a:ec:93:69:f0:8a:95:0c:2c:2f:
                    f4:94:27:3e:57:55:0a:bf:6f:24:a9:85:29:98:32:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:99:E0:4F:D7:12:AB:19:84:1B:4C:04:A6:8E:61:35:09:46:FC
            X509v3 Authority Key Identifier:
                keyid:56:AF:CD:8F:B4:0A:AE:1D:24:3C:2A:8C:E2:54:1A:69:98:7E:ED:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/4c2637-3bbb-4a53-a216-237be773007a/1/Vq_Nj7QKrh0kPCqM4lQaaZh-7RM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:c3:83:8f:ea:75:3e:11:0f:c1:1c:da:91:fb:66:25:d2:19:
         26:3d:dd:04:b3:4b:dc:30:3f:db:80:c4:86:11:bc:9c:c0:b8:
         3e:88:08:01:eb:38:7d:d3:e8:1c:3e:5b:32:a7:96:be:33:96:
         f0:9c:65:a3:5a:e6:a7:66:ae:3c:34:e2:f1:f4:3f:48:98:1a:
         1d:58:ab:fa:ba:3f:09:b1:1e:7c:c4:ce:92:82:58:37:38:83:
         91:bd:c0:15:cb:4b:ce:04:8b:25:36:77:81:a3:b1:72:a6:1c:
         0d:31:8d:d2:bc:58:78:b6:65:37:26:90:68:3a:18:4a:1e:2e:
         c0:31:ce:f4:b7:5f:af:f8:11:c0:0b:5e:a3:9f:d0:53:dc:6b:
         9d:3f:0d:e1:0b:8e:4a:c8:e9:2b:08:d0:74:7c:b6:30:bd:d6:
         11:cf:62:b8:c3:2d:a4:13:0d:6d:6e:2b:4b:73:95:d2:43:0e:
         63:e1:ed:14:05:9b:69:23:f8:d1:1d:b4:8c:04:e2:c3:4d:77:
         db:3a:41:d3:be:f0:db:2e:e4:40:df:f8:df:4a:01:b8:28:6b:
         67:8e:23:7c:c2:b8:6b:19:a3:cf:5a:84:70:54:b8:d2:e1:82:
         6b:38:08:aa:40:42:9a:38:3b:35:7d:f6:cc:8f:df:22:1a:dd:
         5c:8e:1a:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBMwBIcbrX80qQvpgdbLKNKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWZjZDhmYjQwYWFlMWQyNDNjMmE4Y2UyNTQxYTY5OTg3
ZWVkMTMwHhcNMjYwODI5MDkwMDUwWhcNMjYwODMwMDkwMDUwWjAzMTEwLwYDVQQD
Eyg1MjMyOTllMDRmZDcxMmFiMTk4NDFiNGMwNGE2OGU2MTM1MDk0NmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rGM67JxEeMfC+t1yd3oY4L8Eb3Z
qVo40nDhcPKdK0XqzmswD2mQJqM0tYZl3oHyAm8YDo+dkzxS1R+AEDp8xvV/dd/k
8VvECOyTUxwFO875PRraATLPUoHWXmesxXO7VfMHheHUzF81UxVB+qJVs0Dp+JX1
wfITirfws5mPqB5Q2xxcX6H1BPoNUERLH9SsFBGy43ts3LawVmdPdTxxor/tn/8q
wnog5QnawX/qNs11G/zW0a1ygWFZsPKIAfDlxLKzotTVnmDpMZqdtZdISxwDGOpS
ebtOfnZ8Fq32ag+9ErCEYIrsk2nwipUMLC/0lCc+V1UKv28kqYUpmDKlKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFIymeBP1xKrGYQbTASmjmE1CUb8MB8GA1UdIwQY
MBaAFFavzY+0Cq4dJDwqjOJUGmmYfu0TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYt
MjM3YmU3NzMwMDdhLzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS80YzI2MzctM2JiYi00YTUzLWEyMTYtMjM3YmU3NzMwMDdh
LzEvVnFfTmo3UUtyaDBrUENxTTRsUWFhWmgtN1JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbsODj+p1
PhEPwRzakftmJdIZJj3dBLNL3DA/24DEhhG8nMC4PogIAes4fdPoHD5bMqeWvjOW
8Jxlo1rmp2auPDTi8fQ/SJgaHVir+ro/CbEefMTOkoJYNziDkb3AFctLzgSLJTZ3
gaOxcqYcDTGN0rxYeLZlNyaQaDoYSh4uwDHO9Ldfr/gRwAteo5/QU9xrnT8N4QuO
SsjpKwjQdHy2ML3WEc9iuMMtpBMNbW4rS3OV0kMOY+HtFAWbaSP40R20jATiw013
2zpB077w2y7kQN/430oBuChrZ44jfMK4axmjz1qEcFS40uGCazgIqkBCmjg7NX32
zI/fIhrdXI4aaA==
-----END CERTIFICATE-----
Generated at Sat Aug 29 13:55:33 2026 by rpki-client