Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          HI+x7aD9Zd1V17r/Du5dMLn0vY0aHtkHT6huVOkCcw8=
Subject key identifier:   EC:AD:C5:68:BE:B1:EB:1F:A4:1E:7F:3C:CB:1C:B7:72:EB:0A:3E:2E
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       01A17BBB2D88DC187CA52F70345620FF9F5D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          05B2
Signing time:             Tue 27 Oct 2026 05:00:26 +0000
Manifest this update:     Tue 27 Oct 2026 05:00:26 +0000
Manifest next update:     Wed 28 Oct 2026 05:00:26 +0000
Files and hashes:         1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: yT5by7f7Pu79pQGQ0A+zpV+W18G1AdMA90UURQqa5L8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7b:bb:2d:88:dc:18:7c:a5:2f:70:34:56:20:ff:9f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Oct 27 05:00:26 2026 GMT
            Not After : Oct 28 05:00:26 2026 GMT
        Subject: CN=ecadc568beb1eb1fa41e7f3ccb1cb772eb0a3e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:b5:c6:61:63:24:de:55:fb:29:b9:98:99:
                    dc:90:93:08:b0:c7:61:24:50:5a:cc:40:22:75:98:
                    dd:86:e2:0e:6c:36:07:d2:7a:49:77:d9:00:a9:8c:
                    f9:58:15:47:81:82:c1:85:b2:01:03:1a:14:fa:57:
                    e5:89:f5:33:0c:bd:f4:37:4f:17:53:b6:e1:44:aa:
                    ee:4e:fc:eb:64:94:f5:59:a9:cb:89:5b:cb:dc:9c:
                    ad:7e:b0:a4:d0:fb:61:0d:b0:d9:f9:79:4b:a1:cb:
                    2d:7c:70:f1:95:37:90:83:53:f8:e4:07:16:eb:6d:
                    51:51:b4:11:c9:0c:d9:b8:13:ca:87:37:a1:b2:b3:
                    40:eb:2d:f5:89:f5:89:60:bf:e4:11:21:b2:0c:37:
                    20:76:69:de:15:ec:08:6e:e4:5b:2a:ce:5c:5a:7c:
                    98:f2:e6:c2:b8:b7:60:f6:9b:51:13:04:62:6e:94:
                    6f:1f:3e:70:e6:d1:fe:03:f3:92:15:39:9a:87:3c:
                    b1:32:fc:3f:72:4a:86:f1:a4:31:c2:68:e1:94:e3:
                    cf:78:58:36:e9:79:ce:7b:c2:dd:d7:ef:c2:99:0b:
                    39:e3:52:d1:99:61:ef:41:03:9b:48:f7:d6:14:fd:
                    4c:30:17:ae:45:3a:05:3f:1a:74:be:c5:24:b4:ca:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AD:C5:68:BE:B1:EB:1F:A4:1E:7F:3C:CB:1C:B7:72:EB:0A:3E:2E
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:12:27:ad:cb:55:fb:9d:98:26:a1:6c:49:de:b3:2e:1b:b2:
         24:29:72:17:03:2e:1d:ae:2b:e5:5f:eb:d7:3f:5d:8c:f4:d8:
         4c:3f:0b:76:bf:fd:62:33:12:ed:de:c4:23:2d:6c:c8:40:76:
         ea:34:8d:52:50:00:0a:4f:03:71:a5:69:6b:2c:8d:ff:31:32:
         f3:17:4b:e8:f8:17:a8:9a:52:b8:73:22:21:68:76:0a:d8:94:
         ae:de:19:67:ba:d3:e0:79:82:5f:84:76:31:d8:26:a5:d9:ec:
         fe:38:27:f3:48:60:a7:3b:5a:e1:f9:05:f6:00:b5:8a:d3:a9:
         99:ce:8e:ac:c8:06:92:fa:a7:9f:d2:29:b1:d2:15:06:6f:d0:
         57:45:a3:d6:54:f6:b0:d9:18:81:62:10:47:d9:04:43:19:ca:
         61:18:de:90:7b:d1:96:90:c7:bc:e0:f3:da:1a:37:89:5f:08:
         b9:d2:76:c3:1c:f0:ea:6f:d6:9d:12:f4:ce:69:75:c7:f5:39:
         b0:0f:b7:f7:c9:69:27:aa:d7:3b:78:eb:e9:ba:e8:d4:5f:7f:
         0e:ac:be:61:ca:62:f6:e5:4d:d5:68:7c:21:7f:f4:1b:12:ce:
         9a:32:80:16:da:27:ee:26:63:9c:77:f1:50:5b:57:ab:0a:f6:
         f0:65:93:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF7uy2I3Bh8pS9wNFYg/59dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz
NjQ5OWMwHhcNMjYxMDI3MDUwMDI2WhcNMjYxMDI4MDUwMDI2WjAzMTEwLwYDVQQD
EyhlY2FkYzU2OGJlYjFlYjFmYTQxZTdmM2NjYjFjYjc3MmViMGEzZTJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueG1xmFjJN5V+ym5mJnckJMIsMdh
JFBazEAidZjdhuIObDYH0npJd9kAqYz5WBVHgYLBhbIBAxoU+lflifUzDL30N08X
U7bhRKruTvzrZJT1WanLiVvL3JytfrCk0PthDbDZ+XlLocstfHDxlTeQg1P45AcW
621RUbQRyQzZuBPKhzehsrNA6y31ifWJYL/kESGyDDcgdmneFewIbuRbKs5cWnyY
8ubCuLdg9ptREwRibpRvHz5w5tH+A/OSFTmahzyxMvw/ckqG8aQxwmjhlOPPeFg2
6XnOe8Ld1+/CmQs541LRmWHvQQObSPfWFP1MMBeuRToFPxp0vsUktMo8sQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOytxWi+sesfpB5/PMsct3LrCj4uMB8GA1UdIwQY
MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt
MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3
LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArxInrctV
+52YJqFsSd6zLhuyJClyFwMuHa4r5V/r1z9djPTYTD8Ldr/9YjMS7d7EIy1syEB2
6jSNUlAACk8DcaVpayyN/zEy8xdL6PgXqJpSuHMiIWh2CtiUrt4ZZ7rT4HmCX4R2
Mdgmpdns/jgn80hgpzta4fkF9gC1itOpmc6OrMgGkvqnn9IpsdIVBm/QV0Wj1lT2
sNkYgWIQR9kEQxnKYRjekHvRlpDHvODz2ho3iV8IudJ2wxzw6m/WnRL0zml1x/U5
sA+398lpJ6rXO3jr6bro1F9/Dqy+Ycpi9uVN1Wh8IX/0GxLOmjKAFton7iZjnHfx
UFtXqwr28GWT9A==
-----END CERTIFICATE-----
Generated at Tue Oct 27 12:50:08 2026 by rpki-client