Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File:                     VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier:          eZ7hoI1MOcmGX/eG37eQg5bKhbMoblY6r4MoMPPoEiE=
Subject key identifier:   D4:61:96:6C:5C:4E:80:A4:79:ED:53:A8:95:B5:92:87:CD:71:01:1B
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer:       /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial:       01A00439AF2C8F0B4BE102FEEA9850BC1824
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number:          0743
Signing time:             Sat 15 Aug 2026 07:01:24 +0000
Manifest this update:     Sat 15 Aug 2026 07:01:24 +0000
Manifest next update:     Sun 16 Aug 2026 07:01:24 +0000
Files and hashes:         1: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: j6p/YmeS1vNUhZ4cx09CIxZUmv55opAWzeM2v5m1xX8=)
                          2: r8T9kW8X8GtCFTRxWjnqQQkGt18.roa (hash: h3aumMGf0ToESbOzhSKHlEo8BiRIXKiUebFOoBpkJJ0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 07:01:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:04:39:af:2c:8f:0b:4b:e1:02:fe:ea:98:50:bc:18:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
        Validity
            Not Before: Aug 15 07:01:24 2026 GMT
            Not After : Aug 16 07:01:24 2026 GMT
        Subject: CN=d461966c5c4e80a479ed53a895b59287cd71011b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:07:7a:82:8d:b5:be:d8:1a:1c:0b:36:e0:22:
                    cf:06:05:5b:d6:c3:fa:91:62:03:c7:8b:cc:4f:d8:
                    1f:39:13:04:b0:70:b6:63:75:98:d4:d4:2d:cc:8a:
                    88:de:da:a3:eb:80:9c:7c:48:0e:d2:fe:51:6f:a1:
                    a5:a9:3e:65:2f:bf:27:91:3b:9d:98:9f:9d:97:0e:
                    ef:f3:31:53:6b:c9:d1:5c:a8:62:c6:fd:f2:f0:c0:
                    1c:87:7e:33:cb:f7:8e:5f:13:02:e6:4a:bf:fc:3a:
                    c5:f3:e9:a1:ec:fa:76:12:fb:42:16:e9:e3:96:7a:
                    30:e7:4c:64:75:e0:dc:81:37:04:f9:ff:3c:ec:96:
                    98:6d:94:cb:e0:bc:71:34:a1:91:f6:37:3f:80:41:
                    b8:ab:33:b9:1c:43:02:87:3b:c3:92:16:35:de:47:
                    41:06:82:b1:b1:c3:c9:cd:9b:86:a4:fb:5e:90:04:
                    e5:eb:7b:6b:c0:c0:0b:fd:a9:d5:60:86:2c:98:17:
                    f8:12:6c:fc:4b:69:e7:f3:81:41:ec:b5:cf:19:fc:
                    05:fb:b0:0a:aa:7e:65:e9:00:31:f5:91:ac:20:c2:
                    2f:7a:ec:31:b9:4a:2d:6f:84:08:d4:af:f0:f9:68:
                    95:7b:02:ca:73:94:1d:09:f6:7d:f4:62:44:36:6c:
                    93:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:61:96:6C:5C:4E:80:A4:79:ED:53:A8:95:B5:92:87:CD:71:01:1B
            X509v3 Authority Key Identifier:
                keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:b5:bd:c5:a7:4e:e2:b7:00:98:16:aa:b8:d7:70:e6:7f:88:
         07:95:c0:d5:1b:98:1b:f7:76:1f:61:2c:96:8f:7e:f5:1f:54:
         84:7e:bf:d9:4f:5e:bf:1f:d6:ab:81:f9:b3:fe:14:c8:f1:cc:
         0c:43:32:3a:3f:51:39:71:99:28:70:30:d9:9d:ca:83:2a:e3:
         54:f9:c7:7d:05:0f:69:01:cf:2c:81:e1:14:f1:ab:b8:2a:df:
         25:4f:5a:79:9c:32:a0:a6:5f:7a:42:42:d0:79:c1:ad:cb:28:
         0f:92:62:7e:86:20:2e:05:0d:6b:b9:f2:d2:fc:ec:65:f2:9d:
         8f:ce:b9:d0:a3:97:29:d7:9c:11:09:c8:55:2f:7e:8b:78:9c:
         d8:75:42:a9:bc:01:db:c0:e5:0a:f9:3e:51:cf:a2:d4:df:6e:
         7e:41:cd:8a:74:14:66:a1:14:8c:8c:a3:72:29:c2:32:f0:15:
         44:18:f5:af:77:6c:cc:f3:3a:be:b6:d7:3e:d2:11:e5:ae:eb:
         dd:ba:5b:47:20:53:37:98:42:d6:91:67:78:9f:66:6a:7a:ce:
         08:8b:e0:46:0c:27:10:71:63:0b:2c:a7:32:da:fc:2f:16:c8:
         b8:5d:12:c8:9b:1f:87:7e:06:4d:f5:4b:be:69:8c:14:f8:8f:
         65:50:f9:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAEOa8sjwtL4QL+6phQvBgkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDRmMjBlNDg4MjA3YjAyNWI3MDAwMGQwOGU2NTNhNjQz
Y2Y3OTAwHhcNMjYwODE1MDcwMTI0WhcNMjYwODE2MDcwMTI0WjAzMTEwLwYDVQQD
EyhkNDYxOTY2YzVjNGU4MGE0NzllZDUzYTg5NWI1OTI4N2NkNzEwMTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzwd6go21vtgaHAs24CLPBgVb1sP6
kWIDx4vMT9gfORMEsHC2Y3WY1NQtzIqI3tqj64CcfEgO0v5Rb6GlqT5lL78nkTud
mJ+dlw7v8zFTa8nRXKhixv3y8MAch34zy/eOXxMC5kq//DrF8+mh7Pp2EvtCFunj
lnow50xkdeDcgTcE+f887JaYbZTL4LxxNKGR9jc/gEG4qzO5HEMChzvDkhY13kdB
BoKxscPJzZuGpPtekATl63trwMAL/anVYIYsmBf4Emz8S2nn84FB7LXPGfwF+7AK
qn5l6QAx9ZGsIMIveuwxuUotb4QI1K/w+WiVewLKc5QdCfZ99GJENmyTYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRhlmxcToCkee1TqJW1kofNcQEbMB8GA1UdIwQY
MBaAFFbU8g5IggewJbcAANCOZTpkPPeQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYt
OTA4ZTY5MmNmM2MyLzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni82ZWI4OTktMTliYy00NWZjLTg2ZGYtOTA4ZTY5MmNmM2My
LzEvVnRUeURraUNCN0FsdHdBQTBJNWxPbVE4OTVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAorW9xadO
4rcAmBaquNdw5n+IB5XA1RuYG/d2H2Eslo9+9R9UhH6/2U9evx/Wq4H5s/4UyPHM
DEMyOj9ROXGZKHAw2Z3KgyrjVPnHfQUPaQHPLIHhFPGruCrfJU9aeZwyoKZfekJC
0HnBrcsoD5JifoYgLgUNa7ny0vzsZfKdj8650KOXKdecEQnIVS9+i3ic2HVCqbwB
28DlCvk+Uc+i1N9ufkHNinQUZqEUjIyjcinCMvAVRBj1r3dszPM6vrbXPtIR5a7r
3bpbRyBTN5hC1pFneJ9manrOCIvgRgwnEHFjCyynMtr8LxbIuF0SyJsfh34GTfVL
vmmMFPiPZVD59Q==
-----END CERTIFICATE-----
Generated at Sat Aug 15 17:50:15 2026 by rpki-client