Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
File:                     VmHZZN9KhtuP-5mqiVgtpoowkIw.mft (raw, json)
Hash identifier:          a/DfmhP1cgLpVrGNuZr4SGquTzV2HzNoAup5HjQBlWE=
Subject key identifier:   DF:75:F5:D1:F0:C3:85:53:D6:98:94:9A:E5:46:AB:4A:72:B5:5B:84
Authority key identifier: 56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C
Certificate issuer:       /CN=5661d964df4a86db8ffb99aa89582da68a30908c
Certificate serial:       01A17DE20221686BD30313DDF7B6A0F55511
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
Manifest number:          065B
Signing time:             Tue 27 Oct 2026 15:02:05 +0000
Manifest this update:     Tue 27 Oct 2026 15:02:05 +0000
Manifest next update:     Wed 28 Oct 2026 15:02:05 +0000
Files and hashes:         1: VmHZZN9KhtuP-5mqiVgtpoowkIw.crl (hash: H1GuFu4l9JQyTN6Gw+Q2DQLdkk5Q7ABSsDVfwKoJ3rY=)
                          2: _Oo5q5cK7WylvggoJmoqFYskB4c.roa (hash: 5KMQiMGpqj0Z920Fo72+vT0buVYau5a+ocsxOU9eZ5U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:e2:02:21:68:6b:d3:03:13:dd:f7:b6:a0:f5:55:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5661d964df4a86db8ffb99aa89582da68a30908c
        Validity
            Not Before: Oct 27 15:02:05 2026 GMT
            Not After : Oct 28 15:02:05 2026 GMT
        Subject: CN=df75f5d1f0c38553d698949ae546ab4a72b55b84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:41:0e:51:73:f5:77:0c:24:6f:2c:58:46:e9:
                    8b:0b:81:f9:a6:85:f7:87:65:88:b0:13:13:33:03:
                    52:b0:87:1d:c0:76:9f:d2:c9:21:0a:7e:00:14:66:
                    75:df:d9:ec:ea:75:4e:8e:56:df:2c:5b:7d:bf:05:
                    41:79:44:bb:21:6e:3f:71:d3:56:ff:8a:70:76:36:
                    93:3d:2a:ba:f0:01:a8:cd:8c:ed:37:96:02:39:89:
                    ec:c6:fa:7f:17:bd:ad:16:a6:b8:00:df:a8:89:78:
                    46:ea:d8:b4:09:e0:3b:a0:9b:54:1d:13:c6:13:7f:
                    cb:f0:ad:f4:03:6a:ac:69:5f:fe:da:1a:08:c3:a4:
                    08:53:f5:e3:b3:94:03:34:fa:51:7e:83:07:79:18:
                    94:c1:26:7e:25:3f:91:a8:48:e1:3e:06:df:aa:db:
                    1a:60:9b:ae:1e:8c:6c:ed:ec:ff:0d:cd:5d:1f:2b:
                    ce:09:22:0d:72:75:a7:e2:7c:fb:37:01:83:b0:c6:
                    b3:13:55:cf:b9:b0:ed:12:39:d3:a3:80:34:ec:1e:
                    ca:b9:f5:67:16:2a:c8:fe:3e:c3:c1:ab:9e:9f:85:
                    11:a3:8a:e4:9a:a3:be:f8:31:84:7a:6f:67:50:ec:
                    85:71:be:fb:bd:ce:c3:46:06:5f:0e:72:25:63:67:
                    10:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:75:F5:D1:F0:C3:85:53:D6:98:94:9A:E5:46:AB:4A:72:B5:5B:84
            X509v3 Authority Key Identifier:
                keyid:56:61:D9:64:DF:4A:86:DB:8F:FB:99:AA:89:58:2D:A6:8A:30:90:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmHZZN9KhtuP-5mqiVgtpoowkIw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/b03a36-0807-41ef-af86-3d439b7cde72/1/VmHZZN9KhtuP-5mqiVgtpoowkIw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:a2:b0:b5:cb:b5:e9:93:47:0d:9f:e3:dd:37:de:72:98:c7:
         5e:2d:75:82:ac:f0:e7:7c:5b:db:22:81:70:36:73:cf:de:0b:
         6d:57:df:63:bb:e3:a1:96:88:69:7e:b0:c1:39:34:fa:0c:7f:
         7a:18:f9:04:d3:af:a3:d1:13:5a:a9:89:00:7e:4e:23:cf:1c:
         7e:73:05:95:ac:58:df:fe:0b:84:e2:01:dd:b2:a9:82:de:97:
         74:62:1e:bf:70:74:c4:77:84:53:79:e0:34:ae:30:0b:a0:82:
         4b:4c:14:98:bf:2b:03:57:52:d8:14:52:88:b8:b3:af:da:77:
         7a:d7:a0:7f:e8:0a:fe:a8:00:5f:f6:0f:09:4b:1f:6c:56:6d:
         47:3d:ba:9f:cb:af:2e:d3:eb:85:19:1d:50:f0:b7:f4:11:0a:
         4a:44:42:36:98:1a:d9:02:5e:17:61:35:49:9d:37:8c:47:10:
         d5:21:e1:dd:8d:be:cc:e7:53:b7:57:c4:e9:d1:e2:a3:53:f1:
         9c:c8:d9:2f:18:66:5c:44:06:9f:5e:da:50:e7:47:66:c7:d4:
         b2:3a:f7:5e:9d:f5:b2:e3:f2:07:49:c5:5d:14:b1:13:db:fd:
         06:83:e1:c3:74:52:b3:54:db:e7:2e:ac:c0:6f:00:48:49:f3:
         a3:c2:6c:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF94gIhaGvTAxPd97ag9VURMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjFkOTY0ZGY0YTg2ZGI4ZmZiOTlhYTg5NTgyZGE2OGEz
MDkwOGMwHhcNMjYxMDI3MTUwMjA1WhcNMjYxMDI4MTUwMjA1WjAzMTEwLwYDVQQD
EyhkZjc1ZjVkMWYwYzM4NTUzZDY5ODk0OWFlNTQ2YWI0YTcyYjU1Yjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUEOUXP1dwwkbyxYRumLC4H5poX3
h2WIsBMTMwNSsIcdwHaf0skhCn4AFGZ139ns6nVOjlbfLFt9vwVBeUS7IW4/cdNW
/4pwdjaTPSq68AGozYztN5YCOYnsxvp/F72tFqa4AN+oiXhG6ti0CeA7oJtUHRPG
E3/L8K30A2qsaV/+2hoIw6QIU/Xjs5QDNPpRfoMHeRiUwSZ+JT+RqEjhPgbfqtsa
YJuuHoxs7ez/Dc1dHyvOCSINcnWn4nz7NwGDsMazE1XPubDtEjnTo4A07B7KufVn
FirI/j7Dwauen4URo4rkmqO++DGEem9nUOyFcb77vc7DRgZfDnIlY2cQXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN919dHww4VT1piUmuVGq0pytVuEMB8GA1UdIwQY
MBaAFFZh2WTfSobbj/uZqolYLaaKMJCMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYt
M2Q0MzliN2NkZTcyLzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iMDNhMzYtMDgwNy00MWVmLWFmODYtM2Q0MzliN2NkZTcy
LzEvVm1IWlpOOUtodHVQLTVtcWlWZ3Rwb293a0l3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY6Kwtcu1
6ZNHDZ/j3TfecpjHXi11gqzw53xb2yKBcDZzz94LbVffY7vjoZaIaX6wwTk0+gx/
ehj5BNOvo9ETWqmJAH5OI88cfnMFlaxY3/4LhOIB3bKpgt6XdGIev3B0xHeEU3ng
NK4wC6CCS0wUmL8rA1dS2BRSiLizr9p3etegf+gK/qgAX/YPCUsfbFZtRz26n8uv
LtPrhRkdUPC39BEKSkRCNpga2QJeF2E1SZ03jEcQ1SHh3Y2+zOdTt1fE6dHio1Px
nMjZLxhmXEQGn17aUOdHZsfUsjr3Xp31suPyB0nFXRSxE9v9BoPhw3RSs1Tb5y6s
wG8ASEnzo8JsIg==
-----END CERTIFICATE-----
Generated at Tue Oct 27 22:35:45 2026 by rpki-client