Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
File:                     Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft (raw, json)
Hash identifier:          8WsuQXxGlcLKQBHOMIFoi+IeTfPkYTmopV/8wCSYFVU=
Subject key identifier:   19:62:7D:36:1F:9D:86:54:08:0D:74:28:32:46:C2:8C:3B:24:87:9F
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Certificate issuer:       /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial:       01A15C67D58412EA4F5D347342C801F15036
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
Manifest number:          1AFE
Signing time:             Wed 21 Oct 2026 03:01:11 +0000
Manifest this update:     Wed 21 Oct 2026 03:01:11 +0000
Manifest next update:     Thu 22 Oct 2026 03:01:11 +0000
Files and hashes:         1: B4c6N2MizK8adC1jI5nCnuasVyQ.roa (hash: vkr5AztZBkpOoQXyn9yDEdd3WF22aoRXCoS3gCShBNw=)
                          2: FghCADOw6Oojunwkfe8vTiF9pLI.roa (hash: uykM6bNYozSsy+cKMaytW2YENRFibcbs2I4eVEk75Gk=)
                          3: FpRKTtq_1KcjnJLKujWjVSxXxFY.roa (hash: uGBpIJ0Q8NXhQZM9sN2dTmAH+QjPVwXcHcBV4ouKmJk=)
                          4: MBFdqFLJcxVtOw-JJT6-6DPU4C4.roa (hash: 0y4l4Mi7xbMuhzKukzW/37uq5/WSDRhRc3TFpkmhncA=)
                          5: QZ671pc0AHWGiJKaiCeRWUkvi0w.roa (hash: 1qOoSO1VGJunDj9On7JrnmSQh5tAX58/tLnNsRng6ZQ=)
                          6: VF8nseeKFoW1-sQCI4yEAMSh33c.roa (hash: HnMrjXoUoap5Tw8ndP9ztKvIUxRuUHw+ETqNCU31IdI=)
                          7: Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl (hash: LppkwGdsdcyZ+Ybs/72lC/5jqMkAHCsrFUEKbVngNHE=)
                          8: b_sx65YpI1QLBEZRuGQGmmnaTnw.roa (hash: 3Il+MWS8tFj2nno2HoqXDI14YSxua6h0CGOf+Z3Kedo=)
                          9: d5wNSxT9uRKujFo7gDOfytGMHEs.roa (hash: 5QQM/ywhFwvOCB39wYqdy8qkVoB0mRZy1U/eWwm+H90=)
                          10: hRhUcbu7KZRSvnkz4CO8BJLWuH4.roa (hash: uMFCDSPSzYAtqFKyN2Vv8Q5iqVvmZBowV1Ty5ZpBTEM=)
                          11: kWjbG5o_Db94CdRN3NWSKKUVjXw.roa (hash: hKOz5xHim00nQqN9nHTkJJK9vZ0QKHkeOVauAtR5gzE=)
                          12: n9uTPhO6cyPpEsvXZmxf53LLc6s.roa (hash: utrFwmDJ3+vrF1blihW69IE07AwIQ9/EzS4iV75TiRU=)
                          13: pLWxKElNY5OK-784nWEN2jwpdxQ.roa (hash: 0LKZA0KxTRVPYyd3ngFqUnRlUHwAATWmSrpLcXXitNk=)
                          14: qLoILvDOqzV9K9GBxZphZks1tnU.roa (hash: /QV9XEO/ZKJk65wl5vLGWrkhUEz4TcA1M/MvWA4ViTU=)
                          15: sNdqARWHrIivJ5H7hwA3q97sw7k.roa (hash: +zXVOVQC6DC5w4FUaPRghjIzJZT/nXVaTwDFgNXd1ko=)
                          16: uu4RDU_XEe_o-xgd8iKxunLsRRk.roa (hash: WSVYyW0VsPbEh7XSoefAa4skPLabJDbbiTqZspuhAAA=)
                          17: wdgVJPyUsZ9-HGk_FoAzT19gu6w.roa (hash: 2mneISDicPClVA1+3cQM33ETuCO6n5ZeA2u5SBMbUwU=)
                          18: yTlDO6dWszXiBm3hduGVp38lBa4.roa (hash: SegOwCCa/6cPlpQ15U35o2VjRPgrt2I4STP15j5SvSE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:5c:67:d5:84:12:ea:4f:5d:34:73:42:c8:01:f1:50:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
        Validity
            Not Before: Oct 21 03:01:11 2026 GMT
            Not After : Oct 22 03:01:11 2026 GMT
        Subject: CN=19627d361f9d8654080d74283246c28c3b24879f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:6f:30:f4:85:b1:34:fe:c8:ef:c9:31:60:82:
                    ff:49:77:e5:64:7b:f8:cc:34:a4:20:38:f8:67:67:
                    39:ad:3a:39:22:8b:12:29:07:af:5a:a0:f6:46:59:
                    86:a2:7a:76:f9:31:5a:a5:7a:d4:00:91:60:e5:99:
                    59:e6:e3:29:40:47:75:d4:6c:50:74:77:c4:0c:51:
                    87:c8:d6:22:78:68:f7:53:1c:9a:9b:73:d4:8e:e3:
                    ea:ca:2c:19:e4:c7:fc:43:a9:77:c8:3b:1c:75:a5:
                    02:0d:4f:aa:08:08:1a:7a:8c:92:db:f8:97:47:8c:
                    85:7f:e5:9d:f8:e7:47:ad:08:29:ef:b5:b7:84:5e:
                    c0:17:17:a8:27:99:56:40:4e:8c:35:fd:b4:5a:19:
                    70:ae:ab:a0:d3:2a:7c:b8:df:d3:d6:d1:c3:0d:a4:
                    2d:7a:4d:3c:37:8a:fb:3a:92:69:6e:f5:4a:ac:04:
                    54:66:ad:0b:15:81:7e:04:ea:fb:d1:83:9a:b7:2c:
                    88:c2:0d:18:c6:44:4a:e4:9b:9e:5e:40:ee:5e:80:
                    76:81:61:49:bf:47:aa:59:0a:ac:02:04:1d:79:07:
                    72:d8:95:0a:71:3b:ca:1e:0a:96:1e:3f:c2:61:5f:
                    46:3d:3d:ac:47:ce:28:f9:e2:36:8a:52:4f:e1:39:
                    71:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:62:7D:36:1F:9D:86:54:08:0D:74:28:32:46:C2:8C:3B:24:87:9F
            X509v3 Authority Key Identifier:
                keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:5f:59:20:d4:35:d8:5d:af:f0:ab:63:c6:81:cb:30:0e:92:
         4c:54:39:c4:e4:a7:f7:1b:7e:16:f7:6f:ab:51:1a:cd:ab:2a:
         bb:c9:c1:9a:c8:77:98:62:98:dc:aa:c6:c6:9a:e0:2e:15:c7:
         8c:b0:0f:64:a4:b1:a3:4e:d9:56:0f:2f:bb:74:f0:4c:8c:e9:
         8c:b5:8f:cb:86:b3:f2:1f:e6:6d:9a:ae:5b:71:bf:f7:10:7b:
         1b:de:19:ec:5e:87:4f:9b:d8:70:a6:c3:60:9a:25:31:a4:71:
         22:7f:ac:89:15:ca:13:5b:72:84:cc:5f:77:23:a3:f4:0e:f3:
         9b:8d:7c:fb:ef:53:08:f7:ee:5f:71:b1:16:a9:5a:95:72:e2:
         a2:08:55:76:a9:cb:5c:51:41:1e:79:cc:02:55:71:19:0e:59:
         b7:8f:3f:e5:87:ed:9e:7b:f2:ce:d0:a7:66:de:d8:47:04:9d:
         e7:7a:d0:5e:65:6d:61:9a:da:54:e5:ae:0f:f4:de:cb:58:9b:
         77:da:ce:d5:ed:65:d6:03:4f:a2:7e:eb:c9:76:aa:66:1a:f3:
         4c:c2:45:90:ab:f2:6b:82:be:5e:f6:10:f0:fb:0d:6d:7b:3e:
         f1:a8:03:36:79:34:cf:49:78:91:f9:06:17:b9:75:11:46:0d:
         cd:67:e2:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFcZ9WEEupPXTRzQsgB8VA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjYxMDIxMDMwMTExWhcNMjYxMDIyMDMwMTExWjAzMTEwLwYDVQQD
EygxOTYyN2QzNjFmOWQ4NjU0MDgwZDc0MjgzMjQ2YzI4YzNiMjQ4NzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG8w9IWxNP7I78kxYIL/SXflZHv4
zDSkIDj4Z2c5rTo5IosSKQevWqD2RlmGonp2+TFapXrUAJFg5ZlZ5uMpQEd11GxQ
dHfEDFGHyNYieGj3Uxyam3PUjuPqyiwZ5Mf8Q6l3yDscdaUCDU+qCAgaeoyS2/iX
R4yFf+Wd+OdHrQgp77W3hF7AFxeoJ5lWQE6MNf20Whlwrqug0yp8uN/T1tHDDaQt
ek08N4r7OpJpbvVKrARUZq0LFYF+BOr70YOatyyIwg0YxkRK5JueXkDuXoB2gWFJ
v0eqWQqsAgQdeQdy2JUKcTvKHgqWHj/CYV9GPT2sR84o+eI2ilJP4TlxLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlifTYfnYZUCA10KDJGwow7JIefMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOV9ZINQ1
2F2v8KtjxoHLMA6STFQ5xOSn9xt+Fvdvq1Eazasqu8nBmsh3mGKY3KrGxprgLhXH
jLAPZKSxo07ZVg8vu3TwTIzpjLWPy4az8h/mbZquW3G/9xB7G94Z7F6HT5vYcKbD
YJolMaRxIn+siRXKE1tyhMxfdyOj9A7zm418++9TCPfuX3GxFqlalXLioghVdqnL
XFFBHnnMAlVxGQ5Zt48/5YftnnvyztCnZt7YRwSd53rQXmVtYZraVOWuD/Tey1ib
d9rO1e1l1gNPon7ryXaqZhrzTMJFkKvya4K+XvYQ8PsNbXs+8agDNnk0z0l4kfkG
F7l1EUYNzWfioQ==
-----END CERTIFICATE-----
Generated at Wed Oct 21 10:21:27 2026 by rpki-client