Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File:                     VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier:          JM5Z6l6dslB4wGBVyjw61GY73VGmYueHD1r3Zoou93E=
Subject key identifier:   5D:2A:94:D8:F9:E4:A1:4E:3E:DF:D8:2B:4E:1D:77:CC:6A:CE:E7:B4
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer:       /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial:       01A178F0EC9A4097311666BAA8A70504E629
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number:          1ACC
Signing time:             Mon 26 Oct 2026 16:00:17 +0000
Manifest this update:     Mon 26 Oct 2026 16:00:17 +0000
Manifest next update:     Tue 27 Oct 2026 16:00:17 +0000
Files and hashes:         1: Cy7Rx4953-jX_LAEsh6knsBwiwI.roa (hash: RbeQiV/5rjUIyCDMoB3diQP9Z25QG9q9RvXT9QU6AAY=)
                          2: ERektKYX8bQYLZ6hhAfOvva6TN0.roa (hash: BUZ494WA2RKIxudCXcjO8KHU4mHDrQO+xeY/KFK20Bk=)
                          3: ROi23IiW5LXGPQLPRRDAb1kPWfc.roa (hash: b5UOdAEQHC2+MwjoEL2CL2U5h0Xcydkv+92friLJ6q0=)
                          4: Rph0-ywhZvi016wnJgS4mZ5Aq4Q.roa (hash: gI+MWy+X8E8yCdq+Mv/fudVnXvOj/7Bs5b4jgd3W/FI=)
                          5: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: SsNYk3hQKqlX5gtTzr8aA3S42mJQSOY+NfRy9Dan9uk=)
                          6: gvMEp1TMCJyhHJ9Ml5_cvvewGSY.roa (hash: ONubWKJOgWsNndyiyHgp5asOkTdD3CWbVh2afwmX/iY=)
                          7: nCefriJl2VPKegNYyVwj2ynX1o4.roa (hash: DrdI9RW4C32/rl7W/jweDQ18afw7p4Ra4A85oKVHBRw=)
                          8: opQiFkBqkVj4L844lKnzaIRQSzs.roa (hash: pr16BH5jtBeIewsVLh8sVivtAzs4fVPRiPHTfoJlwLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 11:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:78:f0:ec:9a:40:97:31:16:66:ba:a8:a7:05:04:e6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
        Validity
            Not Before: Oct 26 16:00:17 2026 GMT
            Not After : Oct 27 16:00:17 2026 GMT
        Subject: CN=5d2a94d8f9e4a14e3edfd82b4e1d77cc6acee7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:9f:5e:c6:23:67:05:d3:e4:41:2e:b8:3f:
                    f2:0b:dd:25:4a:a8:e4:91:95:df:d3:db:d8:db:14:
                    98:dd:59:65:90:95:bc:76:65:a5:19:8b:8c:60:26:
                    7e:03:e3:9e:19:3e:35:4a:ca:e5:a7:4c:b2:31:df:
                    69:08:ad:0d:33:f1:25:ca:08:92:31:77:dd:e6:bc:
                    15:4a:3d:02:7c:3e:38:4d:73:2e:39:fc:15:21:67:
                    e8:b8:ef:db:8d:dd:18:fc:b9:bc:ed:e9:20:b3:2a:
                    02:ac:6e:83:04:f9:89:93:a3:90:26:11:57:8e:35:
                    f3:b4:e9:c5:05:95:13:5f:f4:8f:80:17:2e:fe:12:
                    3f:6c:82:3d:d8:a0:80:cf:d1:9c:27:88:ad:a3:e5:
                    1d:86:02:cf:a1:07:88:7f:a2:b3:a7:c4:f8:9f:75:
                    85:fc:53:b3:c5:e2:71:2c:4b:c7:80:98:1e:aa:35:
                    c2:44:64:60:7d:cc:81:27:ba:5a:73:bf:3b:7c:7d:
                    f6:3e:03:b7:14:f9:7d:24:51:41:e2:bf:2d:81:bb:
                    b8:5a:8e:5e:d9:c8:00:08:cd:44:43:bb:28:3d:1a:
                    fe:5c:45:fb:10:8c:44:ad:8b:59:87:9b:25:7b:ee:
                    da:94:ac:cf:51:f5:5d:84:d9:27:bd:44:20:9b:e6:
                    ec:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2A:94:D8:F9:E4:A1:4E:3E:DF:D8:2B:4E:1D:77:CC:6A:CE:E7:B4
            X509v3 Authority Key Identifier:
                keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:5b:54:08:9b:60:87:50:a2:33:a0:e1:d0:bd:2f:b9:cf:
         53:a6:da:3c:d0:1b:15:bb:62:79:bd:1e:58:d4:a8:9a:e6:99:
         36:71:3a:1e:41:2b:79:c0:64:00:07:ad:aa:3e:55:90:ce:41:
         69:b6:5b:8d:cb:78:de:8a:e8:9c:f6:76:41:0a:a7:7e:01:56:
         a8:fa:dd:a0:26:f3:b7:22:f3:43:b0:bf:78:27:90:be:92:d0:
         e6:b9:83:88:9c:37:fa:de:91:a8:62:39:8d:e8:c1:14:2f:e0:
         38:be:db:46:8e:a6:f5:15:0e:f7:5b:09:1f:b3:da:1e:de:82:
         e1:92:d4:1d:49:a8:6b:e5:3d:e1:cb:98:3a:fc:a6:1d:b5:ad:
         44:cd:bb:86:1c:f6:d6:f6:0d:b3:90:11:00:d3:2e:74:8a:87:
         b9:d5:fc:b9:9c:68:df:d8:0b:52:b8:3a:e9:8c:96:a6:56:d4:
         4b:ee:43:c1:e3:47:e0:fa:a6:6e:44:29:3c:a3:03:cc:4a:50:
         fd:93:3c:d9:d9:ff:00:07:c4:35:b0:da:0f:61:25:6f:5d:df:
         86:ce:be:ea:7b:31:33:a1:92:56:c2:c4:92:de:da:e8:21:2d:
         a6:cc:a9:f7:7a:a4:3b:f1:bf:e5:f3:24:87:12:7d:48:3d:c7:
         3c:8e:76:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF48OyaQJcxFma6qKcFBOYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4
NWNmY2EwHhcNMjYxMDI2MTYwMDE3WhcNMjYxMDI3MTYwMDE3WjAzMTEwLwYDVQQD
Eyg1ZDJhOTRkOGY5ZTRhMTRlM2VkZmQ4MmI0ZTFkNzdjYzZhY2VlN2I0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuT2fXsYjZwXT5EEuuD/yC90lSqjk
kZXf09vY2xSY3VllkJW8dmWlGYuMYCZ+A+OeGT41Ssrlp0yyMd9pCK0NM/ElygiS
MXfd5rwVSj0CfD44TXMuOfwVIWfouO/bjd0Y/Lm87ekgsyoCrG6DBPmJk6OQJhFX
jjXztOnFBZUTX/SPgBcu/hI/bII92KCAz9GcJ4ito+UdhgLPoQeIf6Kzp8T4n3WF
/FOzxeJxLEvHgJgeqjXCRGRgfcyBJ7pac787fH32PgO3FPl9JFFB4r8tgbu4Wo5e
2cgACM1EQ7soPRr+XEX7EIxErYtZh5sle+7alKzPUfVdhNknvUQgm+bs+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF0qlNj55KFOPt/YK04dd8xqzue0MB8GA1UdIwQY
MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt
ZDNiOTBhOWI5YjQxLzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx
LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGMFbVAib
YIdQojOg4dC9L7nPU6baPNAbFbtieb0eWNSomuaZNnE6HkErecBkAAetqj5VkM5B
abZbjct43oronPZ2QQqnfgFWqPrdoCbztyLzQ7C/eCeQvpLQ5rmDiJw3+t6RqGI5
jejBFC/gOL7bRo6m9RUO91sJH7PaHt6C4ZLUHUmoa+U94cuYOvymHbWtRM27hhz2
1vYNs5ARANMudIqHudX8uZxo39gLUrg66YyWplbUS+5DweNH4PqmbkQpPKMDzEpQ
/ZM82dn/AAfENbDaD2Elb13fhs6+6nsxM6GSVsLEkt7a6CEtpsyp93qkO/G/5fMk
hxJ9SD3HPI525w==
-----END CERTIFICATE-----
Generated at Mon Oct 26 20:39:53 2026 by rpki-client