Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
File:                     V-K4ajPJ-XIUU22MopGdfzw4AM4.mft (raw, json)
Hash identifier:          OpfxeuqX0iQqjkRjtYi3l88trc1c2zjsCQdwqHpncXs=
Subject key identifier:   53:F7:8B:3A:95:CC:65:0B:E0:7C:75:89:5B:94:0D:1E:55:A6:E3:75
Authority key identifier: 57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE
Certificate issuer:       /CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
Certificate serial:       01A17D3CC8BB11DAD3A872BBD13B79F1B195
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
Manifest number:          0C2D
Signing time:             Tue 27 Oct 2026 12:01:37 +0000
Manifest this update:     Tue 27 Oct 2026 12:01:37 +0000
Manifest next update:     Wed 28 Oct 2026 12:01:37 +0000
Files and hashes:         1: BxDQYAMULDIcgzCGoRbOdQoc-sM.roa (hash: 3NcdmgeMlXSMuQ/j+h+4gy0qcuBqA1IJLcvSxfX1/aU=)
                          2: V-K4ajPJ-XIUU22MopGdfzw4AM4.crl (hash: J3iqtFxFQiJ9ep7GqFcrm3ckfhU0tK1/dl3MTph8JUA=)
                          3: zvWrg-epv6Kuwwbr_YnppFR5eP4.roa (hash: CXU1oUM5pH2/lckg4eVPlPBRQqsoIp6BUfj73FNZ/wQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 05:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7d:3c:c8:bb:11:da:d3:a8:72:bb:d1:3b:79:f1:b1:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e2b86a33c9f97214536d8ca2919d7f3c3800ce
        Validity
            Not Before: Oct 27 12:01:37 2026 GMT
            Not After : Oct 28 12:01:37 2026 GMT
        Subject: CN=53f78b3a95cc650be07c75895b940d1e55a6e375
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:81:16:a5:4e:46:9b:51:33:df:35:48:16:36:
                    19:1d:dc:71:b9:c1:3b:ae:21:ef:df:c3:34:28:35:
                    63:bb:bd:03:ff:64:2e:92:cd:d9:62:c5:97:aa:d9:
                    41:c3:b0:b9:c0:35:2e:5a:97:4f:5f:98:a9:c7:db:
                    be:8e:6e:d2:cb:47:5c:d1:e0:18:86:88:b4:56:eb:
                    96:0d:18:9d:07:e1:e7:94:3b:0d:08:a0:df:c0:ab:
                    44:c0:75:00:65:02:82:fe:07:ce:a3:e2:8a:3a:11:
                    38:d8:46:16:36:92:90:6a:27:4c:53:4c:ff:18:15:
                    97:c5:78:ce:42:fd:89:b4:cc:6c:b0:c2:21:f7:7f:
                    3b:7e:25:74:9d:00:c6:b7:f8:18:89:2d:0c:c7:de:
                    9e:1e:38:0c:18:5b:df:45:52:65:ab:46:7d:90:35:
                    ef:c8:29:6f:d9:aa:2c:2d:e9:6f:61:d0:17:5e:ff:
                    7b:82:20:8d:3e:05:d2:85:62:fe:ea:c5:9b:1f:76:
                    cd:3b:52:17:e0:e9:92:31:ff:79:b2:58:7c:75:0d:
                    6c:1c:0b:0f:ff:08:ff:cf:45:2a:a7:e2:53:dc:ed:
                    16:b8:2c:b6:ec:b3:4e:a9:dc:36:5d:9f:d9:f3:44:
                    75:ba:28:02:7e:08:1c:f0:aa:02:80:0d:7e:f7:66:
                    e1:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F7:8B:3A:95:CC:65:0B:E0:7C:75:89:5B:94:0D:1E:55:A6:E3:75
            X509v3 Authority Key Identifier:
                keyid:57:E2:B8:6A:33:C9:F9:72:14:53:6D:8C:A2:91:9D:7F:3C:38:00:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-K4ajPJ-XIUU22MopGdfzw4AM4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/92/6149a5-c8de-4c61-beb7-2201203a0bab/1/V-K4ajPJ-XIUU22MopGdfzw4AM4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:99:eb:c7:ea:e3:c7:46:b6:37:0f:5d:9e:b0:4c:46:0a:89:
         7c:89:b9:29:7b:d6:60:0e:35:6f:a1:c9:3c:25:0b:dd:99:e2:
         53:58:10:94:d5:3a:3c:23:0b:37:86:bf:54:1e:e0:4f:dd:12:
         b6:d9:ee:a1:70:fb:e7:03:a1:d8:9c:a2:e2:2d:10:dc:f9:1a:
         a4:5c:53:03:66:c6:ca:f6:93:ff:8e:35:46:2d:03:b0:26:5e:
         92:db:b3:fc:91:e0:ba:42:87:f9:87:82:36:8f:a3:e4:03:b9:
         93:e9:ff:00:d3:5d:f0:d3:93:b2:4b:b2:bc:cd:15:ca:f9:f7:
         9d:43:07:60:9b:d7:be:19:ad:a2:99:af:70:5a:f5:d7:8b:d2:
         47:8d:43:a2:d4:ae:1e:e2:4d:31:20:e1:61:36:9f:d0:86:80:
         ed:27:7d:f1:36:cb:20:b6:fa:5c:54:fe:83:cf:f6:4a:55:c8:
         bb:cc:4f:18:13:30:99:c8:28:64:3a:f9:51:7e:c5:bc:94:7a:
         d9:9a:d7:34:ba:2a:f3:1b:80:4b:38:3d:78:ab:fb:1e:07:5d:
         ad:82:06:b2:6b:54:c5:08:e0:64:56:6f:80:cd:b3:17:69:8d:
         80:59:0d:22:57:94:9e:9e:d7:66:47:f7:56:9b:11:5d:68:77:
         f4:a6:3c:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF9PMi7EdrTqHK70Tt58bGVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZTJiODZhMzNjOWY5NzIxNDUzNmQ4Y2EyOTE5ZDdmM2Mz
ODAwY2UwHhcNMjYxMDI3MTIwMTM3WhcNMjYxMDI4MTIwMTM3WjAzMTEwLwYDVQQD
Eyg1M2Y3OGIzYTk1Y2M2NTBiZTA3Yzc1ODk1Yjk0MGQxZTU1YTZlMzc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4oEWpU5Gm1Ez3zVIFjYZHdxxucE7
riHv38M0KDVju70D/2Quks3ZYsWXqtlBw7C5wDUuWpdPX5ipx9u+jm7Sy0dc0eAY
hoi0VuuWDRidB+HnlDsNCKDfwKtEwHUAZQKC/gfOo+KKOhE42EYWNpKQaidMU0z/
GBWXxXjOQv2JtMxssMIh9387fiV0nQDGt/gYiS0Mx96eHjgMGFvfRVJlq0Z9kDXv
yClv2aosLelvYdAXXv97giCNPgXShWL+6sWbH3bNO1IX4OmSMf95slh8dQ1sHAsP
/wj/z0Uqp+JT3O0WuCy27LNOqdw2XZ/Z80R1uigCfggc8KoCgA1+92bh4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP3izqVzGUL4Hx1iVuUDR5VpuN1MB8GA1UdIwQY
MBaAFFfiuGozyflyFFNtjKKRnX88OADOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVi1LNGFqUEotWElVVTIyTW9wR2Rmenc0QU00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi82MTQ5YTUtYzhkZS00YzYxLWJlYjct
MjIwMTIwM2EwYmFiLzEvVi1LNGFqUEotWElVVTIyTW9wR2Rmenc0QU00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi82MTQ5YTUtYzhkZS00YzYxLWJlYjctMjIwMTIwM2EwYmFi
LzEvVi1LNGFqUEotWElVVTIyTW9wR2Rmenc0QU00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIpnrx+rj
x0a2Nw9dnrBMRgqJfIm5KXvWYA41b6HJPCUL3ZniU1gQlNU6PCMLN4a/VB7gT90S
ttnuoXD75wOh2Jyi4i0Q3PkapFxTA2bGyvaT/441Ri0DsCZektuz/JHgukKH+YeC
No+j5AO5k+n/ANNd8NOTskuyvM0Vyvn3nUMHYJvXvhmtopmvcFr114vSR41DotSu
HuJNMSDhYTaf0IaA7Sd98TbLILb6XFT+g8/2SlXIu8xPGBMwmcgoZDr5UX7FvJR6
2ZrXNLoq8xuASzg9eKv7HgddrYIGsmtUxQjgZFZvgM2zF2mNgFkNIleUnp7XZkf3
VpsRXWh39KY8QA==
-----END CERTIFICATE-----
Generated at Tue Oct 27 17:20:08 2026 by rpki-client