Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File:                     VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier:          xfl6AIv7vrPH2Gx9U7DhR+SVDdHpvY806RDdSoA0QxE=
Subject key identifier:   44:A7:78:AF:E2:31:57:90:D1:7D:9C:29:95:15:FD:12:1C:A8:C0:56
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer:       /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial:       01A16269A4D1D185B69EC2B2836C02EE270C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number:          1AB9
Signing time:             Thu 22 Oct 2026 07:00:52 +0000
Manifest this update:     Thu 22 Oct 2026 07:00:52 +0000
Manifest next update:     Fri 23 Oct 2026 07:00:52 +0000
Files and hashes:         1: 6Ck2mqzrg7hAtqhKHPxxI4yqhOw.asa (hash: ceWTZE+Ei7+++I1SoKaRXO2gKyR+uMgeSyMmFEHdhE4=)
                          2: TgRImO7QCLoIe--xkdVlgWa3wjM.roa (hash: ZBNDhLKYbt3L/BOlUHPdJXGaOnbVt4RZzzrFkmwYfqo=)
                          3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: Zik2dLDPdybzIrHPFp4n8O8TOFHkSA7PIaRYfYRuwe4=)
                          4: qwMC2NCtYrZV2QDu2Av1DyMlIXE.roa (hash: pG2SeA0IgC+0M3Ig05IRMC7RLGL2RBI+OUUaT62RBBk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 22 Oct 2026 23:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:62:69:a4:d1:d1:85:b6:9e:c2:b2:83:6c:02:ee:27:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
        Validity
            Not Before: Oct 22 07:00:52 2026 GMT
            Not After : Oct 23 07:00:52 2026 GMT
        Subject: CN=44a778afe2315790d17d9c299515fd121ca8c056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:04:2b:0b:39:47:23:81:ac:ed:68:0e:e7:fc:
                    bc:13:4d:a1:f6:2c:2b:e2:f4:21:8e:b0:cb:69:a0:
                    77:3e:ae:c8:81:10:a6:ba:d2:90:68:19:f5:b7:39:
                    6e:94:90:cb:c7:42:de:cd:b4:b8:50:8d:be:2e:34:
                    f4:de:f2:03:7f:19:75:2b:3c:3c:15:3d:ee:2c:d9:
                    64:0a:36:6d:c7:26:b3:0d:ce:d2:2b:09:4a:27:bd:
                    5c:ed:76:be:ca:da:d1:19:db:49:f5:52:68:ff:ad:
                    ad:e8:72:e2:53:31:77:14:9e:67:66:7f:86:85:9c:
                    4d:6b:9a:18:77:5b:3f:ff:59:69:f4:9b:67:c5:3c:
                    82:9e:f2:4d:69:e0:3f:13:aa:ad:97:52:d8:c3:c5:
                    40:10:07:5a:6b:eb:5f:52:31:4e:b1:64:89:8a:9b:
                    f5:42:af:fb:8c:94:33:92:b1:61:48:f7:01:74:e6:
                    25:9a:5c:88:29:23:41:44:2c:b9:8c:39:ac:e2:73:
                    be:b8:4d:d9:cc:34:2c:54:b8:7f:37:00:3f:c0:1e:
                    af:15:bc:6b:ea:01:17:51:16:90:28:89:e0:4c:a9:
                    ae:2b:d2:04:cd:d8:39:ee:b7:3c:08:22:23:97:36:
                    30:db:86:62:3f:56:9a:46:58:e3:1d:4b:31:d7:97:
                    f0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A7:78:AF:E2:31:57:90:D1:7D:9C:29:95:15:FD:12:1C:A8:C0:56
            X509v3 Authority Key Identifier:
                keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a1:ea:4c:b4:5e:90:4a:5c:7a:d0:9d:23:5a:56:11:6a:84:
         0e:4f:0b:6d:b1:96:79:b9:b7:cd:f6:7f:fd:e0:98:ef:cc:52:
         be:d9:54:0c:7b:a8:79:9c:53:d4:4d:fc:99:49:a3:99:22:f6:
         9d:ea:e7:9d:5e:8c:e4:a4:e9:c5:7e:3b:76:29:74:f9:b7:48:
         6f:de:2e:e1:e5:52:30:1d:98:21:d7:83:e5:cb:b1:df:39:18:
         1b:74:a8:3e:19:d8:54:c0:41:43:86:79:e5:66:a9:74:6d:1e:
         3b:ca:71:12:bc:b8:f4:7a:b6:4d:c1:b7:62:1f:fe:5b:c0:2e:
         8f:27:cd:41:db:d0:ab:5a:5c:a2:a0:65:5c:13:09:49:0d:b9:
         49:ff:10:5e:16:9a:d5:33:38:53:48:cb:7e:f2:f1:9e:cc:f6:
         dd:d4:ad:4d:53:d3:fa:1d:49:c3:c1:17:74:a6:f9:c8:57:4c:
         f5:4f:c3:c1:ab:99:18:2e:f0:51:2b:cb:02:0d:41:48:bc:c1:
         1f:71:30:8b:60:9e:37:8d:54:c0:fb:55:07:eb:65:77:11:ae:
         a5:28:88:1e:00:f1:bc:a9:30:3b:82:7d:73:b7:41:1a:09:19:
         ae:1a:27:58:57:3d:c7:64:84:94:6b:ab:7c:ef:78:dd:fe:0c:
         20:7a:d4:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 10:36:42 2026 by rpki-client