Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File:                     VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier:          nZqZVQwyCy6B9vRHBkzuRbvXE0lIukjv7m2eQu+cPWY=
Subject key identifier:   E5:DA:87:55:AA:C8:EB:F9:A1:80:99:4B:57:A3:A5:94:4E:DA:9D:E7
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer:       /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial:       01A17739FEBFC29E042ED36B8B6512F35A74
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number:          0FD2
Signing time:             Mon 26 Oct 2026 08:00:51 +0000
Manifest this update:     Mon 26 Oct 2026 08:00:51 +0000
Manifest next update:     Tue 27 Oct 2026 08:00:51 +0000
Files and hashes:         1: M-FsfGOycf9jYfp9tqtSOE1tveg.roa (hash: KbWLzZCgilO6OBGCbfqwG+EF0N+c9KwghmXNtRevPUA=)
                          2: OC1nyRt0bfVZANX8lUlsmij_SRQ.roa (hash: Rdwkl90u1nSZHEd8rY7u8aTFZGWKHVXtuaJS4W++hPQ=)
                          3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: iEjRBSFBbRAIgu98QyJZ3uo9UV8U6Z02iNb7RGXIpvQ=)
                          4: VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa (hash: LHcWGrhhqmQEefD63qRAeICnBie6NA3TujUcOgPmo8Q=)
                          5: X8URGrQy5lQVgKZucRbyZdlIJ0A.roa (hash: v3GGPEKUSmn7q4SXBMTsOj2RRQGTLoKv6ZyqiXOL8do=)
                          6: tEALMFY5mRNnPeI1w2B4fh6s5fw.roa (hash: OpvOgmRGG0JJ9f1GQilIMwIzyL+4wnLk8rAzuKjlbwM=)
                          7: tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa (hash: mCMHaaXhfT9VeDu9M4tgELO+5HgeDqSNi4Gr5v6WmTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 27 Oct 2026 08:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:77:39:fe:bf:c2:9e:04:2e:d3:6b:8b:65:12:f3:5a:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
        Validity
            Not Before: Oct 26 08:00:51 2026 GMT
            Not After : Oct 27 08:00:51 2026 GMT
        Subject: CN=e5da8755aac8ebf9a180994b57a3a5944eda9de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:0a:fb:b9:d9:bf:7e:4e:f8:53:cc:1f:30:
                    19:02:e6:d9:0c:7b:8d:3c:04:5c:c5:e5:9d:4d:4d:
                    f1:0a:0e:ec:45:51:05:99:2f:1d:c9:ef:43:a0:9c:
                    d6:cf:02:f6:c0:b4:d8:4e:04:7b:28:e6:e5:ca:db:
                    dc:19:1b:8a:71:9d:db:35:0a:17:1a:87:bf:91:d1:
                    b3:e7:b5:4e:70:1a:ef:4d:51:a1:80:82:e7:e0:f9:
                    fc:32:8d:80:b1:3a:ae:1e:c3:a4:e1:16:26:6b:ae:
                    71:29:11:a1:ef:50:1a:f0:16:15:31:da:00:4d:0d:
                    8d:0b:82:a9:f4:17:59:18:3b:26:90:a3:75:60:e1:
                    13:9f:dd:08:19:5f:d8:d4:d1:21:01:17:a5:69:0c:
                    e8:93:ed:ed:55:f4:d0:c3:62:ff:79:e8:aa:a7:d7:
                    6b:8d:95:cf:d4:9c:d0:f3:19:81:7b:7a:89:95:b1:
                    89:b5:67:10:8b:d8:c1:78:a8:6a:cd:99:90:0a:61:
                    67:0b:53:f5:1c:ae:1c:da:fd:ef:db:c9:dd:6b:fd:
                    fd:c2:17:7c:1f:a3:7c:a3:2a:a5:9b:5b:04:fb:17:
                    ae:aa:c2:3d:f1:4c:8e:25:d4:07:b0:0a:8c:b3:2a:
                    bf:bc:b3:75:d4:6a:bd:fa:ce:8e:90:98:89:6d:53:
                    dd:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:DA:87:55:AA:C8:EB:F9:A1:80:99:4B:57:A3:A5:94:4E:DA:9D:E7
            X509v3 Authority Key Identifier:
                keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:5a:0a:ea:7b:38:85:fd:02:df:f7:e8:37:97:f1:25:f3:4b:
         94:52:d6:16:7b:e9:16:3a:11:fa:d8:08:6a:5a:1b:2b:43:9e:
         8c:96:97:ca:da:42:d7:e3:99:d7:76:fa:da:ae:54:48:4c:f5:
         88:f5:2a:9c:ef:80:37:e9:42:39:68:fc:47:e0:21:26:5d:e9:
         22:79:7e:f9:60:9d:35:4f:80:ef:15:89:fc:7d:da:e9:7f:14:
         e2:97:18:2d:93:5f:d4:83:4a:d3:c7:cc:6c:83:aa:e3:46:6b:
         7f:cf:6c:d3:48:e2:f7:04:63:88:82:82:44:aa:7c:9a:0d:92:
         2a:c6:82:fa:c8:22:bc:3e:11:d5:f1:1d:e0:22:d5:09:b8:b3:
         7b:76:d5:00:76:1a:84:23:03:c8:e6:97:19:37:8b:37:c9:b2:
         c6:9b:33:5b:98:a0:11:d6:2c:cf:74:7f:17:60:27:98:e0:40:
         96:92:26:e1:30:8e:80:31:47:a5:34:db:68:6f:d2:7e:3f:cc:
         fb:6e:87:19:0e:1e:25:40:90:1f:1f:44:5b:1b:f6:13:7f:4e:
         54:41:6d:95:66:69:d0:1c:69:17:07:58:52:6d:2f:d1:05:85:
         eb:6d:b1:3c:b7:1c:5c:0c:3f:3e:15:a1:c5:dd:7e:b7:ce:05:
         b0:6a:f3:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:36:22 2026 by rpki-client