Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
File:                     VcmyAl4OaVgI9rYe4nau1PtWgM0.mft (raw, json)
Hash identifier:          g6X6b7hDP7n+U+c/uHg3podhqFDsvZq0HgTobc7KnU4=
Subject key identifier:   B4:6F:6B:B6:E2:4A:14:6A:FA:69:95:76:C7:DC:67:3F:11:AA:2C:38
Authority key identifier: 55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD
Certificate issuer:       /CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
Certificate serial:       019DA18A69E41C1EEE82F425E07A20801B07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
Manifest number:          0247
Signing time:             Sat 18 Apr 2026 17:01:36 +0000
Manifest this update:     Sat 18 Apr 2026 17:01:36 +0000
Manifest next update:     Sun 19 Apr 2026 17:01:36 +0000
Files and hashes:         1: 3WBao4FkX8D-JaaDlye4M6OWSBY.roa (hash: 40SUb7nBHYC91lmOMmMea5ZkyB55LwXVNxfjfa4w1fQ=)
                          2: 5P-WAPyoM2pTC2hv8LQETP2oWJA.roa (hash: lGDaoNO2e4pY4T1TCUo7lQoxNs1+eOCSqWSzAv+esrc=)
                          3: 9pxQryKB7-OGwAXFhJkPHxMTQ7U.roa (hash: LaU9wAoPLEVyPbiNPfNuiL4UkPIf6M+Y7nzkcS2LF6A=)
                          4: AHXE5zE6Dibj4vBuyqtjH9izM0A.roa (hash: FuRo5Hu4yhUEnyMQZkyeyKvJXWvWU2jVjkpwh+ACVy4=)
                          5: JmrA20hXcgEouYMLiKJd790Bt_4.roa (hash: B9aRBY3vemH0TPXvaVG7hy4cuWE8wmfHyFOfNnU2YHM=)
                          6: ODMmdO7VHrUNJnL-krn6dPKUZfE.roa (hash: J27GVy15VCkrkQF7yJl60/0RKVCaoGRbqz5vXXNOcBI=)
                          7: OGdZxTPmloNqGIAa-UfynkuV3EM.roa (hash: m/cAPkjPkOHWq6QUdY18VpClF9YEIKI7RmQsvt84toU=)
                          8: VcmyAl4OaVgI9rYe4nau1PtWgM0.crl (hash: X7OmNeRfpwgQyQj068GfrjfezrXeINSCOyWwOt5Xsfc=)
                          9: Wd8q0moFLVsMx4osEJ4ykMbq8Ts.roa (hash: LFxueImaYOM8Jlt+03DqVGTNqeLO5BW1td2F3tglDys=)
                          10: k59Mydf3CaCenxWIdBBJXo1M_VE.roa (hash: TwBGuprthVfzyh9lRO6h1rq5RqiAM/706s9ICYHjPuU=)
                          11: yFq332nWFdiqD5k33xmPlYMI9Po.roa (hash: EtwbF3PSgqJjlOdjql8GO41noLHKBbeJXtlCFsZpbMg=)
                          12: zbSB5vbt2ENBKedPqL0MbCvcsiE.roa (hash: qNcA+DNLWSfrmhFl96O2n/H/XQwiRSiEXO74X3eY3Lo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 19 Apr 2026 17:01:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a1:8a:69:e4:1c:1e:ee:82:f4:25:e0:7a:20:80:1b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9b2025e0e695808f6b61ee276aed4fb5680cd
        Validity
            Not Before: Apr 18 17:01:36 2026 GMT
            Not After : Apr 19 17:01:36 2026 GMT
        Subject: CN=b46f6bb6e24a146afa699576c7dc673f11aa2c38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:c2:73:02:c8:56:d0:2b:a8:0a:cf:37:56:5e:
                    bf:bb:f6:1e:73:be:c7:85:ec:30:f8:89:65:42:31:
                    b4:d7:ed:d4:61:05:d4:85:f9:75:aa:9f:b7:3b:79:
                    ab:a2:bb:ed:c7:ca:2d:3c:ca:5b:a8:f1:ae:4e:bc:
                    ce:43:97:c5:8d:36:29:8e:d0:26:c3:17:12:a5:5e:
                    54:4c:ad:37:12:2c:db:f3:cb:45:ac:56:f3:4d:3d:
                    28:36:88:2c:d5:ab:da:f8:2b:d3:e6:45:0b:6e:3b:
                    3e:ef:0f:a2:c8:a9:09:a1:fb:02:bb:c4:c1:78:4c:
                    7d:aa:3b:4f:43:7c:8c:e0:e7:e5:9f:56:e3:d6:22:
                    d7:c0:74:5d:13:47:e6:cc:f6:14:91:39:89:bf:d1:
                    ee:a1:09:d8:ae:14:56:c3:69:d0:75:84:6b:04:71:
                    5c:6c:4f:f0:48:90:65:27:56:29:f5:0a:7d:82:79:
                    e1:ac:dc:7c:fa:95:25:24:b4:2f:ae:db:28:b0:aa:
                    2b:28:7d:ff:59:3e:38:39:f0:14:a6:13:b6:72:ab:
                    29:3e:02:c6:5a:f5:85:7d:e8:bd:fb:bc:1c:92:fa:
                    00:a2:24:9a:ce:18:e3:56:6b:b5:8d:c2:5e:90:63:
                    72:4c:59:ef:4c:aa:71:ae:49:71:1b:46:f4:c0:bf:
                    1a:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:6F:6B:B6:E2:4A:14:6A:FA:69:95:76:C7:DC:67:3F:11:AA:2C:38
            X509v3 Authority Key Identifier:
                keyid:55:C9:B2:02:5E:0E:69:58:08:F6:B6:1E:E2:76:AE:D4:FB:56:80:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VcmyAl4OaVgI9rYe4nau1PtWgM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/6366b4-dd6f-4040-8895-71be0d51919d/1/VcmyAl4OaVgI9rYe4nau1PtWgM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:4f:f2:f3:d5:d6:40:db:54:bb:75:2f:cf:4b:77:80:9a:38:
         df:70:7d:eb:54:b6:d4:62:1b:fd:68:53:8c:99:00:cd:fe:a6:
         f7:27:c2:f0:14:72:a4:d0:c5:d7:f1:5f:db:05:75:80:38:44:
         ca:4f:01:48:91:36:a1:37:0f:11:f0:78:48:e3:60:b6:fc:12:
         4f:a0:d2:24:0d:8a:5b:4f:9a:1b:e9:04:3c:8a:a7:28:ea:77:
         61:ee:13:63:1e:bf:59:33:0c:99:ba:18:a5:6c:db:aa:ca:38:
         4a:35:c3:dd:2c:10:86:bf:c9:c8:78:0f:8f:02:2e:e6:90:6d:
         64:81:e9:e6:57:af:c4:fe:a2:7c:04:b0:9d:b1:bf:10:79:dd:
         71:47:81:13:a8:4a:e6:95:af:b5:73:cd:78:b8:84:4a:bd:26:
         26:23:0c:37:a0:c0:b5:4f:5e:6e:8d:66:0b:8e:e0:67:13:df:
         56:76:3b:02:5d:b5:7f:2f:23:99:6a:d9:42:4c:c9:3a:82:a7:
         53:c9:e7:40:42:c9:38:ed:5a:ac:28:6e:61:21:8b:7b:06:b9:
         95:0d:22:5a:b9:3d:88:5c:af:3d:0c:18:82:ba:77:26:0f:18:
         b4:79:2f:8f:eb:8f:29:c3:50:8d:df:79:8f:94:f9:b6:4e:73:
         56:1a:18:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2himnkHB7ugvQl4HoggBsHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YzliMjAyNWUwZTY5NTgwOGY2YjYxZWUyNzZhZWQ0ZmI1
NjgwY2QwHhcNMjYwNDE4MTcwMTM2WhcNMjYwNDE5MTcwMTM2WjAzMTEwLwYDVQQD
EyhiNDZmNmJiNmUyNGExNDZhZmE2OTk1NzZjN2RjNjczZjExYWEyYzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8JzAshW0CuoCs83Vl6/u/Yec77H
heww+IllQjG01+3UYQXUhfl1qp+3O3mrorvtx8otPMpbqPGuTrzOQ5fFjTYpjtAm
wxcSpV5UTK03Eizb88tFrFbzTT0oNogs1ava+CvT5kULbjs+7w+iyKkJofsCu8TB
eEx9qjtPQ3yM4Ofln1bj1iLXwHRdE0fmzPYUkTmJv9HuoQnYrhRWw2nQdYRrBHFc
bE/wSJBlJ1Yp9Qp9gnnhrNx8+pUlJLQvrtsosKorKH3/WT44OfAUphO2cqspPgLG
WvWFfei9+7wckvoAoiSazhjjVmu1jcJekGNyTFnvTKpxrklxG0b0wL8aQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRva7biShRq+mmVdsfcZz8Rqiw4MB8GA1UdIwQY
MBaAFFXJsgJeDmlYCPa2HuJ2rtT7VoDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUt
NzFiZTBkNTE5MTlkLzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS82MzY2YjQtZGQ2Zi00MDQwLTg4OTUtNzFiZTBkNTE5MTlk
LzEvVmNteUFsNE9hVmdJOXJZZTRuYXUxUHRXZ00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANE/y89XW
QNtUu3Uvz0t3gJo433B961S21GIb/WhTjJkAzf6m9yfC8BRypNDF1/Ff2wV1gDhE
yk8BSJE2oTcPEfB4SONgtvwST6DSJA2KW0+aG+kEPIqnKOp3Ye4TYx6/WTMMmboY
pWzbqso4SjXD3SwQhr/JyHgPjwIu5pBtZIHp5levxP6ifASwnbG/EHndcUeBE6hK
5pWvtXPNeLiESr0mJiMMN6DAtU9ebo1mC47gZxPfVnY7Al21fy8jmWrZQkzJOoKn
U8nnQELJOO1arChuYSGLewa5lQ0iWrk9iFyvPQwYgrp3Jg8YtHkvj+uPKcNQjd95
j5T5tk5zVhoY3w==
-----END CERTIFICATE-----
Generated at Sun Apr 19 00:56:38 2026 by rpki-client