Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
File:                     VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft (raw, json)
Hash identifier:          0dgjtiKlB3M7iTi/1xVy9Qc17t4dGLQrZ9j2UNEIWeg=
Subject key identifier:   E4:D7:56:A2:8B:F7:79:F1:6B:28:F1:F5:F0:4C:95:7A:56:75:B7:9D
Authority key identifier: 54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6
Certificate issuer:       /CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
Certificate serial:       01A00213D43C75399540510F971126DA872B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
Manifest number:          14E0
Signing time:             Fri 14 Aug 2026 21:00:49 +0000
Manifest this update:     Fri 14 Aug 2026 21:00:49 +0000
Manifest next update:     Sat 15 Aug 2026 21:00:49 +0000
Files and hashes:         1: VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl (hash: ixd59tA7PI4IHAds1xdVpZMZ7CdVGwd+66MkjlCAbEs=)
                          2: pGu8GcbbZbLZt-kWBlX8mkJ2KcQ.roa (hash: ZyqI4jtad4ACDtzdoYJgjoRlgqeJuJh17Jd3WnDxfww=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:13:d4:3c:75:39:95:40:51:0f:97:11:26:da:87:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543e20bf5f252b1bdbd21dc99d94cd97ea7f0fe6
        Validity
            Not Before: Aug 14 21:00:49 2026 GMT
            Not After : Aug 15 21:00:49 2026 GMT
        Subject: CN=e4d756a28bf779f16b28f1f5f04c957a5675b79d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:a8:76:19:a0:f7:59:a9:4f:c6:21:aa:ff:c5:
                    81:5d:c3:c8:c3:9a:55:a8:7a:e8:b3:bb:8b:61:ab:
                    df:4d:7c:cb:05:89:78:78:fd:89:65:13:e3:d6:e0:
                    21:ac:6a:5c:9f:30:e7:fd:81:63:0a:98:b6:9a:c0:
                    75:cb:fc:6e:34:ae:d5:1b:2f:3f:30:d7:e6:37:2c:
                    2e:1f:77:e7:1f:a8:23:f6:53:46:5c:da:e2:3a:40:
                    a3:64:66:9a:c4:78:d2:c1:df:b9:7a:ce:ae:5c:6f:
                    c8:d7:ef:ce:ef:1b:c2:81:b6:ee:72:20:9d:df:3f:
                    45:90:7b:62:7c:bd:2b:2a:12:ec:92:b6:a6:ae:e9:
                    5f:42:6f:61:33:ea:5b:7f:06:40:94:82:1a:31:a6:
                    3e:4f:c5:9c:6c:23:3d:f2:b6:ad:65:36:a5:3b:21:
                    3a:80:e1:41:74:a7:a8:5f:10:b0:fa:ea:18:bd:ad:
                    97:c7:8f:fb:35:5b:0e:55:34:63:8d:e4:d7:fb:3b:
                    89:05:f9:21:dd:a6:6a:b9:58:5b:e0:13:9d:bc:e7:
                    a7:80:df:ce:6c:36:05:17:fa:df:06:ee:14:f6:70:
                    59:88:e5:3c:33:23:bc:13:ef:95:e7:3d:d4:1b:73:
                    d2:44:29:bc:66:ba:5e:57:e9:02:de:2f:2c:ff:02:
                    65:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D7:56:A2:8B:F7:79:F1:6B:28:F1:F5:F0:4C:95:7A:56:75:B7:9D
            X509v3 Authority Key Identifier:
                keyid:54:3E:20:BF:5F:25:2B:1B:DB:D2:1D:C9:9D:94:CD:97:EA:7F:0F:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VD4gv18lKxvb0h3JnZTNl-p_D-Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/4e87a6-6536-454a-a59e-d5ad996a1ac8/1/VD4gv18lKxvb0h3JnZTNl-p_D-Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:aa:8f:93:7c:b8:89:0b:7b:17:0d:8a:25:24:d1:03:04:04:
         53:c8:bf:ed:68:70:85:59:ee:b5:f2:28:5c:f8:f5:fa:a2:b9:
         34:6a:a1:df:09:46:2d:3d:cc:b8:39:fd:f0:05:0d:78:0d:79:
         dc:0d:e0:12:66:5f:b4:2f:b5:7d:71:9a:5f:05:d4:71:85:7f:
         16:2f:5a:af:d4:e9:6d:b8:e3:3c:af:ac:f1:ad:e8:79:cd:95:
         95:d6:d2:38:55:e9:9f:14:ed:fe:43:c9:61:61:f1:bb:b1:93:
         f3:89:d2:c7:94:67:1e:5f:cd:c5:05:fc:f1:b7:33:ef:bf:e1:
         d4:72:f8:c2:99:08:b8:83:cd:72:32:65:21:7b:3a:0a:65:ef:
         43:15:64:bc:2a:0b:60:9a:42:c9:5c:c5:6f:73:2c:3d:a7:a8:
         b3:20:ad:18:49:48:87:42:16:8e:3b:8f:44:6f:36:2d:23:97:
         ba:fb:21:28:93:73:f1:b0:5b:15:35:bc:bc:06:00:ad:58:de:
         d3:76:c8:9d:fc:18:6a:57:30:db:01:48:2b:da:5f:04:1b:6e:
         e6:15:cb:ae:31:fe:a8:5d:ac:39:b0:df:6e:fb:db:1a:dc:a1:
         bb:21:fe:aa:13:17:5e:2a:a3:82:da:2b:46:ae:de:7b:c7:2d:
         29:3f:eb:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACE9Q8dTmVQFEPlxEm2ocrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2UyMGJmNWYyNTJiMWJkYmQyMWRjOTlkOTRjZDk3ZWE3
ZjBmZTYwHhcNMjYwODE0MjEwMDQ5WhcNMjYwODE1MjEwMDQ5WjAzMTEwLwYDVQQD
EyhlNGQ3NTZhMjhiZjc3OWYxNmIyOGYxZjVmMDRjOTU3YTU2NzViNzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoah2GaD3WalPxiGq/8WBXcPIw5pV
qHros7uLYavfTXzLBYl4eP2JZRPj1uAhrGpcnzDn/YFjCpi2msB1y/xuNK7VGy8/
MNfmNywuH3fnH6gj9lNGXNriOkCjZGaaxHjSwd+5es6uXG/I1+/O7xvCgbbuciCd
3z9FkHtifL0rKhLskramrulfQm9hM+pbfwZAlIIaMaY+T8WcbCM98ratZTalOyE6
gOFBdKeoXxCw+uoYva2Xx4/7NVsOVTRjjeTX+zuJBfkh3aZquVhb4BOdvOengN/O
bDYFF/rfBu4U9nBZiOU8MyO8E++V5z3UG3PSRCm8ZrpeV+kC3i8s/wJlMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOTXVqKL93nxayjx9fBMlXpWdbedMB8GA1UdIwQY
MBaAFFQ+IL9fJSsb29IdyZ2UzZfqfw/mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUt
ZDVhZDk5NmExYWM4LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS80ZTg3YTYtNjUzNi00NTRhLWE1OWUtZDVhZDk5NmExYWM4
LzEvVkQ0Z3YxOGxLeHZiMGgzSm5aVE5sLXBfRC1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk6qPk3y4
iQt7Fw2KJSTRAwQEU8i/7WhwhVnutfIoXPj1+qK5NGqh3wlGLT3MuDn98AUNeA15
3A3gEmZftC+1fXGaXwXUcYV/Fi9ar9TpbbjjPK+s8a3oec2VldbSOFXpnxTt/kPJ
YWHxu7GT84nSx5RnHl/NxQX88bcz77/h1HL4wpkIuIPNcjJlIXs6CmXvQxVkvCoL
YJpCyVzFb3MsPaeosyCtGElIh0IWjjuPRG82LSOXuvshKJNz8bBbFTW8vAYArVje
03bInfwYalcw2wFIK9pfBBtu5hXLrjH+qF2sObDfbvvbGtyhuyH+qhMXXiqjgtor
Rq7ee8ctKT/rkg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 04:23:30 2026 by rpki-client