Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
File:                     V_ZNsaQq2-ncMibryAr7t11Kfxg.mft (raw, json)
Hash identifier:          ATPOxbWXckHOeAyFOraG2aaNxTecD5pE16m3C2ok0gs=
Subject key identifier:   A4:61:4D:C0:50:28:C1:50:E6:83:2E:A1:A0:F3:69:6E:F1:7D:56:18
Authority key identifier: 57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18
Certificate issuer:       /CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
Certificate serial:       01A13AB6EEB601A213D615071107199BE8EE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
Manifest number:          1A5E
Signing time:             Wed 14 Oct 2026 14:00:29 +0000
Manifest this update:     Wed 14 Oct 2026 14:00:29 +0000
Manifest next update:     Thu 15 Oct 2026 14:00:29 +0000
Files and hashes:         1: 1K2LFFiurWkSS6BehPIABgELzig.roa (hash: eUzuwicyTeWiMVFNehYoQf9+T/XhqLc10wnGWFbChM0=)
                          2: V_ZNsaQq2-ncMibryAr7t11Kfxg.crl (hash: 3TPpYI5GhngYfniy8djqb5NeuJyabwREWFqjJjmuL5w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 14:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:b6:ee:b6:01:a2:13:d6:15:07:11:07:19:9b:e8:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57f64db1a42adbe9dc3226ebc80afbb75d4a7f18
        Validity
            Not Before: Oct 14 14:00:29 2026 GMT
            Not After : Oct 15 14:00:29 2026 GMT
        Subject: CN=a4614dc05028c150e6832ea1a0f3696ef17d5618
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:34:a6:f3:4b:32:6c:e2:49:87:2c:05:74:69:
                    4d:83:8f:10:23:32:21:93:84:f9:63:25:43:99:2a:
                    9b:51:fb:62:34:73:e8:bb:7a:b2:c3:15:6f:cd:df:
                    75:26:55:4b:58:15:d7:75:aa:e3:8c:e9:cc:e8:39:
                    a7:58:23:ec:17:24:c7:67:f7:72:89:04:8a:6f:9f:
                    43:15:64:27:ad:85:d0:33:6c:00:ba:01:35:a0:10:
                    24:1a:64:df:f4:52:a0:ab:ed:64:19:03:cd:d2:7a:
                    17:59:d9:83:85:61:ef:2a:35:4f:c0:54:2b:39:88:
                    ce:10:cb:67:a5:17:fe:a3:c0:8b:89:52:c2:10:46:
                    82:27:b1:85:c2:06:81:63:ee:71:60:fa:34:81:d9:
                    9e:38:1a:eb:fb:6f:7d:e1:d9:fd:08:79:ee:d1:03:
                    47:c1:2f:bd:77:96:f4:05:ff:bb:7a:79:27:03:ab:
                    23:7d:a6:1d:6b:ea:55:d3:79:5a:a3:d6:9a:24:b2:
                    de:e9:ee:b8:cc:af:a6:0b:7b:3f:a7:0f:ad:14:2e:
                    f0:0a:c0:af:b1:23:76:ff:db:9a:c7:e0:07:16:9a:
                    11:d3:4a:a8:ac:d4:38:76:c0:15:1f:78:0d:4a:49:
                    a1:c2:5a:3d:b4:f0:9e:37:e1:18:f5:d3:1b:63:d7:
                    ef:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:61:4D:C0:50:28:C1:50:E6:83:2E:A1:A0:F3:69:6E:F1:7D:56:18
            X509v3 Authority Key Identifier:
                keyid:57:F6:4D:B1:A4:2A:DB:E9:DC:32:26:EB:C8:0A:FB:B7:5D:4A:7F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V_ZNsaQq2-ncMibryAr7t11Kfxg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/ee96f0-a091-4b85-aff9-1e82877c1462/1/V_ZNsaQq2-ncMibryAr7t11Kfxg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:8c:22:b6:92:ec:a6:e0:c0:73:35:b7:1c:a7:70:fd:76:af:
         a2:5f:da:d7:45:32:28:26:1f:ed:08:c6:f0:72:23:c2:d0:7b:
         2b:85:a5:32:d3:cb:a8:73:55:ab:ea:af:5a:ad:8f:46:3d:43:
         d1:99:1b:fd:30:9d:0c:c2:fd:ce:ab:00:59:7d:a5:2e:be:ab:
         67:6f:02:b2:55:a4:2d:c0:46:3f:4a:2d:b6:bd:91:b5:21:2b:
         32:ff:c6:99:56:35:76:9d:bc:43:f5:07:88:00:0c:5a:17:5a:
         1b:a4:f6:f5:35:be:cf:2b:8d:88:8b:ac:62:32:b9:17:74:84:
         52:4f:ac:69:95:4c:8a:f8:0f:82:82:bb:23:95:18:cb:b0:40:
         54:64:99:4f:9b:7e:5f:67:5f:7d:85:9f:d8:01:4e:ca:42:15:
         4b:de:99:6c:0d:ec:4d:06:aa:a1:06:f9:81:e0:bd:3e:08:f5:
         3a:f7:0a:44:5c:4b:c0:e9:b0:7d:8e:4f:55:23:fc:31:2d:20:
         0b:24:07:8f:6c:ec:9f:ce:66:eb:85:32:11:eb:b8:c4:99:2c:
         09:6f:17:ce:8d:3b:3a:62:23:a7:59:d4:8a:58:86:91:b1:8d:
         0a:ea:ff:58:b3:2f:46:3b:21:4e:16:dc:55:55:a2:08:dd:5a:
         4c:cf:eb:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE6tu62AaIT1hUHEQcZm+juMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZjY0ZGIxYTQyYWRiZTlkYzMyMjZlYmM4MGFmYmI3NWQ0
YTdmMTgwHhcNMjYxMDE0MTQwMDI5WhcNMjYxMDE1MTQwMDI5WjAzMTEwLwYDVQQD
EyhhNDYxNGRjMDUwMjhjMTUwZTY4MzJlYTFhMGYzNjk2ZWYxN2Q1NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jSm80sybOJJhywFdGlNg48QIzIh
k4T5YyVDmSqbUftiNHPou3qywxVvzd91JlVLWBXXdarjjOnM6DmnWCPsFyTHZ/dy
iQSKb59DFWQnrYXQM2wAugE1oBAkGmTf9FKgq+1kGQPN0noXWdmDhWHvKjVPwFQr
OYjOEMtnpRf+o8CLiVLCEEaCJ7GFwgaBY+5xYPo0gdmeOBrr+2994dn9CHnu0QNH
wS+9d5b0Bf+7enknA6sjfaYda+pV03lao9aaJLLe6e64zK+mC3s/pw+tFC7wCsCv
sSN2/9uax+AHFpoR00qorNQ4dsAVH3gNSkmhwlo9tPCeN+EY9dMbY9fv0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKRhTcBQKMFQ5oMuoaDzaW7xfVYYMB8GA1UdIwQY
MBaAFFf2TbGkKtvp3DIm68gK+7ddSn8YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjkt
MWU4Mjg3N2MxNDYyLzEvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOS9lZTk2ZjAtYTA5MS00Yjg1LWFmZjktMWU4Mjg3N2MxNDYy
LzEvVl9aTnNhUXEyLW5jTWlicnlBcjd0MTFLZnhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKYwitpLs
puDAczW3HKdw/Xavol/a10UyKCYf7QjG8HIjwtB7K4WlMtPLqHNVq+qvWq2PRj1D
0Zkb/TCdDML9zqsAWX2lLr6rZ28CslWkLcBGP0ottr2RtSErMv/GmVY1dp28Q/UH
iAAMWhdaG6T29TW+zyuNiIusYjK5F3SEUk+saZVMivgPgoK7I5UYy7BAVGSZT5t+
X2dffYWf2AFOykIVS96ZbA3sTQaqoQb5geC9Pgj1OvcKRFxLwOmwfY5PVSP8MS0g
CyQHj2zsn85m64UyEeu4xJksCW8Xzo07OmIjp1nUiliGkbGNCur/WLMvRjshThbc
VVWiCN1aTM/rkQ==
-----END CERTIFICATE-----
Generated at Thu Oct 15 00:18:47 2026 by rpki-client