Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          fAA5s7jdwb6A/Gig0yQxHJpE/7k12J/OP3woLlNq5BE=
Subject key identifier:   6A:63:0A:72:B2:AF:97:86:91:1A:CB:12:5C:EF:44:AB:75:8E:28:02
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       01A17627607BD95E246C1CF4058F8A94658D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          18DF
Signing time:             Mon 26 Oct 2026 03:00:54 +0000
Manifest this update:     Mon 26 Oct 2026 03:00:54 +0000
Manifest next update:     Tue 27 Oct 2026 03:00:54 +0000
Files and hashes:         1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=)
                          2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=)
                          3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=)
                          4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=)
                          5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: 3n99O1xV9Ja3c/JFrgE/mZRpQFo5nv60TZmgFQIV3XU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 23:31:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:76:27:60:7b:d9:5e:24:6c:1c:f4:05:8f:8a:94:65:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Oct 26 03:00:54 2026 GMT
            Not After : Oct 27 03:00:54 2026 GMT
        Subject: CN=6a630a72b2af9786911acb125cef44ab758e2802
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:20:fc:35:af:55:c6:be:85:fb:a3:df:06:9c:
                    18:eb:f1:eb:fd:74:81:ca:a9:fc:4b:f2:62:86:43:
                    78:5d:2f:ad:da:5f:86:aa:89:f4:35:c5:73:d6:05:
                    50:d0:1b:99:ec:a2:f3:5f:d3:99:46:20:75:d7:e3:
                    71:5a:18:f3:d7:50:7e:30:28:6c:bb:b9:b3:c5:0e:
                    3d:2a:fa:e6:ba:bc:fe:3b:b8:5d:af:95:81:e1:8e:
                    99:06:02:aa:bf:5d:96:22:68:33:31:df:bf:c1:28:
                    bf:59:32:22:75:d6:b1:1d:88:d4:1f:91:66:1d:ae:
                    95:c8:01:d9:eb:e1:1d:36:34:50:f7:42:f2:a1:9d:
                    48:10:44:57:cc:75:dd:21:72:28:6f:a8:52:98:9d:
                    2a:cd:ab:4c:2a:b7:99:3d:98:1f:6d:56:bb:77:03:
                    d9:0f:c9:5a:e9:85:57:1e:72:68:7a:67:d2:57:79:
                    45:4f:d5:99:0c:03:21:47:d0:07:d4:d6:ea:60:4b:
                    82:13:3c:3d:1d:0e:50:19:59:e6:63:e2:67:7f:80:
                    5c:8a:bc:8b:12:35:6a:0c:a6:8f:6a:8a:a3:93:9f:
                    51:d2:1b:bc:c9:fe:52:95:a8:2d:5b:8f:05:27:35:
                    b8:a7:30:64:25:f6:d5:79:39:bf:5c:a4:f0:5c:dd:
                    2e:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:63:0A:72:B2:AF:97:86:91:1A:CB:12:5C:EF:44:AB:75:8E:28:02
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:e8:bc:f0:f8:ab:a8:e3:a9:ee:11:ef:f5:49:fc:a8:db:9d:
         cf:73:ba:b1:60:2c:65:61:68:88:fb:95:b5:e4:5c:f7:83:e4:
         f0:2c:c1:b0:64:23:d9:4e:2e:55:b1:7f:b7:a6:c8:8e:39:4b:
         ef:f5:37:3c:66:5c:2f:c2:77:d1:05:58:1e:58:e5:4e:3b:fb:
         da:02:bb:51:a9:14:2b:a6:81:46:c8:f7:44:50:b3:24:b0:3f:
         c0:ae:5b:89:f7:c7:27:84:ba:23:95:dc:35:a3:63:66:28:c1:
         1c:fd:e0:b4:24:30:d1:52:08:05:aa:23:12:40:7c:0d:53:29:
         99:55:b6:88:fa:b1:41:f9:3e:80:47:75:db:0d:51:db:a9:ac:
         23:f0:ab:85:ff:27:ed:9c:56:48:58:9f:9b:70:51:1e:3b:4b:
         07:39:d7:99:89:ee:56:a1:e4:d8:eb:6e:a2:52:80:df:de:44:
         2b:d6:60:37:b6:f9:9a:96:63:14:2d:ac:a2:9b:37:70:ae:1b:
         b1:6a:4a:67:e3:c4:e4:6c:a3:cc:4a:4b:64:ec:95:44:72:2d:
         0a:77:c7:af:93:be:65:73:d8:8e:d2:ec:aa:a9:42:95:1b:06:
         48:c9:c8:19:e7:61:93:69:cc:94:1f:e3:ed:2e:df:82:20:73:
         16:be:80:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF2J2B72V4kbBz0BY+KlGWNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDlmYjE5MGY0YmQwZjU4MTVhOGU1NzlmMzY2YWQ1OGQ1
ZDQxZjkwHhcNMjYxMDI2MDMwMDU0WhcNMjYxMDI3MDMwMDU0WjAzMTEwLwYDVQQD
Eyg2YTYzMGE3MmIyYWY5Nzg2OTExYWNiMTI1Y2VmNDRhYjc1OGUyODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iD8Na9Vxr6F+6PfBpwY6/Hr/XSB
yqn8S/JihkN4XS+t2l+Gqon0NcVz1gVQ0BuZ7KLzX9OZRiB11+NxWhjz11B+MChs
u7mzxQ49Kvrmurz+O7hdr5WB4Y6ZBgKqv12WImgzMd+/wSi/WTIiddaxHYjUH5Fm
Ha6VyAHZ6+EdNjRQ90LyoZ1IEERXzHXdIXIob6hSmJ0qzatMKreZPZgfbVa7dwPZ
D8la6YVXHnJoemfSV3lFT9WZDAMhR9AH1NbqYEuCEzw9HQ5QGVnmY+Jnf4BciryL
EjVqDKaPaoqjk59R0hu8yf5SlagtW48FJzW4pzBkJfbVeTm/XKTwXN0uGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGpjCnKyr5eGkRrLElzvRKt1jigCMB8GA1UdIwQY
MBaAFL5J+xkPS9D1gVqOV582atWNXUH5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDct
NWU2NTZmMWI0ODc2LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9iZDBkMTMtZTk4My00ZmY5LWI1MDctNWU2NTZmMWI0ODc2
LzEvdmtuN0dROUwwUFdCV281WG56WnExWTFkUWZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ+i88Pir
qOOp7hHv9Un8qNudz3O6sWAsZWFoiPuVteRc94Pk8CzBsGQj2U4uVbF/t6bIjjlL
7/U3PGZcL8J30QVYHljlTjv72gK7UakUK6aBRsj3RFCzJLA/wK5biffHJ4S6I5Xc
NaNjZijBHP3gtCQw0VIIBaojEkB8DVMpmVW2iPqxQfk+gEd12w1R26msI/Crhf8n
7ZxWSFifm3BRHjtLBznXmYnuVqHk2OtuolKA395EK9ZgN7b5mpZjFC2sops3cK4b
sWpKZ+PE5GyjzEpLZOyVRHItCnfHr5O+ZXPYjtLsqqlClRsGSMnIGedhk2nMlB/j
7S7fgiBzFr6Adw==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:58:00 2026 by rpki-client