Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          xVT3Cnq0+xw4mywZA4nB9F3i/6nrL73FcE3I0btd6Jk=
Subject key identifier:   6E:9C:BD:4F:1B:14:6B:CA:3D:E5:6C:B2:FD:91:42:12:05:FD:1A:58
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       01A10BB8F5CCD065699A68439643B3DADB93
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          0578
Signing time:             Mon 05 Oct 2026 11:00:33 +0000
Manifest this update:     Mon 05 Oct 2026 11:00:33 +0000
Manifest next update:     Tue 06 Oct 2026 11:00:33 +0000
Files and hashes:         1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: No0ViRRRBN/MzsKfW5dnv83s4ZAHf0YXvN+D1oQpjeQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 Oct 2026 11:00:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:0b:b8:f5:cc:d0:65:69:9a:68:43:96:43:b3:da:db:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Oct  5 11:00:33 2026 GMT
            Not After : Oct  6 11:00:33 2026 GMT
        Subject: CN=6e9cbd4f1b146bca3de56cb2fd91421205fd1a58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:18:9b:00:25:29:03:54:04:98:b0:40:0f:9c:
                    9f:90:71:24:7c:68:e0:88:33:44:c7:a9:75:86:ee:
                    36:fb:f2:a6:46:22:47:0d:2b:3d:2f:10:08:21:13:
                    b5:c7:dc:e7:5a:51:55:63:1e:78:a1:ca:3e:e4:81:
                    9b:de:b5:be:bb:cd:04:92:5c:a6:2a:b9:c2:7a:1d:
                    16:0c:b9:cd:3b:8f:0a:d3:5f:9c:c4:fc:42:b5:21:
                    cd:19:47:6d:1d:35:97:60:4e:55:2e:8a:27:27:d1:
                    ca:21:58:f3:28:99:66:d4:c2:cd:06:35:2b:74:1d:
                    42:3a:1a:3e:ec:de:9c:b1:cb:98:e1:29:b3:fa:1a:
                    24:c5:70:9b:fb:c8:19:74:05:ba:e1:5e:ff:5d:c6:
                    12:69:85:65:86:6a:5a:88:61:41:bc:8b:80:9c:44:
                    c6:5c:31:9d:55:f0:9e:83:6d:ac:99:dc:a7:cf:12:
                    26:41:25:24:84:b5:63:ab:55:e2:1a:7d:af:9e:e8:
                    34:00:80:a3:27:56:87:b8:39:85:9e:d0:63:8d:4b:
                    22:ea:8c:08:fb:df:2f:09:b1:6d:f0:be:53:7b:0d:
                    31:ae:73:06:16:04:2d:c0:0a:e1:64:b9:d5:d7:68:
                    7c:b1:d6:31:bc:71:3c:16:af:47:8f:38:4d:94:9b:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9C:BD:4F:1B:14:6B:CA:3D:E5:6C:B2:FD:91:42:12:05:FD:1A:58
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:d0:16:7c:f8:48:80:47:59:89:cb:67:56:dd:8c:cd:a4:68:
         99:45:df:d1:3a:eb:6a:fd:6e:14:d2:af:2f:be:b2:85:27:a6:
         16:fa:52:0e:10:a1:10:48:51:b6:66:86:37:23:96:d1:58:50:
         e9:df:49:5f:28:7b:15:15:b6:2e:06:e6:23:12:db:34:70:1e:
         80:00:83:30:f3:7c:ff:32:79:f5:7a:d7:91:d2:49:5d:ed:5b:
         4e:00:3a:4d:c8:43:63:c3:43:43:e8:0e:21:e5:35:eb:c6:5e:
         57:d9:c7:ce:df:ee:18:96:b5:e5:81:1a:97:4d:40:28:4c:8e:
         7f:26:34:79:4b:fe:ec:11:9f:f9:06:6b:7b:1f:6d:a5:d7:e9:
         15:24:73:ff:f9:90:e4:d6:a5:6c:4a:17:67:2c:ed:a9:70:58:
         55:fb:77:2f:32:1e:96:30:87:d1:72:33:78:f0:65:5e:fa:85:
         28:3d:c6:46:9c:d0:67:ff:50:a6:07:01:6e:23:3c:2b:5d:2c:
         d6:d2:12:6b:e6:ef:b8:24:0d:4f:9e:a5:44:0e:d1:9d:bf:1a:
         5b:51:d2:b1:b5:5f:a9:1d:e6:4c:30:25:30:c5:bc:bb:c5:06:
         00:a1:a1:c0:8c:de:74:2b:2c:78:72:9b:8a:66:94:d0:b8:65:
         b5:b9:54:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaELuPXM0GVpmmhDlkOz2tuTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDc3OThmMjUzYzcyNGViMDdmMmU4YWQ4YzJlZDk0OTQz
NjQ5OWMwHhcNMjYxMDA1MTEwMDMzWhcNMjYxMDA2MTEwMDMzWjAzMTEwLwYDVQQD
Eyg2ZTljYmQ0ZjFiMTQ2YmNhM2RlNTZjYjJmZDkxNDIxMjA1ZmQxYTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRibACUpA1QEmLBAD5yfkHEkfGjg
iDNEx6l1hu42+/KmRiJHDSs9LxAIIRO1x9znWlFVYx54oco+5IGb3rW+u80Eklym
KrnCeh0WDLnNO48K01+cxPxCtSHNGUdtHTWXYE5VLoonJ9HKIVjzKJlm1MLNBjUr
dB1COho+7N6cscuY4Smz+hokxXCb+8gZdAW64V7/XcYSaYVlhmpaiGFBvIuAnETG
XDGdVfCeg22smdynzxImQSUkhLVjq1XiGn2vnug0AICjJ1aHuDmFntBjjUsi6owI
+98vCbFt8L5Tew0xrnMGFgQtwArhZLnV12h8sdYxvHE8Fq9HjzhNlJtnnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG6cvU8bFGvKPeVssv2RQhIF/RpYMB8GA1UdIwQY
MBaAFFZHeY8lPHJOsH8uitjC7ZSUNkmcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDkt
MWE0YjZlZGIwM2E3LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC80YzRmNjYtOTAzOS00ZmIxLWJkNDktMWE0YjZlZGIwM2E3
LzEvVmtkNWp5VThjazZ3Znk2SzJNTHRsSlEyU1p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFtAWfPhI
gEdZictnVt2MzaRomUXf0Trrav1uFNKvL76yhSemFvpSDhChEEhRtmaGNyOW0VhQ
6d9JXyh7FRW2LgbmIxLbNHAegACDMPN8/zJ59XrXkdJJXe1bTgA6TchDY8NDQ+gO
IeU168ZeV9nHzt/uGJa15YEal01AKEyOfyY0eUv+7BGf+QZrex9tpdfpFSRz//mQ
5NalbEoXZyztqXBYVft3LzIeljCH0XIzePBlXvqFKD3GRpzQZ/9QpgcBbiM8K10s
1tISa+bvuCQNT56lRA7Rnb8aW1HSsbVfqR3mTDAlMMW8u8UGAKGhwIzedCsseHKb
imaU0LhltblUEg==
-----END CERTIFICATE-----
Generated at Mon Oct 5 20:22:45 2026 by rpki-client