Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
File:                     1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft (raw, json)
Hash identifier:          7e773OgPvcdOZ2hnWjqBWDk+4B64PeR4uwW4x7479B0=
Subject key identifier:   07:F8:97:24:32:46:97:2F:FA:28:11:6F:18:FA:2B:89:91:41:D1:6C
Authority key identifier: D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60
Certificate issuer:       /CN=d6f8a9263497c8d54e05496460d439cd6e069260
Certificate serial:       01A0D1244462D7E9AE3919F1DC04FB80E82C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
Manifest number:          0559
Signing time:             Thu 24 Sep 2026 02:00:09 +0000
Manifest this update:     Thu 24 Sep 2026 02:00:09 +0000
Manifest next update:     Fri 25 Sep 2026 02:00:09 +0000
Files and hashes:         1: 1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl (hash: A0lf8XSLrZlENs0YNW+wrW5gcF8pveYbJ7Yp6LgzSFA=)
                          2: sc4DPVZ4GXC6n1t6NMo8txjKvg4.roa (hash: HzzAiUKcMD0Qonl8rlrOhysvt3o7NAn/dAklxp9xi3o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 24 Sep 2026 23:00:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d1:24:44:62:d7:e9:ae:39:19:f1:dc:04:fb:80:e8:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6f8a9263497c8d54e05496460d439cd6e069260
        Validity
            Not Before: Sep 24 02:00:09 2026 GMT
            Not After : Sep 25 02:00:09 2026 GMT
        Subject: CN=07f897243246972ffa28116f18fa2b899141d16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:0a:c9:fb:e1:3c:32:2f:b9:24:6c:28:b6:
                    c0:01:e9:94:98:5a:75:f2:0f:e3:41:f8:f1:83:a0:
                    e7:bd:ed:82:6d:34:c8:c5:d9:a9:8d:fa:e5:e7:ce:
                    60:ed:f1:90:e7:d5:cb:97:04:c6:19:d4:d9:9c:48:
                    5b:4b:64:78:09:86:ae:ea:2f:f3:d9:4e:f9:40:5c:
                    53:9b:fc:6e:43:5e:36:94:03:11:69:e4:73:50:ab:
                    5e:cd:96:08:38:be:42:7e:88:f8:f7:08:e9:b8:a4:
                    8a:fb:b8:8c:ef:08:1e:84:c3:80:95:38:fb:0d:8f:
                    72:6a:9e:fb:9d:6d:cb:b6:72:a0:5a:13:c5:08:b8:
                    ad:06:e0:d0:55:ec:c7:c0:f0:76:e5:de:96:54:39:
                    f6:4a:82:af:5e:b0:ec:06:40:90:d0:48:f7:71:7c:
                    55:60:9e:09:db:01:cb:55:0b:3c:9f:eb:e2:1e:1b:
                    b1:bc:98:b5:ea:6c:a0:0b:83:22:d4:18:3a:af:76:
                    5e:90:fe:15:28:44:26:b2:1c:31:76:74:22:92:3c:
                    41:15:af:ae:e5:6c:78:0f:cb:a2:ec:68:0a:cb:3b:
                    3a:3c:86:5c:71:81:2d:d2:32:df:73:e9:1d:a6:f4:
                    2b:0e:bb:0d:4d:ae:ac:40:2c:c7:48:31:0b:e7:61:
                    13:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:F8:97:24:32:46:97:2F:FA:28:11:6F:18:FA:2B:89:91:41:D1:6C
            X509v3 Authority Key Identifier:
                keyid:D6:F8:A9:26:34:97:C8:D5:4E:05:49:64:60:D4:39:CD:6E:06:92:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vipJjSXyNVOBUlkYNQ5zW4GkmA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/04b524-c1a0-43eb-a98f-6f83b708b320/1/1vipJjSXyNVOBUlkYNQ5zW4GkmA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:84:0a:a7:e4:b7:79:af:e9:fd:47:db:e3:9f:12:f1:d8:48:
         4f:df:1d:d8:54:89:54:e4:43:2d:29:ac:b7:19:6a:00:e6:e7:
         27:44:64:e1:4b:9c:55:e1:1e:10:40:c0:65:8d:a5:2f:2b:a2:
         1d:e2:4f:c7:6f:51:82:03:39:a2:99:d9:03:79:5e:a8:bc:16:
         5f:f9:80:82:66:e6:79:0b:98:bf:15:2f:f6:56:65:58:8a:58:
         43:44:24:b9:bd:71:76:6b:d9:81:9d:42:71:20:48:6c:70:44:
         bb:0b:8c:0a:11:f0:bf:c6:ed:9e:69:56:76:6e:c1:2b:db:5c:
         84:a3:1b:31:b7:11:ca:f5:fd:99:62:59:8a:b5:bf:be:db:23:
         a8:17:10:01:58:bb:71:65:76:18:17:76:41:7d:00:41:5d:4a:
         d3:4a:39:87:d2:d4:c8:5a:fa:6e:1e:73:69:ce:af:59:09:27:
         38:3d:14:52:00:54:0b:5f:f4:16:9c:ea:a0:1c:3d:13:e1:bc:
         91:d9:0c:a2:36:49:5a:1c:8c:5f:67:a8:59:47:84:4c:2f:82:
         86:a0:85:f4:b9:78:c5:3c:5f:b3:de:d3:3c:35:97:9f:7c:16:
         47:53:ff:09:62:ee:6a:a0:10:01:6e:9c:e0:9c:38:ee:de:6f:
         4b:6d:38:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDRJERi1+muORnx3AT7gOgsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZjhhOTI2MzQ5N2M4ZDU0ZTA1NDk2NDYwZDQzOWNkNmUw
NjkyNjAwHhcNMjYwOTI0MDIwMDA5WhcNMjYwOTI1MDIwMDA5WjAzMTEwLwYDVQQD
EygwN2Y4OTcyNDMyNDY5NzJmZmEyODExNmYxOGZhMmI4OTkxNDFkMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YYKyfvhPDIvuSRsKLbAAemUmFp1
8g/jQfjxg6Dnve2CbTTIxdmpjfrl585g7fGQ59XLlwTGGdTZnEhbS2R4CYau6i/z
2U75QFxTm/xuQ142lAMRaeRzUKtezZYIOL5Cfoj49wjpuKSK+7iM7wgehMOAlTj7
DY9yap77nW3LtnKgWhPFCLitBuDQVezHwPB25d6WVDn2SoKvXrDsBkCQ0Ej3cXxV
YJ4J2wHLVQs8n+viHhuxvJi16mygC4Mi1Bg6r3ZekP4VKEQmshwxdnQikjxBFa+u
5Wx4D8ui7GgKyzs6PIZccYEt0jLfc+kdpvQrDrsNTa6sQCzHSDEL52ETawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAf4lyQyRpcv+igRbxj6K4mRQdFsMB8GA1UdIwQY
MBaAFNb4qSY0l8jVTgVJZGDUOc1uBpJgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYt
NmY4M2I3MDhiMzIwLzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wNGI1MjQtYzFhMC00M2ViLWE5OGYtNmY4M2I3MDhiMzIw
LzEvMXZpcEpqU1h5TlZPQlVsa1lOUTV6VzRHa21BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIQKp+S3
ea/p/Ufb458S8dhIT98d2FSJVORDLSmstxlqAObnJ0Rk4UucVeEeEEDAZY2lLyui
HeJPx29RggM5opnZA3leqLwWX/mAgmbmeQuYvxUv9lZlWIpYQ0Qkub1xdmvZgZ1C
cSBIbHBEuwuMChHwv8btnmlWdm7BK9tchKMbMbcRyvX9mWJZirW/vtsjqBcQAVi7
cWV2GBd2QX0AQV1K00o5h9LUyFr6bh5zac6vWQknOD0UUgBUC1/0FpzqoBw9E+G8
kdkMojZJWhyMX2eoWUeETC+ChqCF9Ll4xTxfs97TPDWXn3wWR1P/CWLuaqAQAW6c
4Jw47t5vS204Lw==
-----END CERTIFICATE-----
Generated at Thu Sep 24 09:17:53 2026 by rpki-client