Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
File:                     VLSHMeKfJ9aHV21oY629oIBwm_4.mft (raw, json)
Hash identifier:          HyRAt+G66FgEMGH8YR6MC9qED2wjkQ2euw62Na2IZFQ=
Subject key identifier:   5C:2C:E4:8D:0E:B5:DA:FC:51:92:74:E4:E5:65:6F:2A:12:64:6F:29
Authority key identifier: 54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE
Certificate issuer:       /CN=54b48731e29f27d687576d6863adbda080709bfe
Certificate serial:       01A1DFF1A9771098FC027B812D1F1C0B2442
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
Manifest number:          0F79
Signing time:             Sun 15 Nov 2026 16:01:58 +0000
Manifest this update:     Sun 15 Nov 2026 16:01:58 +0000
Manifest next update:     Mon 16 Nov 2026 16:01:58 +0000
Files and hashes:         1: 06HRdAWI7K2GHC0wiysXwWRdH5Q.roa (hash: MBqO5khvph0CDQ3O5u2swOvhCzIMx81udkJ4wkAXnFM=)
                          2: S5wgrs55mUukAL2woTkoggOUw2s.roa (hash: +sjSrHKEHcONahJ8eq56SxZon63wWpf9HC2Ed/+OC3E=)
                          3: VLSHMeKfJ9aHV21oY629oIBwm_4.crl (hash: p4GuaK600un6wk5K53JzWGg80MTo3rMoUEWtHta8IBE=)
                          4: ykd30MWULAEYkGjDWM0WCrpGwbY.asa (hash: Lhc/xW6Z4zXUIzY54G/9k02UflQD6i/5O6tqu62IWLs=)
                          5: zATzhpg9xiU_0_8udzecrn-BFdM.roa (hash: LXOXPntIpCX+wDiB9sHExrI1VhXJrNUwhw9OhSaFlRs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 12:50:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:df:f1:a9:77:10:98:fc:02:7b:81:2d:1f:1c:0b:24:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b48731e29f27d687576d6863adbda080709bfe
        Validity
            Not Before: Nov 15 16:01:58 2026 GMT
            Not After : Nov 16 16:01:58 2026 GMT
        Subject: CN=5c2ce48d0eb5dafc519274e4e5656f2a12646f29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ec:61:93:52:14:fe:b9:a7:b2:0a:2d:b2:2f:
                    e7:28:5a:87:85:1d:16:c5:22:58:fa:d6:91:d3:6d:
                    68:91:7e:07:4e:a4:31:a3:04:57:71:fc:24:de:0f:
                    ce:bc:8e:0b:f6:64:b8:0d:ab:4e:f5:c9:e1:e8:32:
                    94:eb:52:51:75:e3:cf:c7:b1:cb:97:8d:cc:73:d7:
                    af:e6:f7:19:f0:75:e4:d9:38:44:3c:a4:98:5d:13:
                    27:95:14:89:1d:81:92:1b:c4:59:cf:c4:b0:bf:df:
                    26:a5:a2:35:14:81:df:a5:b2:6a:92:29:6f:77:11:
                    84:db:f2:66:4a:12:c4:95:95:bc:21:b0:cd:49:7d:
                    57:16:7d:fe:67:b3:f2:80:9f:e4:5d:e4:15:46:c0:
                    2f:6f:63:68:e9:86:34:2a:8b:13:29:7a:c2:fa:64:
                    87:ca:cb:80:cd:0e:0e:1b:57:1c:6b:45:be:b3:11:
                    cd:a4:03:2b:b3:00:0d:41:79:64:69:13:80:c3:e7:
                    e0:9d:5c:8f:12:fe:64:04:d5:82:df:c6:fc:6b:b9:
                    d3:17:07:8e:10:f0:a2:c1:24:8b:e4:9d:57:01:96:
                    e2:00:59:92:86:d2:9a:89:74:2f:79:0c:17:f5:b7:
                    90:5d:c1:f1:35:1f:bd:70:70:59:fd:47:cf:b0:4d:
                    4d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:E4:8D:0E:B5:DA:FC:51:92:74:E4:E5:65:6F:2A:12:64:6F:29
            X509v3 Authority Key Identifier:
                keyid:54:B4:87:31:E2:9F:27:D6:87:57:6D:68:63:AD:BD:A0:80:70:9B:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLSHMeKfJ9aHV21oY629oIBwm_4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0e7b29-6297-42ca-8f33-5dfccd61a9b1/1/VLSHMeKfJ9aHV21oY629oIBwm_4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:c3:76:61:a1:70:29:b0:1e:58:d6:e8:9a:17:2f:3e:ed:84:
         18:b4:ca:b7:77:ae:3c:e4:38:b4:e1:f0:ac:99:2b:1f:81:9d:
         65:ab:1f:3d:ed:66:0b:de:2e:d6:b8:cc:e4:61:12:8c:80:4e:
         8c:02:de:c2:d2:60:9a:5f:11:71:f7:29:b5:4e:1d:4b:6c:b3:
         3a:58:3a:e6:26:2f:b5:e9:59:17:c1:ad:34:47:26:35:d2:0f:
         51:42:c9:5e:3e:02:2a:21:62:32:29:78:7a:f1:48:0e:87:68:
         bb:32:88:c1:c7:74:67:1a:ae:d1:a7:bf:88:46:50:d8:c4:1c:
         f0:cb:17:ee:11:19:54:55:73:d0:ab:c9:c7:c1:a2:37:d1:7f:
         aa:af:34:26:2c:87:bc:f5:fe:3a:98:4d:b7:6c:84:bb:40:a4:
         1a:e4:af:d0:02:6f:92:f0:bc:ed:57:e7:32:8f:6f:f9:69:10:
         91:a8:8f:e5:d0:d7:1e:f7:af:a7:b3:80:f4:81:91:ad:d2:db:
         c6:44:25:72:9f:2e:cf:16:16:47:a4:b8:6c:4a:a4:99:68:b3:
         47:19:47:26:44:d8:58:88:8c:b4:62:2f:51:41:ca:0d:2e:69:
         1e:c1:99:7a:d2:f7:14:63:aa:1f:72:c7:78:17:bd:33:3d:6c:
         1b:e2:8d:ce
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHf8al3EJj8AnuBLR8cCyRCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YjQ4NzMxZTI5ZjI3ZDY4NzU3NmQ2ODYzYWRiZGEwODA3
MDliZmUwHhcNMjYxMTE1MTYwMTU4WhcNMjYxMTE2MTYwMTU4WjAzMTEwLwYDVQQD
Eyg1YzJjZTQ4ZDBlYjVkYWZjNTE5Mjc0ZTRlNTY1NmYyYTEyNjQ2ZjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+xhk1IU/rmnsgotsi/nKFqHhR0W
xSJY+taR021okX4HTqQxowRXcfwk3g/OvI4L9mS4DatO9cnh6DKU61JRdePPx7HL
l43Mc9ev5vcZ8HXk2ThEPKSYXRMnlRSJHYGSG8RZz8Swv98mpaI1FIHfpbJqkilv
dxGE2/JmShLElZW8IbDNSX1XFn3+Z7PygJ/kXeQVRsAvb2No6YY0KosTKXrC+mSH
ysuAzQ4OG1cca0W+sxHNpAMrswANQXlkaROAw+fgnVyPEv5kBNWC38b8a7nTFweO
EPCiwSSL5J1XAZbiAFmShtKaiXQveQwX9beQXcHxNR+9cHBZ/UfPsE1NCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFws5I0Otdr8UZJ05OVlbyoSZG8pMB8GA1UdIwQY
MBaAFFS0hzHinyfWh1dtaGOtvaCAcJv+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMt
NWRmY2NkNjFhOWIxLzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wZTdiMjktNjI5Ny00MmNhLThmMzMtNWRmY2NkNjFhOWIx
LzEvVkxTSE1lS2ZKOWFIVjIxb1k2MjlvSUJ3bV80LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYsN2YaFw
KbAeWNbomhcvPu2EGLTKt3euPOQ4tOHwrJkrH4GdZasfPe1mC94u1rjM5GESjIBO
jALewtJgml8RcfcptU4dS2yzOlg65iYvtelZF8GtNEcmNdIPUULJXj4CKiFiMil4
evFIDodouzKIwcd0Zxqu0ae/iEZQ2MQc8MsX7hEZVFVz0KvJx8GiN9F/qq80JiyH
vPX+OphNt2yEu0CkGuSv0AJvkvC87VfnMo9v+WkQkaiP5dDXHvevp7OA9IGRrdLb
xkQlcp8uzxYWR6S4bEqkmWizRxlHJkTYWIiMtGIvUUHKDS5pHsGZetL3FGOqH3LH
eBe9Mz1sG+KNzg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 21:04:56 2026 by rpki-client