Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          0R0Ek0j504yAaZXWl4byMj9/KDZY9xbhnlsEzfWVP7I=
Subject key identifier:   F8:F5:0D:01:31:D1:42:FB:AC:61:1D:5D:BD:DB:1E:97:69:F7:3A:6E
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       01A0D4261D4BDDE985E5ECCE6BB7B647730C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          0695
Signing time:             Thu 24 Sep 2026 16:01:02 +0000
Manifest this update:     Thu 24 Sep 2026 16:01:02 +0000
Manifest next update:     Fri 25 Sep 2026 16:01:02 +0000
Files and hashes:         1: 0HuCI8W9raaw6VF5ob5AeUYCqvY.roa (hash: MWQfJ9QmkOMknSrFnqP6sweW3o4qTpecRX9iW0v5lMI=)
                          2: 0SWMflMJJlOILq6C9nu-h1OKJN8.roa (hash: kcK4B39yPXgK0nHshs5JakDk15PknxxnhcLimNeC6n8=)
                          3: 1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa (hash: FnVQZ/f6EWlkoWkdWzbkkjdOeMD2B5h8cDHMDm/NyV4=)
                          4: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
                          5: 7l1lpGV4ptT8nml-DHhj2477v7w.roa (hash: WRbHwiD/xFwzAYS55X0p7yc8DSBKcmaVY7wgLqrnwZM=)
                          6: 8syWpbRZFmsvwdyqtWxsX0pKmeY.roa (hash: Kum9fHu7WniF5m9wYLUYIqpdhJGb4LoqC5LKXjXu8bI=)
                          7: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
                          8: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
                          9: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
                          10: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=)
                          11: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
                          12: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
                          13: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
                          14: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
                          15: JCOqWbRnRywHSsZh-fLz50m-PqY.roa (hash: aOTb2qew8LvghZhiTeoIMCTgriMUYXeo63zQWwudYXw=)
                          16: JkK4a04qS_Ajc6pDAo-VYjvdA8Y.roa (hash: XFQRjgmnGbFOUTfMnQoCwRx0veQhtTR1PpEKLvJMV+g=)
                          17: K_5UWL5IkQbpsAsxidIs-a910tQ.roa (hash: jfQdjzJB+uzffMoi8GywFxVevTRWSqD6hEzeDuvNmb4=)
                          18: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
                          19: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
                          20: SvjTGdBq4AdZoEpPZy6xjNbEZes.roa (hash: XpBtNWxbTh/AKxbwJMevW4MmHvNMk9M4Q25IscBORxQ=)
                          21: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: I7YWCZj51Pe0hj1CrN/6UPbeneRJvt2hnGQs7jiXPbw=)
                          22: ViFP5rp9_kh71j905ntxU5SBk68.roa (hash: 58dlvwMJZtV0cctgTlo4T66Sg5qkkMyrdz4IEFt0NhQ=)
                          23: Z9annEhNXJRKB9imLkUdPhT85Nc.roa (hash: oy85S0enUEY7wVVeRJQ4+FT2oH5OrnRX3IvS0Tb+dKo=)
                          24: _sRckXeyoZxj9rukZRq18fDp3ik.roa (hash: 1WwE3fcT2kiL+v9mDl8uXlOyD5SD5f4wDk26AdtmLBQ=)
                          25: ahOBtrYhmRunqecYEU1ZWXuVovs.roa (hash: 6mLblxHv8sz/ui7lbUzb+nfqv0WmrUDxl+RoD+Q+z/I=)
                          26: bXd27v7vseLcs1p86WVPiFf581g.roa (hash: ph4o+crLTIHbzjOiEQPAhmzNlIZlfryhefh40UAzDLM=)
                          27: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
                          28: hs3h7Dj-b8z6Uxhv8HYqs7iBXD0.roa (hash: 5W1nhov/uvHu69XlxjaNWq1KRUFRi0VVoqIxSY+t7js=)
                          29: jNpTRZNm_bD5BiFoeh5OJnCcQAY.roa (hash: 1TgeIUZpeprmcZh4MLiiWQfSwXT8XyxkpN223zXb1O8=)
                          30: n-wdGNxhA3O26KGrsNj3L9h7eAw.roa (hash: 6R0f4WMAOxx3u7Zt38anUmVPSo1nBDSR8e8VksF4tmU=)
                          31: u-ddoqXehtb5m6JTXCSF4HyFY8E.roa (hash: UyjZhoeMOYj569cGU0irTIkbnK1IY9Bk6c1YVd6j+D8=)
                          32: u7SrUaeTfqqFlK6M8OkfEL87nc0.roa (hash: GsWYYAbN0tIazsbVktNVPeSXTKT3C0hkv53fF6GKkZI=)
                          33: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=)
                          34: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=)
                          35: ypSiLSto3RjwAtlvFMK5kNDrdzk.roa (hash: 0ZlVmf2An7RemdJ7LPaj0U4nO3qgfQ0MKBoflfLZxpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:26:1d:4b:dd:e9:85:e5:ec:ce:6b:b7:b6:47:73:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Sep 24 16:01:02 2026 GMT
            Not After : Sep 25 16:01:02 2026 GMT
        Subject: CN=f8f50d0131d142fbac611d5dbddb1e9769f73a6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a4:7b:94:bc:eb:50:fe:29:c4:95:5f:c9:90:
                    b7:6f:b2:6d:f3:71:2c:a9:0a:26:52:98:bd:46:b8:
                    63:5d:05:bd:97:b7:24:59:d7:5a:ae:81:6a:e0:1e:
                    20:88:54:93:10:6c:48:20:e2:97:85:6b:23:d1:5d:
                    44:5a:7e:b5:6c:62:25:8b:11:9e:6f:8b:81:d8:cc:
                    a0:db:e5:9b:1f:db:34:74:0e:f4:7a:76:94:a6:57:
                    82:70:7e:f7:0c:9b:54:34:e9:2a:ca:da:d1:f3:4a:
                    41:ef:27:05:49:c4:f2:f4:c1:5e:b8:b8:24:df:06:
                    e0:c3:be:19:53:c1:49:4a:9b:1b:b4:08:0d:92:7e:
                    43:06:9e:a1:c4:81:82:e6:7f:7c:e4:5f:24:a1:c0:
                    93:67:3a:5c:4c:de:be:91:2e:5c:17:93:dc:3e:2c:
                    2f:83:e8:fc:85:fb:39:10:80:51:b1:b9:39:5e:f0:
                    25:7b:1c:71:ed:70:51:f5:0f:1f:ce:9b:13:e6:61:
                    b5:1a:f5:d6:e0:44:16:f1:d9:13:34:cb:3e:7b:60:
                    33:3d:71:b3:fc:38:06:63:28:fe:39:02:3d:ab:85:
                    21:71:a3:7e:72:3c:b6:90:50:a3:b2:92:72:db:61:
                    34:cc:72:26:ff:82:93:e8:24:b6:34:88:8a:22:1f:
                    08:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F5:0D:01:31:D1:42:FB:AC:61:1D:5D:BD:DB:1E:97:69:F7:3A:6E
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:98:3c:fa:f6:6b:e6:3e:0a:93:2f:ef:57:20:f6:6f:98:f4:
         f1:ef:e7:d5:33:e5:02:a2:10:56:f6:04:f3:50:93:60:53:74:
         e3:33:ef:b5:7c:98:49:34:07:71:a4:2b:f1:5e:7e:99:a0:10:
         f5:71:a9:78:4b:86:f7:27:d8:05:e5:c1:f7:ac:7e:bd:46:16:
         a0:2c:ca:ef:f7:46:11:53:7d:ae:b4:90:e0:dd:64:b9:b6:a2:
         0a:7e:dc:58:70:92:66:c4:bb:32:01:4a:36:46:06:c1:73:b4:
         d8:67:3c:d4:81:cd:36:ba:72:28:30:1a:e2:bd:69:de:56:08:
         68:d8:a1:a7:37:df:86:2e:3c:e9:20:9f:55:fb:f8:49:8b:7e:
         c7:c1:64:43:89:0f:89:88:67:03:1f:23:cc:5f:fe:02:9a:da:
         7e:3d:52:8e:a1:a0:98:89:70:d1:db:d5:3f:a0:67:11:ab:b2:
         0f:bf:fe:d7:a5:79:1a:0d:0f:fb:e4:7a:62:72:58:39:ca:4c:
         d4:ab:98:b3:39:1d:ee:f9:4d:38:8e:ff:cb:ec:0b:b2:8f:de:
         99:5f:65:86:64:fd:7b:41:81:ca:5a:4c:46:29:3b:43:ff:8c:
         ca:ad:d1:a9:de:25:57:48:b5:b2:6f:97:4a:28:1e:1c:d8:8e:
         09:5b:37:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:14:42 2026 by rpki-client