Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          v32SADBz6bcsEyXIJT87Vpd3zcQvsEY8eC3lTRv7ffQ=
Subject key identifier:   32:30:3E:00:E1:10:06:54:36:D0:6E:65:E1:87:7D:2B:49:7D:CE:DD
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       01A1DC82FB8049AED8ECF38EC25B0D536D00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          072D
Signing time:             Sun 15 Nov 2026 00:02:13 +0000
Manifest this update:     Sun 15 Nov 2026 00:02:13 +0000
Manifest next update:     Mon 16 Nov 2026 00:02:13 +0000
Files and hashes:         1: 0SWMflMJJlOILq6C9nu-h1OKJN8.roa (hash: kcK4B39yPXgK0nHshs5JakDk15PknxxnhcLimNeC6n8=)
                          2: 1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa (hash: FnVQZ/f6EWlkoWkdWzbkkjdOeMD2B5h8cDHMDm/NyV4=)
                          3: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
                          4: 2TmY0g8gB64H2cUDmudKTyEWTTw.roa (hash: P/lHrEQ16jkioRGuSCVLZ+vhNAFJOV2t3x1c9/ndq+A=)
                          5: 41jVer0R2hy_TkUFPZ3Ub2EIi9c.roa (hash: Zq0Yp//arwb77iKcDQqYghts6j4Jmt1D28AQqMcGijw=)
                          6: 55PSt35JxdrK0cZJITAKlz5nVfo.roa (hash: cmD74cSyztJ9O2BDRJfWcxx0ACJOgkyILpoQDxi7jQA=)
                          7: 8syWpbRZFmsvwdyqtWxsX0pKmeY.roa (hash: Kum9fHu7WniF5m9wYLUYIqpdhJGb4LoqC5LKXjXu8bI=)
                          8: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
                          9: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
                          10: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
                          11: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
                          12: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
                          13: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
                          14: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
                          15: H3GBxg9ppn1cu5LWTGagJpB2_TE.roa (hash: p5DWfrp7dbCg+KjuyLPbHXsYImn5yegjUGKA/I4fj+U=)
                          16: IEML87ENmURx_enV7vm5j-ovZFg.roa (hash: 2iwpnxMW2xkA63IVjHK3SdkubgBGpgZGA7zRiDUaYwI=)
                          17: JCOqWbRnRywHSsZh-fLz50m-PqY.roa (hash: aOTb2qew8LvghZhiTeoIMCTgriMUYXeo63zQWwudYXw=)
                          18: JkK4a04qS_Ajc6pDAo-VYjvdA8Y.roa (hash: XFQRjgmnGbFOUTfMnQoCwRx0veQhtTR1PpEKLvJMV+g=)
                          19: K_5UWL5IkQbpsAsxidIs-a910tQ.roa (hash: jfQdjzJB+uzffMoi8GywFxVevTRWSqD6hEzeDuvNmb4=)
                          20: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
                          21: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
                          22: Ri-dZEtxzT9ojpkgONGACFAikrc.roa (hash: DuxOeFpH4H8HgVeiIT6BlRO5bHol3M80FSSIDgaLYVs=)
                          23: SvjTGdBq4AdZoEpPZy6xjNbEZes.roa (hash: XpBtNWxbTh/AKxbwJMevW4MmHvNMk9M4Q25IscBORxQ=)
                          24: Tq5HxqjA4WGnDHQBXgbImocLTlA.roa (hash: JLGnUiP7XXQtyia8GXNL+gnYUPJm11Mo/e5W/XWZiTY=)
                          25: VCk_5W9OWsFgBIJvG53eSkrIF9w.roa (hash: XWSBxVJpVaTOR7Iqo9bhWgCvetPI4Jrt7Cndlmwfe2A=)
                          26: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: 47ta1Mi27gtIVPoTaqXTN9Qeshg7uUluqLdUDS2/FPs=)
                          27: Z9annEhNXJRKB9imLkUdPhT85Nc.roa (hash: oy85S0enUEY7wVVeRJQ4+FT2oH5OrnRX3IvS0Tb+dKo=)
                          28: _sRckXeyoZxj9rukZRq18fDp3ik.roa (hash: 1WwE3fcT2kiL+v9mDl8uXlOyD5SD5f4wDk26AdtmLBQ=)
                          29: bNU0SqVbRFQ2gEH6BxoDbPzm9WM.roa (hash: fkkQLcdywpnUBXvtnTMYngIO2YWFx3MS4IUP7TbpXWE=)
                          30: bXd27v7vseLcs1p86WVPiFf581g.roa (hash: ph4o+crLTIHbzjOiEQPAhmzNlIZlfryhefh40UAzDLM=)
                          31: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
                          32: hH6SscUVwxOAtyg7v-rtCk2K2X8.roa (hash: Vm7r6NpMDAM8u2USx1pIJnRj/n5G1kZwXAPG6NcZcFs=)
                          33: hi8JtBvYc7RK7RsE-uwUD_L4z9k.roa (hash: /HMTS0OosPrhbSNhL9ewbXM7/E0J2+BIeOcuXR6cXCA=)
                          34: igashBcbuGL5tQm2ViHC4mm4I_8.roa (hash: /1bDsE552FI0TcEYgogNYmiBlJBza396B5LxJxh8+SY=)
                          35: ldDNssW1F5zn_Orwx-FgyjHW1Rc.roa (hash: rfpaBdfwCIYHHptSdIg73xsxFK5IMMlEcNsY0b1peRs=)
                          36: u-ddoqXehtb5m6JTXCSF4HyFY8E.roa (hash: UyjZhoeMOYj569cGU0irTIkbnK1IY9Bk6c1YVd6j+D8=)
                          37: wZm4OfdK9nzfD3vu_qi5NQWsF3w.roa (hash: HVxbpWC3yoCLBzQqqVEbSHH0KLW0dx34Mb4XrSqEcaw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 00:02:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:dc:82:fb:80:49:ae:d8:ec:f3:8e:c2:5b:0d:53:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Nov 15 00:02:13 2026 GMT
            Not After : Nov 16 00:02:13 2026 GMT
        Subject: CN=32303e00e110065436d06e65e1877d2b497dcedd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:0f:4d:39:ef:5f:6b:af:cd:44:6f:18:8b:80:
                    90:f1:5e:3c:a2:16:6f:39:c5:41:b1:03:ef:e7:87:
                    60:46:9b:4c:57:8b:fc:54:6c:bf:a8:ab:ea:16:a6:
                    9d:fa:6e:28:ee:91:fd:86:b5:bd:87:58:e2:67:89:
                    dc:5d:46:2f:12:a9:fa:c3:c9:fd:92:8e:08:1d:c1:
                    90:cf:d1:bd:a9:7b:ec:34:96:df:44:51:14:48:7b:
                    c1:7e:17:1e:5a:45:2d:84:ee:ca:ff:7b:58:99:8f:
                    ee:0a:65:d6:38:1d:2e:33:8c:eb:c5:40:eb:52:d6:
                    3b:93:41:d8:89:ac:81:06:56:40:a3:6c:53:51:c8:
                    e5:56:17:b5:f2:10:6e:6f:34:05:24:7f:e7:83:c0:
                    05:7b:a9:63:b0:3b:dd:03:8b:6b:be:06:00:72:08:
                    0b:86:f9:8f:a4:0b:39:5a:07:19:23:fd:f2:d7:57:
                    07:e5:d8:44:50:36:05:91:1e:fd:a2:7c:07:5c:bf:
                    e8:88:f7:6b:f7:2a:8b:30:73:8e:6e:90:62:f1:81:
                    ca:29:50:f9:c8:99:2d:c0:b4:0d:98:03:a9:72:38:
                    54:62:12:49:4c:5b:86:c3:2e:4a:94:39:1b:c5:59:
                    46:84:27:0f:4d:bc:1a:33:37:e1:11:22:08:c3:28:
                    00:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:30:3E:00:E1:10:06:54:36:D0:6E:65:E1:87:7D:2B:49:7D:CE:DD
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:09:0e:39:22:34:f0:12:0b:49:47:df:1f:a3:52:fe:fc:72:
         9c:6a:73:e7:26:01:dd:31:1a:74:d3:c1:94:97:98:23:2c:a1:
         82:73:80:18:29:fc:06:fb:40:67:ff:04:17:95:89:1b:5c:8d:
         be:76:4a:22:eb:74:89:fb:0b:62:69:c4:c7:76:00:f5:35:ba:
         6f:1c:71:c5:7d:eb:b7:19:bf:de:4c:db:a2:e3:e9:35:67:d4:
         bc:0f:07:88:a1:8b:ea:3e:b3:8a:9c:f9:c1:d7:e9:a2:52:05:
         f9:61:a9:c5:09:22:4f:f4:14:24:9d:4a:22:37:e3:2a:70:79:
         5a:41:8a:14:9a:db:50:7d:8b:1f:1e:26:96:8b:c9:51:d3:ad:
         8a:59:4b:90:c6:4d:df:ae:d6:44:50:8d:06:d8:26:74:e5:9a:
         a3:1a:92:39:be:33:79:5e:d7:12:98:3c:f2:2c:9f:94:4c:97:
         a6:c9:d5:78:26:82:1c:59:a1:2c:31:f3:e5:12:dc:f9:8d:03:
         7f:5f:47:5b:24:fd:25:79:7f:ed:e4:3f:aa:22:93:7e:5f:cc:
         41:1b:60:73:27:10:03:9b:97:af:87:d4:3f:7a:b4:55:fa:03:
         d9:dc:cd:35:e6:37:e7:3a:7f:1e:2e:22:ac:59:da:cd:f7:ba:
         60:bc:83:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHcgvuASa7Y7POOwlsNU20AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YmFmMjY5Njc1MTBiM2M1MmU0NmQxZGM1OTM5NjdjZGYy
OWY5YzkwHhcNMjYxMTE1MDAwMjEzWhcNMjYxMTE2MDAwMjEzWjAzMTEwLwYDVQQD
EygzMjMwM2UwMGUxMTAwNjU0MzZkMDZlNjVlMTg3N2QyYjQ5N2RjZWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiQ9NOe9fa6/NRG8Yi4CQ8V48ohZv
OcVBsQPv54dgRptMV4v8VGy/qKvqFqad+m4o7pH9hrW9h1jiZ4ncXUYvEqn6w8n9
ko4IHcGQz9G9qXvsNJbfRFEUSHvBfhceWkUthO7K/3tYmY/uCmXWOB0uM4zrxUDr
UtY7k0HYiayBBlZAo2xTUcjlVhe18hBubzQFJH/ng8AFe6ljsDvdA4trvgYAcggL
hvmPpAs5WgcZI/3y11cH5dhEUDYFkR79onwHXL/oiPdr9yqLMHOObpBi8YHKKVD5
yJktwLQNmAOpcjhUYhJJTFuGwy5KlDkbxVlGhCcPTbwaMzfhESIIwygA8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDIwPgDhEAZUNtBuZeGHfStJfc7dMB8GA1UdIwQY
MBaAFFW68mlnUQs8UuRtHcWTlnzfKfnJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAt
NDlmOTgxZWU1OTgxLzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81YWE0ZGMtZDE4NC00ZGI0LTllMTAtNDlmOTgxZWU1OTgx
LzEvVmJyeWFXZFJDenhTNUcwZHhaT1dmTjhwLWNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATAkOOSI0
8BILSUffH6NS/vxynGpz5yYB3TEadNPBlJeYIyyhgnOAGCn8BvtAZ/8EF5WJG1yN
vnZKIut0ifsLYmnEx3YA9TW6bxxxxX3rtxm/3kzbouPpNWfUvA8HiKGL6j6zipz5
wdfpolIF+WGpxQkiT/QUJJ1KIjfjKnB5WkGKFJrbUH2LHx4mlovJUdOtillLkMZN
367WRFCNBtgmdOWaoxqSOb4zeV7XEpg88iyflEyXpsnVeCaCHFmhLDHz5RLc+Y0D
f19HWyT9JXl/7eQ/qiKTfl/MQRtgcycQA5uXr4fUP3q0VfoD2dzNNeY35zp/Hi4i
rFnazfe6YLyDBA==
-----END CERTIFICATE-----