Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          wjUxLhLaSCZOpoDGpBqc/iRcsSiYvXAsVem8TU7Qbt4=
Subject key identifier:   57:82:2C:7B:BD:3C:9D:75:95:7C:E7:F6:1B:25:04:19:D3:60:3C:D5
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       019D27A8A60DC0B89AF1483DD8486C70ABE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          048E
Signing time:             Thu 26 Mar 2026 01:00:57 +0000
Manifest this update:     Thu 26 Mar 2026 01:00:57 +0000
Manifest next update:     Fri 27 Mar 2026 01:00:57 +0000
Files and hashes:         1: 03LMksp47oDVGmMApNkpC-Qj5oE.roa (hash: f/U7iiBnLhVZvsPDN3o9USa5Z6pVWUtWsL9gLOdZA8I=)
                          2: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
                          3: 4RgBaK8YPgKkMdveuvow-2RHMMI.roa (hash: 9a6LE0xEyW//ahAMtQkB4FLm+3fX6uAlfJoQovqPyzg=)
                          4: 5dUccTjOeXcH3PFxvpgXM81-0uk.roa (hash: 7RrrJVqzPlIAsA/Vb+L/2hzt7ubyCiLJfQ+Wwlb716w=)
                          5: B0NZx8wGc2BfFV7HL837EN9xDmk.roa (hash: PhnHNgGL/ecjQNAEqTX4yvFXZgk/h6y3wBnt7UEfO/w=)
                          6: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
                          7: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
                          8: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
                          9: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=)
                          10: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
                          11: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
                          12: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
                          13: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
                          14: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
                          15: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
                          16: Pfn4rcRbKDJuVSkrcgYb9cu78A4.roa (hash: idjJ3BOFW0sv/bdtwbSz3j+KpA5MQW5Fct3dXY7lh4s=)
                          17: QoSldck7JuNQZZNum-VAZuQLAsE.roa (hash: BhLiuJKGAUIK/3IE4lS7ceagXck8UETCu/pPkUpva/Q=)
                          18: VFq7oOwuoK-4Ezbw8Byjy6HKneY.roa (hash: /kEtmYfU+u/9qUgUdtsAwlr6x9IMzXSTi0t0BiXXPhA=)
                          19: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: 80rgn0+KPp2H21L2wSCR0FG44XVlXeN7rB3SqD9H9as=)
                          20: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (hash: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA=)
                          21: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
                          22: j4nUYOaKHoPffJAz1cqPosqerIk.roa (hash: qzx6KYLIX2I4Q509IMnF1YKlqNXT2ELmgiXx8moWdwc=)
                          23: oMXuSjHyTi2ISV5ZXkeB_GmQ2qQ.roa (hash: 1OWtYAgWFUz9U3ZRyQBV7HsQLa1e5YTunuUhvpeW3zA=)
                          24: q6YKUxlVHXPLjqallGnzCEm5RoQ.roa (hash: RZs0dJ+0lk6Oax9jGpNGT7gy4fY/ZgONFVX3dfP/0cM=)
                          25: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=)
                          26: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 27 Mar 2026 00:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:27:a8:a6:0d:c0:b8:9a:f1:48:3d:d8:48:6c:70:ab:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Mar 26 01:00:57 2026 GMT
            Not After : Mar 27 01:00:57 2026 GMT
        Subject: CN=57822c7bbd3c9d75957ce7f61b250419d3603cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:08:7c:ee:9e:27:5a:4f:5f:da:23:4a:26:11:
                    f4:d3:80:e8:31:a8:a8:3a:b5:b6:01:35:58:3d:e6:
                    66:a3:56:f3:42:0a:f3:25:84:66:e1:c6:4c:f2:ad:
                    44:b0:be:4c:5f:2a:70:e2:4f:cb:9c:88:8b:ac:29:
                    66:74:92:98:7e:7b:ef:5c:c9:4a:4b:f9:50:29:7d:
                    d6:0a:19:46:3a:c3:65:2d:85:4e:82:5d:a7:e0:b8:
                    c1:85:8b:79:88:f7:c3:72:19:87:04:af:6a:44:57:
                    c3:28:6f:51:95:b1:94:65:15:8b:f8:0c:45:9e:da:
                    e1:cc:66:40:3e:0e:6b:0c:88:41:2e:e5:b2:93:2b:
                    fc:30:a5:c2:dd:11:c4:ae:36:37:d6:1d:7b:c6:1e:
                    3c:a8:1e:6e:94:39:46:d8:4b:dd:4a:42:8e:02:19:
                    85:de:d4:d7:98:c4:45:66:b2:59:01:17:26:2a:2a:
                    65:5d:d4:ff:c2:d0:6d:c1:15:df:e6:2a:a2:66:74:
                    c5:3c:12:6d:95:1b:28:93:5f:8c:4f:f3:52:ec:3b:
                    06:1c:3c:d3:77:14:68:c9:8a:b0:1c:fb:72:31:da:
                    a9:7f:e3:1b:1c:05:82:eb:5d:4c:c1:67:c3:26:0d:
                    51:3d:41:56:8d:02:e6:53:da:fe:2c:bc:e5:46:eb:
                    e3:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:82:2C:7B:BD:3C:9D:75:95:7C:E7:F6:1B:25:04:19:D3:60:3C:D5
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6e:33:d4:8e:03:58:0c:cb:ee:fa:24:0c:bc:0e:21:b0:9d:79:
         0e:2e:28:d0:a8:ab:c3:68:90:20:cd:9f:35:02:5b:b4:fb:fa:
         a8:86:24:dc:bb:62:12:98:28:1b:fc:8a:a2:82:47:42:7a:cd:
         ec:9c:5f:a0:a1:35:2f:72:ba:20:b5:d8:be:d3:65:ee:f3:8a:
         d4:ed:2c:8e:95:8a:c8:06:8d:1c:e1:fd:35:f0:bd:4c:c4:bf:
         ed:f0:e3:73:9f:ea:b3:70:e5:9d:1a:b6:11:3d:8f:40:6d:26:
         9f:30:12:18:d2:47:76:65:80:c7:af:af:89:d1:61:f7:a2:35:
         e3:77:b2:97:bd:59:9c:8c:da:40:00:93:38:6a:28:2a:3d:85:
         24:d0:33:26:2e:da:6c:f2:df:10:2c:1a:ea:26:a8:79:0a:51:
         a8:06:bb:79:15:28:75:97:26:57:2e:10:3a:66:af:fa:cd:6e:
         56:91:71:02:ad:cf:e1:54:14:6c:7e:09:63:e4:a2:cc:d0:7a:
         47:b6:c2:75:d4:67:45:bb:8e:df:13:5f:b8:eb:d4:7b:af:e0:
         dc:fc:69:ba:9b:b7:92:81:09:3b:c7:d9:e5:47:88:3f:35:da:
         7a:61:f8:dd:a4:f7:e2:d1:51:1f:32:76:55:84:90:2a:ab:8e:
         71:17:80:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:56:52 2026 by rpki-client