Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File:                     VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier:          mSszzJWgI2r4ITkEttxYHOyXEfbBi5ENrablGpWhX8A=
Subject key identifier:   2A:17:EA:DF:B5:7F:9D:64:18:87:7F:9C:7F:8D:E4:95:F5:C4:7B:FC
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer:       /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial:       01A1DB38559449286CAA1D9888041C50E8DB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number:          0487
Signing time:             Sat 14 Nov 2026 18:01:04 +0000
Manifest this update:     Sat 14 Nov 2026 18:01:04 +0000
Manifest next update:     Sun 15 Nov 2026 18:01:04 +0000
Files and hashes:         1: IV6hEGtvewaScYeQgJmPo7xDBDs.roa (hash: vdNOmWH0gy9lyzxoYUgEi1DbM3SHpf9kARH3ZrhyUYM=)
                          2: M9L4U5JoYbCtWv7gAD7KA_WviB4.asa (hash: RUh7/m1A6kF4bAMmLaC8OSPQKRtwY1TY3SbqfUWHrbE=)
                          3: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: 6ddEHcGrSuYA7ku2Wnz33bYbq7xyl1iCR397pEsiS1s=)
                          4: ddPF5IXwtHP8cqPDz5EJOduiQxo.roa (hash: DUmSyQho/F9e/s62qQAzd/gG0iMM1Y29ogzTRdGXlbg=)
                          5: ia14Tnc-_EagLBaYG89muNNODFc.roa (hash: TkKKwndRj9fKI51PKJUky4rdGBCgaRMhiWosKrEchf4=)
                          6: xJ_iny1bVqkNWtvMrs43rcaxanU.asa (hash: 3nwcITOIKJiDD5S9Jg2GJ0ICoshE9AoVE4ss3poo9EU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 15 Nov 2026 18:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:db:38:55:94:49:28:6c:aa:1d:98:88:04:1c:50:e8:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
        Validity
            Not Before: Nov 14 18:01:04 2026 GMT
            Not After : Nov 15 18:01:04 2026 GMT
        Subject: CN=2a17eadfb57f9d6418877f9c7f8de495f5c47bfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:8a:62:b9:e2:f7:5d:4e:bf:94:bd:ae:87:85:
                    d4:a1:f0:39:d3:6e:cf:5d:0c:16:cd:a9:0c:ea:69:
                    0d:e3:67:dd:17:e9:09:5c:24:f2:5f:5d:18:99:76:
                    bf:54:44:a4:da:81:ff:91:1b:58:1c:a3:e0:81:d1:
                    f7:33:ea:ce:03:8c:31:18:f9:ae:cc:d1:ed:f0:85:
                    44:6f:24:7b:d8:46:c0:cd:b4:4e:c8:50:66:39:68:
                    36:f2:3e:b3:f7:c6:90:d1:5d:53:c2:01:c5:6f:62:
                    5b:35:d7:c9:2c:5d:fe:01:cf:44:b9:32:91:85:5a:
                    45:a1:98:ac:4f:11:4e:18:2e:c9:28:86:54:ee:72:
                    47:3a:19:32:8b:85:ca:47:87:46:d5:4f:6b:aa:68:
                    bb:97:fa:09:7a:b7:9a:6d:9f:d6:b3:c5:03:3c:cc:
                    b9:70:e0:8a:60:59:1c:65:7c:ae:d7:c4:32:a2:c0:
                    80:4d:6f:26:15:99:2e:87:de:4e:03:02:b3:eb:3a:
                    ae:e4:29:8c:59:58:c9:17:5c:54:76:00:6f:85:9b:
                    3b:2d:d1:66:e3:0d:d1:51:07:e9:c5:6c:3d:69:88:
                    9a:93:81:f5:51:58:7f:38:2f:c7:d6:31:00:a1:e4:
                    c8:85:1a:80:9f:29:f0:bc:30:14:0a:5d:3a:12:87:
                    84:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:17:EA:DF:B5:7F:9D:64:18:87:7F:9C:7F:8D:E4:95:F5:C4:7B:FC
            X509v3 Authority Key Identifier:
                keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:29:9a:61:69:8a:20:3f:c5:12:d3:b5:f5:4f:54:c0:9f:d5:
         11:9d:ac:67:26:fd:a8:70:18:c5:50:63:06:97:58:07:4f:80:
         00:fd:11:1c:f8:36:37:f0:9c:2d:cb:31:fb:e7:3e:d5:2d:26:
         68:34:c9:07:aa:e3:a9:64:13:19:d5:51:91:bc:95:99:17:3c:
         34:e8:2e:1d:40:88:d3:71:d5:3d:48:66:3c:a9:56:c3:d5:c3:
         4b:27:61:65:fd:0b:b2:60:24:2c:19:e9:75:bd:0b:21:fc:55:
         4d:4d:e5:2b:4e:a8:cc:d3:24:e8:28:b0:04:71:4d:5f:36:93:
         52:13:37:d4:49:f3:bf:a9:f8:6c:e2:c5:f6:85:08:1f:61:d1:
         c5:e0:d8:d5:0c:c5:f1:aa:aa:2c:91:b2:5f:f5:a6:b3:7a:9c:
         fb:d0:81:67:4b:34:97:8a:fe:95:af:af:2c:46:e8:ac:97:e2:
         11:73:28:61:b0:87:d8:b4:d5:3f:b5:1a:84:f1:24:38:33:ec:
         06:6f:56:e0:06:e4:f1:30:d1:b4:34:f9:16:a0:8d:02:3d:0e:
         d0:97:ce:43:b7:cb:7a:eb:e8:a1:ab:55:bd:21:56:00:ce:28:
         73:6d:cc:6c:29:1c:df:e7:89:52:e8:41:9e:ad:25:a1:3c:ec:
         70:6a:e5:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHbOFWUSShsqh2YiAQcUOjbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTM3YzMyMjQ5MTA3ZjI2YjE3NDE0NTFjZjEwMDM5Mzgw
YjhiYzMwHhcNMjYxMTE0MTgwMTA0WhcNMjYxMTE1MTgwMTA0WjAzMTEwLwYDVQQD
EygyYTE3ZWFkZmI1N2Y5ZDY0MTg4NzdmOWM3ZjhkZTQ5NWY1YzQ3YmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIpiueL3XU6/lL2uh4XUofA5027P
XQwWzakM6mkN42fdF+kJXCTyX10YmXa/VESk2oH/kRtYHKPggdH3M+rOA4wxGPmu
zNHt8IVEbyR72EbAzbROyFBmOWg28j6z98aQ0V1TwgHFb2JbNdfJLF3+Ac9EuTKR
hVpFoZisTxFOGC7JKIZU7nJHOhkyi4XKR4dG1U9rqmi7l/oJereabZ/Ws8UDPMy5
cOCKYFkcZXyu18QyosCATW8mFZkuh95OAwKz6zqu5CmMWVjJF1xUdgBvhZs7LdFm
4w3RUQfpxWw9aYiak4H1UVh/OC/H1jEAoeTIhRqAnynwvDAUCl06EoeEuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCoX6t+1f51kGId/nH+N5JX1xHv8MB8GA1UdIwQY
MBaAFFQTfDIkkQfyaxdBRRzxADk4C4vDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQt
YzhlMTU1NDBjODA2LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy84NWVlOGQtMWQyNS00NTNhLWJiYmQtYzhlMTU1NDBjODA2
LzEvVkJOOE1pU1JCX0pyRjBGRkhQRUFPVGdMaThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWymaYWmK
ID/FEtO19U9UwJ/VEZ2sZyb9qHAYxVBjBpdYB0+AAP0RHPg2N/CcLcsx++c+1S0m
aDTJB6rjqWQTGdVRkbyVmRc8NOguHUCI03HVPUhmPKlWw9XDSydhZf0LsmAkLBnp
db0LIfxVTU3lK06ozNMk6CiwBHFNXzaTUhM31Enzv6n4bOLF9oUIH2HRxeDY1QzF
8aqqLJGyX/Wms3qc+9CBZ0s0l4r+la+vLEborJfiEXMoYbCH2LTVP7UahPEkODPs
Bm9W4Abk8TDRtDT5FqCNAj0O0JfOQ7fLeuvooatVvSFWAM4oc23MbCkc3+eJUuhB
nq0loTzscGrlSg==
-----END CERTIFICATE-----
Generated at Sun Nov 15 00:11:18 2026 by rpki-client