Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File:                     VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier:          zB3Wu9KLKouVK/oAyB5rPV8MvpFo8Zhokw2b5Q0QsGs=
Subject key identifier:   E6:A6:A1:17:4E:29:1E:5F:61:9F:19:25:A4:EB:34:16:D3:5D:CD:B9
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer:       /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial:       01A14985C725DBE8FB087368938344097AD3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number:          05DB
Signing time:             Sat 17 Oct 2026 11:01:06 +0000
Manifest this update:     Sat 17 Oct 2026 11:01:06 +0000
Manifest next update:     Sun 18 Oct 2026 11:01:06 +0000
Files and hashes:         1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: OddcBwrDM9EDgTYRoWTaYvTlNuhVqVqbfCot1vCxmio=)
                          2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 18 Oct 2026 11:01:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:49:85:c7:25:db:e8:fb:08:73:68:93:83:44:09:7a:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
        Validity
            Not Before: Oct 17 11:01:06 2026 GMT
            Not After : Oct 18 11:01:06 2026 GMT
        Subject: CN=e6a6a1174e291e5f619f1925a4eb3416d35dcdb9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f6:1a:bd:7f:b3:bd:b0:70:46:57:76:46:fb:
                    51:8a:7f:0b:ad:85:e5:4a:15:09:83:91:39:da:1c:
                    ca:bd:19:8a:a8:b7:0e:04:f6:f1:56:69:fb:d0:57:
                    c7:c2:05:15:02:d2:93:7a:23:07:7f:fb:46:35:8b:
                    d6:7d:d8:6e:3a:8d:b4:2e:50:f5:09:34:b0:82:40:
                    c6:ae:61:67:f3:c3:31:f2:fc:26:49:26:63:9d:5a:
                    b2:dc:20:37:93:3b:db:54:22:bf:96:ca:44:7e:c9:
                    71:44:00:fe:b2:d7:b5:c5:f5:0b:c1:80:f6:f7:ac:
                    48:64:a9:e7:c4:d7:98:aa:09:85:08:a3:41:46:40:
                    79:eb:bb:4c:1a:4f:90:2e:77:f2:ff:30:1f:87:8e:
                    c5:bc:4b:82:a8:9e:e6:a4:42:f5:22:5e:08:40:84:
                    dc:88:de:83:b4:b6:16:5b:59:f1:26:80:70:9e:12:
                    78:99:62:d1:ec:a3:7d:34:49:a4:a5:f4:de:67:64:
                    5e:0c:db:7f:1a:53:76:2c:cb:8e:cb:04:ba:9b:2c:
                    1e:87:13:2f:26:28:15:55:ab:53:01:2a:05:3b:67:
                    38:b0:5b:e5:c2:a3:e3:cc:8e:f2:f9:cf:2f:bb:8c:
                    eb:e3:4b:55:27:aa:a5:c5:7f:a0:ed:a6:37:fd:e7:
                    82:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:A6:A1:17:4E:29:1E:5F:61:9F:19:25:A4:EB:34:16:D3:5D:CD:B9
            X509v3 Authority Key Identifier:
                keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:53:50:2b:1c:ab:ce:19:96:25:9d:70:ef:18:a1:b1:9e:f2:
         50:cc:54:06:44:1f:82:aa:19:50:6e:e7:d2:7f:25:fc:f3:ab:
         5b:12:14:a1:ce:4c:41:63:af:b7:cc:a0:61:9d:7b:bf:9e:40:
         a8:bd:3a:ba:79:c8:bb:91:7d:22:1b:d8:40:42:15:96:c3:44:
         53:98:c4:22:b3:ce:78:df:4a:26:9d:64:55:97:e5:15:33:82:
         6e:77:35:48:28:d3:c7:42:c0:bc:88:aa:a8:5c:ea:3e:51:58:
         c9:4f:d9:33:7e:07:26:2a:86:7e:f4:e2:1e:cf:c2:2a:4d:e4:
         37:1b:66:6c:92:b4:79:85:fc:b5:00:fb:9a:30:a2:93:3c:34:
         27:64:2e:cd:fb:2e:f8:f8:76:e0:a0:48:ad:0f:8a:a1:38:01:
         11:09:54:0e:b7:97:88:95:1b:b3:ef:fb:15:09:c8:14:4b:d0:
         8f:41:39:56:d1:95:d4:73:db:4e:62:39:18:b2:fe:4c:cc:7e:
         1d:a3:0e:65:be:81:92:66:ae:a0:16:2e:18:05:ba:6e:55:18:
         fd:44:28:ef:56:fa:06:49:81:64:64:fc:82:b5:d2:21:e4:85:
         3c:85:91:c8:ee:6a:1e:56:61:48:d1:0d:67:a7:d5:a4:fa:4d:
         e1:28:4b:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFJhccl2+j7CHNok4NECXrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTU4MjAzZGEzYTFlOTYzMThlODUwNDM0MTFlN2Q0ZDAz
ZDRjNDQwHhcNMjYxMDE3MTEwMTA2WhcNMjYxMDE4MTEwMTA2WjAzMTEwLwYDVQQD
EyhlNmE2YTExNzRlMjkxZTVmNjE5ZjE5MjVhNGViMzQxNmQzNWRjZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvYavX+zvbBwRld2RvtRin8LrYXl
ShUJg5E52hzKvRmKqLcOBPbxVmn70FfHwgUVAtKTeiMHf/tGNYvWfdhuOo20LlD1
CTSwgkDGrmFn88Mx8vwmSSZjnVqy3CA3kzvbVCK/lspEfslxRAD+ste1xfULwYD2
96xIZKnnxNeYqgmFCKNBRkB567tMGk+QLnfy/zAfh47FvEuCqJ7mpEL1Il4IQITc
iN6DtLYWW1nxJoBwnhJ4mWLR7KN9NEmkpfTeZ2ReDNt/GlN2LMuOywS6mywehxMv
JigVVatTASoFO2c4sFvlwqPjzI7y+c8vu4zr40tVJ6qlxX+g7aY3/eeCfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOamoRdOKR5fYZ8ZJaTrNBbTXc25MB8GA1UdIwQY
MBaAFFQVggPaOh6WMY6FBDQR59TQPUxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMt
MWE1NWQxZTRjMjFjLzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS85MWZkYjMtMTNlMi00MmIyLWFjNzMtMWE1NWQxZTRjMjFj
LzEvVkJXQ0E5bzZIcFl4am9VRU5CSG4xTkE5VEVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf1NQKxyr
zhmWJZ1w7xihsZ7yUMxUBkQfgqoZUG7n0n8l/POrWxIUoc5MQWOvt8ygYZ17v55A
qL06unnIu5F9IhvYQEIVlsNEU5jEIrPOeN9KJp1kVZflFTOCbnc1SCjTx0LAvIiq
qFzqPlFYyU/ZM34HJiqGfvTiHs/CKk3kNxtmbJK0eYX8tQD7mjCikzw0J2Quzfsu
+Ph24KBIrQ+KoTgBEQlUDreXiJUbs+/7FQnIFEvQj0E5VtGV1HPbTmI5GLL+TMx+
HaMOZb6BkmauoBYuGAW6blUY/UQo71b6BkmBZGT8grXSIeSFPIWRyO5qHlZhSNEN
Z6fVpPpN4ShLqg==
-----END CERTIFICATE-----
Generated at Sat Oct 17 20:46:57 2026 by rpki-client