Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
File:                     VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft (raw, json)
Hash identifier:          GKvJomZn/Lb1T1T5Py2Y+fVYN7CMj1qjjDuNvEA21fE=
Subject key identifier:   57:E7:4C:96:1C:D0:FB:B0:E5:87:17:11:69:D7:C6:B7:60:40:54:0A
Authority key identifier: 56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54
Certificate issuer:       /CN=56b98f83ccbda7c19f004151c98b57c59d268f54
Certificate serial:       019E1D9079D8923828E123A8BC0406EDAC09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
Manifest number:          0A4A
Signing time:             Tue 12 May 2026 19:01:08 +0000
Manifest this update:     Tue 12 May 2026 19:01:08 +0000
Manifest next update:     Wed 13 May 2026 19:01:08 +0000
Files and hashes:         1: 02aNuL727YimobKqbRL2RjkCGsc.roa (hash: oYsmI39E8S+vq9s+1QolNYuR35O5QRqsFtuYCX7LY/8=)
                          2: 2eL7GAOQBnjU2vE4NUK1PCgwfWg.roa (hash: Dwa67ru8l8X28sKKtvbdAV+bA3pDTfopqKgDja+YPG8=)
                          3: 5ehTC2JCfs2MQwmPtVa9QU8zu3I.roa (hash: OOIm1NGAg78CrgVbVQY8rZpUYCo0Z8If87gxxhJsBns=)
                          4: 67mS5fsZltU_-kwbfaIPPxKzh7s.roa (hash: wdr2hYEvrPtVW+B9M61tFl1nk10pFCbEkbxLj6jpw1E=)
                          5: 9RS1bKDYnq9z3G_R-qYUvctWzoI.roa (hash: s7GcVAOs/PYU6IZMz5kKjwJ/V/5aeZe5gRNUUTw/o4E=)
                          6: ENfi398-VJ1QvTZ9YL6nNM6z3x4.roa (hash: RXmEKC2aKEuTWb8kU/cCLrBg7g83D0O3fDo3Q5mhY4U=)
                          7: GLIVDZwdHIhf2YmTYBHvAbNDrx4.roa (hash: maJ9v9a1HfvNH9UIPPe02lvLG4iy2FiMboD9G9nuCb0=)
                          8: IWnIeaiesxLJUOrbvIs82ViVndc.roa (hash: fKg3HWPCoL1skKqebVG/YrN01QJ1CR0hNn4VrGiEosI=)
                          9: Jd31qx-yiqUqWWo7jPzPNCOki0I.roa (hash: rFu9Hzpz6Ul+Q0D/N0VeQ9NOX2DGu7TJn85l90Uus3Y=)
                          10: K9X7YvhT0dRGJQlJCyJci9GYnf4.roa (hash: 5cJq68tTzImKyszSV4nZ/PS3tI8ZSP0+QNO2XzbQrOM=)
                          11: OJtF0pPBQbFSyVDdFWy9pmhhoqs.roa (hash: DSt/qq/J3XwZPhyRiVNSutgXRx//0+8JQmzXUU3O2qo=)
                          12: Rua5aXmaZ0cTAyL2wzLDFD3z2Y0.roa (hash: /VyBRk5OqWGk6rKvLvZBGoKiQq0lLDGIs2kjfMI6eQQ=)
                          13: SDFl-dcGqJ4rviFvDKNjX5FqVRQ.roa (hash: D7VcT2WmquQVyow8pUPB/uhRTsYZ9Gv0ho2KzxuRPWg=)
                          14: UzKw5JsVVm-z36AxgV1sIfyPCVg.roa (hash: 8QY/FsQE18kg5ww8X7hAt6D0NGCuOUcWF14pdaz88ts=)
                          15: VK4nOfqgpmXOVhn34C5sbxe-Wj8.roa (hash: gIkDa5LqgOok0v/RH+gp9FiPITDslBneM2wjtpnpxmc=)
                          16: VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl (hash: L/r6LQI8GZ457CYfCwUvAjiR1SP6Axd0n8YeNPkwiyI=)
                          17: WnbZZnjRXFHiwkJ7AQuNJnrAiRo.roa (hash: GkbhcKsqL/QECgrT0ae5dyM8eF/71EYoKhLw60/jZkw=)
                          18: ZZY4QUjno5yUu-aUZBfA-J-Y1Zw.roa (hash: SoXL/gw+CMUE69BuTsPHvdy46MtYr2qhRpWn0RsS1YM=)
                          19: _uCvTvS4TLRKOY-Zp7Kzlz_6B-0.roa (hash: yW2eAbC65z+mIRn5yCj4vtbXusOyzMkXOf4o7Pox6bc=)
                          20: aWcPUj1DCDuQO6qmjauPK8xInfo.roa (hash: k8tfsJzdjTq2aomYV3WxH/lnSIh4yY+NAufWvoQ6Pds=)
                          21: bRMOUlNOCfzR4ErU0rYz0V_P-ek.roa (hash: BQ0CfpSYs9L+JYIJuNZHmCZyYfkjnyafafs9iDbVjxM=)
                          22: e7-9LCeb-3BLXkp_zjmQWHgwSC4.roa (hash: loc3ZJs/gO81j4lMtHMphZSezIZdKFT+rGD1FmHI/PI=)
                          23: ef3ELX7iaik6XnkIuzN-OXTNzqk.roa (hash: J1z15FpdqDCZCa3eLk16tp1TWfZ3MvqSUt2gCJ4El8Y=)
                          24: hmyypgZeZjs1rI8ypzPihdUNMjE.roa (hash: qWNykdL6epLd/pHRnj2yljaFdAOhHq0rhbaXB9zAVI8=)
                          25: hzKtJYmQx2VKDR4are4X8Q6MlNE.roa (hash: Juf71zJJbJe4QMMrbX8fLK426s9dmhQKiIlkp/1nubQ=)
                          26: jQbews-PB3moyhJrqDiH9CkH6Ko.roa (hash: pgs7MGu7rOMWQQ3bkH9IRfbeLQBYLbhv0iGyBcHqZis=)
                          27: mgruyOr_bhqrj5DuwHE1ll_puAo.roa (hash: YRLf4HOJtTcb2BtLsq3In58Yh9rOqegL3BjCqnES5Mc=)
                          28: oNhBE7cWesJejfu6VNBpQvuJ7Pc.roa (hash: eksGpiRZY4AMJcm0oeZ2OjL6HKGtTKXD/3FT0xK8N48=)
                          29: rPipkXEDpKlmHXVu6A2VEAhiTo0.roa (hash: zEdpM4O0K+t4gO5fwCfTb7pIPqmbQjGPynFqeCZgI90=)
                          30: s7jTmvZ9Uu0lTUaXjscRfprTxvQ.roa (hash: c/c+gPrnfsRNn18SCCqI0mKo4h5PNPD7zev+q5M20v4=)
                          31: slA82WP_VU7ODQ8vUg0JDfoLGXE.roa (hash: uRkzTB028wlP9aSgZraF4khx6ZKPBzunp3sVcsD/9As=)
                          32: tETOyxkLoMNu42R_r2YtHtjW5R4.roa (hash: cHO6EZe5v4WJrUZm/pjUSj2daC/uz6A1814sqH7j/cU=)
                          33: tJFkOAe-uPVKySdLZlUOA_COLBw.roa (hash: 8vfkTUAP9rveynPhVWa2m94RZyQ0iWmpoHifiomeTy8=)
                          34: wa8P_s-riz1na9eGferqmctY1qI.roa (hash: QKP4EaklAbfZpQZYefD8a9Ic7nq8AvtyjHE0G8KcIs0=)
                          35: zykWo9Ct0L3lBW7ewPhEqmB_T60.roa (hash: zpltO7/7ljaNziIpUrjqsethtbmoWLWerHaLe5S+B/s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 14:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1d:90:79:d8:92:38:28:e1:23:a8:bc:04:06:ed:ac:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56b98f83ccbda7c19f004151c98b57c59d268f54
        Validity
            Not Before: May 12 19:01:08 2026 GMT
            Not After : May 13 19:01:08 2026 GMT
        Subject: CN=57e74c961cd0fbb0e587171169d7c6b76040540a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a5:2f:08:a9:56:41:49:24:16:6c:1d:60:15:
                    f8:4b:96:3d:24:9d:00:9c:64:b7:09:e7:c8:97:53:
                    ce:77:d9:d7:69:22:34:71:b7:10:10:75:78:59:49:
                    20:61:67:d8:14:3a:0e:6d:39:c1:a1:4a:a5:6c:22:
                    38:82:bd:b3:5f:cc:db:02:f2:79:ef:ab:9c:fb:7e:
                    f3:bb:70:da:8d:28:e6:77:7d:cc:f5:43:80:3d:0a:
                    bf:0c:7d:df:e8:ed:59:97:f6:a5:90:5f:41:00:76:
                    e8:7f:49:eb:54:a6:5b:1a:a9:47:64:4c:3e:c5:94:
                    dc:53:f2:65:5c:98:ca:8b:6c:f6:34:34:11:65:8c:
                    71:2c:5d:51:1d:97:6a:98:fa:c2:e4:72:e6:39:de:
                    bf:dd:72:a5:fa:bd:a2:7e:3d:c1:d6:4e:bc:d8:ed:
                    43:e8:fb:f8:6c:2f:e9:34:59:aa:10:a4:54:5a:48:
                    b2:be:0e:2c:a7:53:28:63:12:66:fb:2d:d2:c5:9b:
                    bb:09:b4:e8:6e:2b:5e:65:a8:bb:35:19:26:e8:f6:
                    ef:a9:b6:0a:93:d3:5c:09:8d:e2:d0:fd:c4:8b:59:
                    2b:6e:f4:e4:74:c2:d5:92:cb:70:55:da:80:ca:26:
                    55:97:6f:cd:4f:95:6f:29:58:95:8d:53:4d:bd:e0:
                    d2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E7:4C:96:1C:D0:FB:B0:E5:87:17:11:69:D7:C6:B7:60:40:54:0A
            X509v3 Authority Key Identifier:
                keyid:56:B9:8F:83:CC:BD:A7:C1:9F:00:41:51:C9:8B:57:C5:9D:26:8F:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/83/8cb935-71a3-4db3-9f3f-7aa7fc359655/1/VrmPg8y9p8GfAEFRyYtXxZ0mj1Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:0b:6d:80:b4:62:7c:2a:62:ac:a8:44:05:78:03:46:18:97:
         3b:22:ad:c5:4b:e3:8d:f6:79:b2:0e:35:d6:c5:ad:0e:ca:cd:
         56:64:d0:1b:9b:93:07:2e:30:83:1a:f2:83:4e:6d:df:22:c6:
         58:5a:b6:00:14:f3:69:83:93:c5:90:de:5e:c1:65:22:51:8e:
         f3:4c:9f:d9:f7:4e:81:6f:86:91:72:30:80:dc:95:0b:b0:d9:
         90:8e:e3:8e:7e:0c:79:71:0f:dd:98:87:87:a9:4f:99:57:07:
         5c:9f:63:c1:5c:fc:f5:00:90:9b:33:55:12:6b:ee:b2:8d:f5:
         32:95:75:8b:d3:03:fa:12:f9:19:ea:30:a6:cf:33:87:ee:b6:
         00:20:72:e3:8d:3d:68:9c:cf:b0:07:b5:9b:24:85:f2:a5:2f:
         94:fa:f3:04:3e:d4:3a:7a:d0:e0:90:5f:5a:60:39:cc:ec:0c:
         5e:8c:01:46:de:fd:89:c7:25:eb:6e:08:7a:82:eb:65:16:9b:
         c6:b6:23:94:f7:21:a6:3b:66:a4:7e:10:24:88:2c:0e:eb:2f:
         5a:46:5a:ab:45:a9:5a:6a:68:80:7c:44:24:95:92:73:55:79:
         37:c2:c1:fb:57:16:2a:55:40:cc:42:57:c4:70:70:7a:fa:fe:
         13:22:0e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:20:17 2026 by rpki-client