Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File:                     VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier:          2AFckA7BsMHYBfvpUZdIxTpewPq4J93wXZXeYDx721k=
Subject key identifier:   47:D7:E8:CF:77:E2:30:50:31:64:1F:16:9B:28:08:A5:3D:F4:0F:46
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer:       /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial:       01A1DE395582951827C82CCB8873C40BA282
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number:          0D14
Signing time:             Sun 15 Nov 2026 08:01:01 +0000
Manifest this update:     Sun 15 Nov 2026 08:01:01 +0000
Manifest next update:     Mon 16 Nov 2026 08:01:01 +0000
Files and hashes:         1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
                          2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
                          3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
                          4: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
                          5: LW7rb0AaEUjbPH9dnaOyHTBi76E.roa (hash: p1ZkXmO8OLBHzuVbdIzp+e8cKBOvTv26ZXhPyk/iQ9g=)
                          6: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: Tshu46EzeM6OZ/VE5RsvqIamfFrJSFWeLytNyHW9ZKw=)
                          7: erW8LenmE07YpIlq2UiaPLbTHRY.roa (hash: ryAYbA45+mCp7UF8NMvRhWhwCEVlA2MdeLlfo2S/HmM=)
                          8: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
                          9: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 16 Nov 2026 08:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:de:39:55:82:95:18:27:c8:2c:cb:88:73:c4:0b:a2:82
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
        Validity
            Not Before: Nov 15 08:01:01 2026 GMT
            Not After : Nov 16 08:01:01 2026 GMT
        Subject: CN=47d7e8cf77e2305031641f169b2808a53df40f46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:c4:fc:b9:25:26:39:25:ad:74:bb:d0:59:74:
                    8f:14:ce:99:8d:61:cf:32:7b:93:d1:ae:f1:6a:70:
                    08:df:d2:3b:92:ea:68:50:30:43:55:10:97:74:ac:
                    86:73:e1:df:1c:3d:47:18:b2:62:f9:3b:e7:3b:e0:
                    e3:4c:50:27:9c:5a:d3:20:42:50:b5:a8:01:3c:cf:
                    bf:d5:4c:a4:8b:28:2a:fc:92:8d:18:39:4e:c4:ef:
                    37:30:74:9c:76:2a:4f:5d:94:07:26:20:89:8c:c8:
                    66:8b:7b:a0:62:2b:53:e8:ef:cd:b1:ef:7b:15:95:
                    40:7c:55:83:c9:6b:8f:da:f4:05:79:2e:0e:a0:76:
                    a3:42:88:2c:c8:0f:81:05:33:56:c7:29:b7:2d:1e:
                    83:32:a2:63:8f:a2:0a:44:64:80:27:a2:de:90:db:
                    69:9f:c2:ac:10:ec:47:25:1e:7e:87:c2:0e:e5:53:
                    79:c4:47:00:18:54:d0:4b:e2:7d:1e:0c:de:0d:e9:
                    67:ec:cf:7a:34:18:d9:8d:8e:41:13:a0:af:84:75:
                    f5:52:9d:b4:19:92:91:47:a9:c0:5b:c4:d5:98:d1:
                    02:5f:e9:b8:89:da:fe:7e:78:83:07:04:7b:e4:18:
                    f1:dd:10:28:e1:2c:e2:41:0e:60:21:d4:1c:49:c2:
                    0c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:D7:E8:CF:77:E2:30:50:31:64:1F:16:9B:28:08:A5:3D:F4:0F:46
            X509v3 Authority Key Identifier:
                keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:10:7c:99:3e:22:58:eb:d5:ca:80:f7:88:82:f2:2b:7c:d9:
         d3:fd:bf:d1:d0:3e:4d:cd:5b:b0:a4:60:b1:4b:ed:f3:bc:c5:
         12:5f:3d:f2:3f:54:9e:6e:bc:f2:f5:7f:eb:88:ae:54:72:0d:
         3f:35:4a:e6:1b:45:fd:a7:09:16:53:37:1b:91:c0:67:39:f5:
         d6:52:e0:f4:83:a8:dd:ed:44:e2:c7:99:a0:3d:57:96:30:ae:
         b0:54:39:dc:f0:0f:8d:93:b3:d6:dd:00:29:bb:4a:e4:20:e7:
         16:92:89:78:81:2b:97:c2:94:29:73:6a:42:af:05:6f:96:a4:
         b4:f9:2c:95:51:0a:45:11:ce:9c:1a:74:2f:ae:f8:c4:8f:79:
         8b:23:76:dc:30:55:75:83:87:32:ec:b5:4c:a5:05:0c:5e:e8:
         e0:e1:51:07:c0:3f:71:14:42:6f:99:aa:40:05:c5:3c:62:ab:
         78:fb:64:a5:68:9b:4d:08:58:d0:d9:d7:2b:44:77:49:a4:a7:
         6e:ca:32:ab:71:56:c6:79:b0:67:05:c4:07:20:88:3c:1d:6c:
         aa:32:bb:b1:6c:2a:20:61:7a:2b:3c:02:66:37:18:72:4a:69:
         53:80:52:de:95:96:14:86:19:55:43:11:f6:34:e5:4a:4d:ef:
         a5:20:b6:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHeOVWClRgnyCzLiHPEC6KCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1YzM0YTYyZmZiZWQ4ZmMwZjBlYzAxYjQyYzBjNTBl
ZTdlZjcwHhcNMjYxMTE1MDgwMTAxWhcNMjYxMTE2MDgwMTAxWjAzMTEwLwYDVQQD
Eyg0N2Q3ZThjZjc3ZTIzMDUwMzE2NDFmMTY5YjI4MDhhNTNkZjQwZjQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA28T8uSUmOSWtdLvQWXSPFM6ZjWHP
MnuT0a7xanAI39I7kupoUDBDVRCXdKyGc+HfHD1HGLJi+TvnO+DjTFAnnFrTIEJQ
tagBPM+/1Uykiygq/JKNGDlOxO83MHScdipPXZQHJiCJjMhmi3ugYitT6O/Nse97
FZVAfFWDyWuP2vQFeS4OoHajQogsyA+BBTNWxym3LR6DMqJjj6IKRGSAJ6LekNtp
n8KsEOxHJR5+h8IO5VN5xEcAGFTQS+J9HgzeDeln7M96NBjZjY5BE6CvhHX1Up20
GZKRR6nAW8TVmNECX+m4idr+fniDBwR75Bjx3RAo4SziQQ5gIdQcScIMpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEfX6M934jBQMWQfFpsoCKU99A9GMB8GA1UdIwQY
MBaAFFQ8XDSmL/vtj8Dw7AG0LAxQ7n73MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYt
ZjRmMWY5M2UwNDY3LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS8xNmUwMjItNGRhOC00Njg0LTg1ZTYtZjRmMWY5M2UwNDY3
LzEvVkR4Y05LWXYtLTJQd1BEc0FiUXNERkR1ZnZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlhB8mT4i
WOvVyoD3iILyK3zZ0/2/0dA+Tc1bsKRgsUvt87zFEl898j9Unm688vV/64iuVHIN
PzVK5htF/acJFlM3G5HAZzn11lLg9IOo3e1E4seZoD1XljCusFQ53PAPjZOz1t0A
KbtK5CDnFpKJeIErl8KUKXNqQq8Fb5aktPkslVEKRRHOnBp0L674xI95iyN23DBV
dYOHMuy1TKUFDF7o4OFRB8A/cRRCb5mqQAXFPGKrePtkpWibTQhY0NnXK0R3SaSn
bsoyq3FWxnmwZwXEByCIPB1sqjK7sWwqIGF6KzwCZjcYckppU4BS3pWWFIYZVUMR
9jTlSk3vpSC2Iw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 17:03:43 2026 by rpki-client