Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
File:                     VayAK4V_5CVyI6jlUIWlCzt3DsY.mft (raw, json)
Hash identifier:          M0QZ1DT8lAwWNmXU1Yu9oe4X1VFadqyHdR4+u+IoBAw=
Subject key identifier:   38:E0:E0:6C:A8:A0:88:7B:62:CD:20:12:C4:10:AF:94:BA:C1:FB:DA
Authority key identifier: 55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6
Certificate issuer:       /CN=55ac802b857fe4257223a8e55085a50b3b770ec6
Certificate serial:       019E1ED99ED9BBF8DBC58A3E3B7DFCD43950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
Manifest number:          1905
Signing time:             Wed 13 May 2026 01:00:38 +0000
Manifest this update:     Wed 13 May 2026 01:00:38 +0000
Manifest next update:     Thu 14 May 2026 01:00:38 +0000
Files and hashes:         1: KT7j6_HQv5rlMFhwBY1TdhgJ4Rc.roa (hash: CMCFJ522ifdqt0xcDWNSZop/WrNivf5oelP7FfWl5vI=)
                          2: VayAK4V_5CVyI6jlUIWlCzt3DsY.crl (hash: zaUnddPGr9jR3njJLl0xeBvfmcrOXvtlmwgxFnFFHcQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 14 May 2026 01:00:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:d9:9e:d9:bb:f8:db:c5:8a:3e:3b:7d:fc:d4:39:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55ac802b857fe4257223a8e55085a50b3b770ec6
        Validity
            Not Before: May 13 01:00:38 2026 GMT
            Not After : May 14 01:00:38 2026 GMT
        Subject: CN=38e0e06ca8a0887b62cd2012c410af94bac1fbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6f:20:cd:f8:3e:af:14:51:2d:d1:fa:e8:14:
                    b0:bf:61:b7:28:8e:ac:a6:9f:f2:33:b4:ea:17:59:
                    83:82:6e:16:43:bc:0e:19:56:0d:f4:1d:2e:fa:59:
                    d2:61:43:ef:70:ec:43:86:87:09:7d:94:bd:1e:1a:
                    5a:89:b4:98:b6:78:ff:bf:33:e2:16:d9:29:1b:a0:
                    2b:97:b9:e4:8b:50:2a:16:85:f0:5c:6a:14:ca:21:
                    c5:c0:38:0b:ff:92:13:cc:2c:d0:7b:70:06:00:d2:
                    5d:0e:3d:31:b7:28:e8:78:3e:12:3f:d5:8b:2e:44:
                    f4:15:02:78:b2:03:2a:7c:8b:e2:65:a1:89:62:12:
                    00:6e:8c:9f:7f:97:18:07:b8:5e:af:8c:c5:6a:0f:
                    61:6d:23:4a:5d:95:52:e1:38:8a:52:86:73:83:04:
                    ab:76:2a:64:bb:77:41:c7:f8:f9:81:ac:15:41:72:
                    6c:27:10:3e:ff:b9:c7:6b:f7:31:98:5c:ed:09:6e:
                    e6:5f:f0:df:6b:46:75:ea:18:d5:51:86:32:49:51:
                    cd:96:4e:71:fc:2d:2b:fa:13:26:f2:e2:b5:df:63:
                    3c:69:ad:78:6c:be:51:b7:df:a2:1a:b8:96:25:8d:
                    2f:c3:0c:ee:b9:29:46:0c:25:16:a5:0d:bf:68:90:
                    0e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:E0:E0:6C:A8:A0:88:7B:62:CD:20:12:C4:10:AF:94:BA:C1:FB:DA
            X509v3 Authority Key Identifier:
                keyid:55:AC:80:2B:85:7F:E4:25:72:23:A8:E5:50:85:A5:0B:3B:77:0E:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VayAK4V_5CVyI6jlUIWlCzt3DsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/490f3c-6f7c-4564-9c6b-66979a0480b0/1/VayAK4V_5CVyI6jlUIWlCzt3DsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:61:23:94:bc:1a:e9:fd:ce:8d:0f:07:08:f1:dd:11:59:01:
         94:0f:77:34:d3:e4:ae:79:a1:d3:a5:a6:ab:00:d8:4c:8e:50:
         06:1a:5e:7f:a3:23:f2:96:27:15:95:33:ea:18:7d:05:fb:ad:
         0e:e4:75:91:ad:d9:ba:10:70:6c:ab:25:99:93:e1:d7:b5:71:
         ee:d3:0b:af:62:63:d3:1e:cf:20:0a:11:f3:5d:3f:9b:17:d2:
         12:74:78:2f:fa:93:37:10:2f:cb:24:48:49:dd:7a:63:c5:06:
         79:2a:d6:5e:41:3b:b0:be:58:44:04:0b:4d:dc:11:27:77:d8:
         77:36:08:da:96:70:89:f2:63:12:5e:57:94:a4:9e:db:b4:3a:
         77:e2:c5:b8:ee:07:52:f6:ad:30:24:b2:de:e8:67:18:e4:5f:
         5b:e2:ef:aa:b9:84:77:cd:e1:56:55:01:05:a3:d8:c0:d1:0e:
         a0:ef:f8:57:3d:7e:84:05:f8:19:48:cb:fc:41:16:28:9f:5a:
         b6:3c:f7:eb:79:47:bf:ae:53:b5:5f:1c:ed:18:bf:13:b3:7a:
         44:85:dc:b7:83:67:c0:7f:e5:71:d9:e6:65:8c:f5:4b:2e:ad:
         34:de:aa:19:12:f3:67:a9:c0:db:11:f4:df:cb:10:e0:7d:c6:
         23:d8:2d:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4e2Z7Zu/jbxYo+O3381DlQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YWM4MDJiODU3ZmU0MjU3MjIzYThlNTUwODVhNTBiM2I3
NzBlYzYwHhcNMjYwNTEzMDEwMDM4WhcNMjYwNTE0MDEwMDM4WjAzMTEwLwYDVQQD
EygzOGUwZTA2Y2E4YTA4ODdiNjJjZDIwMTJjNDEwYWY5NGJhYzFmYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu28gzfg+rxRRLdH66BSwv2G3KI6s
pp/yM7TqF1mDgm4WQ7wOGVYN9B0u+lnSYUPvcOxDhocJfZS9HhpaibSYtnj/vzPi
FtkpG6Arl7nki1AqFoXwXGoUyiHFwDgL/5ITzCzQe3AGANJdDj0xtyjoeD4SP9WL
LkT0FQJ4sgMqfIviZaGJYhIAboyff5cYB7her4zFag9hbSNKXZVS4TiKUoZzgwSr
dipku3dBx/j5gawVQXJsJxA+/7nHa/cxmFztCW7mX/Dfa0Z16hjVUYYySVHNlk5x
/C0r+hMm8uK132M8aa14bL5Rt9+iGriWJY0vwwzuuSlGDCUWpQ2/aJAO5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDjg4GyooIh7Ys0gEsQQr5S6wfvaMB8GA1UdIwQY
MBaAFFWsgCuFf+QlciOo5VCFpQs7dw7GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmIt
NjY5NzlhMDQ4MGIwLzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC80OTBmM2MtNmY3Yy00NTY0LTljNmItNjY5NzlhMDQ4MGIw
LzEvVmF5QUs0Vl81Q1Z5STZqbFVJV2xDenQzRHNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkmEjlLwa
6f3OjQ8HCPHdEVkBlA93NNPkrnmh06WmqwDYTI5QBhpef6Mj8pYnFZUz6hh9Bfut
DuR1ka3ZuhBwbKslmZPh17Vx7tMLr2Jj0x7PIAoR810/mxfSEnR4L/qTNxAvyyRI
Sd16Y8UGeSrWXkE7sL5YRAQLTdwRJ3fYdzYI2pZwifJjEl5XlKSe27Q6d+LFuO4H
UvatMCSy3uhnGORfW+LvqrmEd83hVlUBBaPYwNEOoO/4Vz1+hAX4GUjL/EEWKJ9a
tjz363lHv65TtV8c7Ri/E7N6RIXct4NnwH/lcdnmZYz1Sy6tNN6qGRLzZ6nA2xH0
38sQ4H3GI9gtNA==
-----END CERTIFICATE-----
Generated at Wed May 13 12:03:27 2026 by rpki-client