Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File:                     VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier:          UUs43iA4tqFMy46T4NMIQToudrGAK7eWJM0NRFyhQqc=
Subject key identifier:   5D:EA:29:66:52:81:21:DA:C5:8C:29:13:17:20:1A:66:C2:A0:B4:50
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer:       /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial:       019E1EA33B1F018825D5CEEDEF6185EEAFD2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number:          0C55
Signing time:             Wed 13 May 2026 00:01:14 +0000
Manifest this update:     Wed 13 May 2026 00:01:14 +0000
Manifest next update:     Thu 14 May 2026 00:01:14 +0000
Files and hashes:         1: GrwS7z5skQLr1kWHFgshe5BTW1o.roa (hash: y+YqbBQOH20V6aaG8Rd/FbsV1PT5JFszmedwpyqgIUM=)
                          2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: BkV+TpZpZvirixpP8nGgubUgZ6zY8qH6r834FASQrkM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 13 May 2026 20:10:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:1e:a3:3b:1f:01:88:25:d5:ce:ed:ef:61:85:ee:af:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
        Validity
            Not Before: May 13 00:01:14 2026 GMT
            Not After : May 14 00:01:14 2026 GMT
        Subject: CN=5dea2966528121dac58c291317201a66c2a0b450
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:91:1f:42:f4:26:29:8c:6b:f4:81:8e:b2:5c:
                    5d:33:71:81:a9:f0:14:d0:58:5c:ab:eb:3e:d1:5c:
                    98:76:4c:06:e5:f5:62:a8:5c:d6:0b:ce:d2:c2:7b:
                    25:57:75:e4:2b:39:70:b8:a1:bb:86:9b:95:11:0b:
                    88:80:bd:aa:7e:3d:de:f7:19:30:63:cd:02:cc:e5:
                    5e:d3:eb:c6:18:e6:b1:e0:99:bb:b7:7d:0c:c6:a3:
                    60:2f:11:b9:a2:22:2b:6f:83:94:b9:0f:59:8f:bc:
                    2f:7a:b0:fb:b2:7e:54:74:32:2b:71:bd:e6:4d:df:
                    79:d0:0b:7a:e3:04:e1:41:24:d5:85:28:3a:5f:9e:
                    2f:9b:96:59:7e:82:98:4f:2b:19:00:b0:1e:f2:e6:
                    7f:32:95:a5:78:bf:1d:32:3b:fe:c3:46:9d:24:5a:
                    cf:8d:d4:c1:91:0f:f1:76:46:10:47:5e:f7:d7:88:
                    43:7c:97:d9:c6:f8:54:5d:12:d1:6f:9b:61:59:bf:
                    ba:8b:85:e1:6a:b0:04:75:be:49:76:a0:94:0e:0a:
                    0e:82:59:a3:f5:59:8a:f6:4f:9a:7b:18:03:64:6e:
                    6b:52:cd:5c:9c:a3:55:11:66:e3:b6:1d:f3:a1:ec:
                    62:22:5c:e4:34:75:8e:86:7f:ed:e5:b0:4b:12:4d:
                    9b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:EA:29:66:52:81:21:DA:C5:8C:29:13:17:20:1A:66:C2:A0:B4:50
            X509v3 Authority Key Identifier:
                keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:1d:95:f8:55:18:16:ad:26:ba:92:7b:6a:19:9c:6c:02:5f:
         7d:d9:c6:a3:02:96:54:bd:7f:45:17:82:b2:9a:c5:11:85:dd:
         d1:d2:f8:12:7b:60:b0:0d:de:e5:06:32:1f:d1:2b:85:07:20:
         30:99:66:c5:14:3e:2f:4f:e7:66:fa:3a:91:2d:74:68:bc:f1:
         6a:e3:81:89:6d:a6:9e:3a:38:01:47:10:c6:2d:c3:08:7d:28:
         db:69:6f:48:aa:49:5b:8c:d6:52:28:65:af:61:ca:62:e5:a5:
         a3:70:97:ea:c5:d6:10:1c:82:5c:1f:e9:0d:5c:a4:3b:5f:a2:
         85:7c:57:c9:ee:d3:e7:72:d6:c4:f2:33:c2:3e:7a:45:21:cf:
         e1:93:33:77:9c:bb:c0:cf:d7:52:a3:7e:3a:d9:da:bd:a9:36:
         9d:bf:e3:51:28:7d:06:72:07:9a:0c:2d:b5:ab:c9:28:a7:c4:
         3c:69:1d:64:b2:04:21:4a:09:1e:7f:8f:be:e5:90:27:3d:70:
         2f:7d:85:4b:ed:af:95:89:83:ff:ee:e9:f4:01:e7:52:aa:3e:
         66:ac:ee:ed:79:cb:d3:61:86:0f:03:1a:7b:cf:09:5b:c5:03:
         a8:6f:90:9f:85:57:db:cd:75:06:c0:9c:5b:61:d4:98:ef:d3:
         9b:df:eb:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4eozsfAYgl1c7t72GF7q/SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0
ZjhjYjEwHhcNMjYwNTEzMDAwMTE0WhcNMjYwNTE0MDAwMTE0WjAzMTEwLwYDVQQD
Eyg1ZGVhMjk2NjUyODEyMWRhYzU4YzI5MTMxNzIwMWE2NmMyYTBiNDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAypEfQvQmKYxr9IGOslxdM3GBqfAU
0Fhcq+s+0VyYdkwG5fViqFzWC87SwnslV3XkKzlwuKG7hpuVEQuIgL2qfj3e9xkw
Y80CzOVe0+vGGOax4Jm7t30MxqNgLxG5oiIrb4OUuQ9Zj7wverD7sn5UdDIrcb3m
Td950At64wThQSTVhSg6X54vm5ZZfoKYTysZALAe8uZ/MpWleL8dMjv+w0adJFrP
jdTBkQ/xdkYQR17314hDfJfZxvhUXRLRb5thWb+6i4XharAEdb5JdqCUDgoOglmj
9VmK9k+aexgDZG5rUs1cnKNVEWbjth3zoexiIlzkNHWOhn/t5bBLEk2bqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF3qKWZSgSHaxYwpExcgGmbCoLRQMB8GA1UdIwQY
MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt
MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2
LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARR2V+FUY
Fq0mupJ7ahmcbAJffdnGowKWVL1/RReCsprFEYXd0dL4EntgsA3e5QYyH9ErhQcg
MJlmxRQ+L0/nZvo6kS10aLzxauOBiW2mnjo4AUcQxi3DCH0o22lvSKpJW4zWUihl
r2HKYuWlo3CX6sXWEByCXB/pDVykO1+ihXxXye7T53LWxPIzwj56RSHP4ZMzd5y7
wM/XUqN+Otnavak2nb/jUSh9BnIHmgwttavJKKfEPGkdZLIEIUoJHn+PvuWQJz1w
L32FS+2vlYmD/+7p9AHnUqo+Zqzu7XnL02GGDwMae88JW8UDqG+Qn4VX2811BsCc
W2HUmO/Tm9/r5A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:40:23 2026 by rpki-client