Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
File:                     VYB6PcvAJaz2l774HkA7SpbPu1E.mft (raw, json)
Hash identifier:          VsJPKh4AnCHivpBC/jVCpbSfyYFF/rZclDBSbh5z7EQ=
Subject key identifier:   AF:86:5E:10:D6:B7:CA:DC:03:5B:A7:54:30:C6:53:A5:52:9E:6C:1A
Authority key identifier: 55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51
Certificate issuer:       /CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
Certificate serial:       01A0C40DE35065316A700F4BF512433A7647
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
Manifest number:          0966
Signing time:             Mon 21 Sep 2026 13:00:39 +0000
Manifest this update:     Mon 21 Sep 2026 13:00:39 +0000
Manifest next update:     Tue 22 Sep 2026 13:00:39 +0000
Files and hashes:         1: VYB6PcvAJaz2l774HkA7SpbPu1E.crl (hash: /vbwyk98a/66wGUBXfQS+eA5PiIXBV647Us4i9tLSa4=)
                          2: da21FZlB-EiwRoOLCN5ITMfxNFo.roa (hash: 1w1sUJ0dtbKqnb7RxW32/zqJ1lJ/MMxyHIhHBbfSnXc=)
                          3: jCXew-LM4stUKDAZjHPkm0CcjHk.roa (hash: OKyuhMm85OLa4bavn5P/TH9jpfhep7ElblfCCsZsrhU=)
                          4: rSBkW65hC7ab29bJ4AU0NuL624g.roa (hash: PQXW1iGB9abxie2k7zu6yoynTk5cvhSDeO4aK1Kj0iI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 22 Sep 2026 13:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:c4:0d:e3:50:65:31:6a:70:0f:4b:f5:12:43:3a:76:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55807a3dcbc025acf697bef81e403b4a96cfbb51
        Validity
            Not Before: Sep 21 13:00:39 2026 GMT
            Not After : Sep 22 13:00:39 2026 GMT
        Subject: CN=af865e10d6b7cadc035ba75430c653a5529e6c1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:51:0a:b8:16:c8:0d:7c:60:39:13:18:37:bb:
                    ff:d1:ec:61:ec:89:10:a4:45:e8:96:71:b7:fd:96:
                    39:54:c2:2e:00:8c:d1:52:f0:63:68:a8:37:1a:ae:
                    4d:18:f0:97:c8:fe:81:c5:63:cd:df:46:1c:ad:3c:
                    9e:73:ff:31:51:c3:9c:fb:77:85:8c:cf:9d:4b:ac:
                    1c:10:eb:82:44:bb:57:ef:7a:c4:84:cc:ac:f6:f4:
                    a0:b4:54:61:77:91:f6:a4:2b:96:ec:61:51:7b:4f:
                    ed:4b:0d:4f:2e:3d:05:2c:07:80:47:6c:74:94:6b:
                    ea:57:16:6e:24:ac:01:9b:5a:ac:df:2c:3e:57:bf:
                    e3:16:3f:f0:49:5d:35:55:07:bb:9c:11:ad:3c:b4:
                    bb:ec:4c:91:2e:61:3b:be:77:c4:53:17:ea:cd:0f:
                    01:cc:ea:84:39:f4:6e:4f:c5:eb:53:65:15:3c:e1:
                    79:ca:d2:14:ab:97:a6:91:0c:01:d9:52:4e:48:3b:
                    be:a3:96:2e:fd:cb:91:f5:0b:d5:19:3f:12:03:cd:
                    62:cd:d9:b2:f1:fa:8a:13:27:ae:af:e5:88:3e:4b:
                    bc:e1:d7:c5:6c:24:13:83:ca:57:da:19:17:92:4f:
                    8d:c6:83:ff:c2:a9:f1:7f:d6:00:21:d9:cc:d1:3b:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:86:5E:10:D6:B7:CA:DC:03:5B:A7:54:30:C6:53:A5:52:9E:6C:1A
            X509v3 Authority Key Identifier:
                keyid:55:80:7A:3D:CB:C0:25:AC:F6:97:BE:F8:1E:40:3B:4A:96:CF:BB:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYB6PcvAJaz2l774HkA7SpbPu1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/66838b-1b33-4746-af97-7e217bef2d9e/1/VYB6PcvAJaz2l774HkA7SpbPu1E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:35:bf:f4:7f:bb:27:12:e1:3b:e6:45:c6:76:fd:7e:3a:6c:
         f8:50:43:ed:c7:55:7d:14:63:23:44:f8:52:af:ba:3f:59:e8:
         39:0c:42:f1:8b:39:1e:fb:55:a4:44:71:16:b5:69:25:fb:6c:
         6e:c0:34:3c:e3:96:68:63:c9:e0:29:b5:83:9f:33:94:87:05:
         11:bc:89:23:68:e8:af:af:30:f1:18:f6:4b:61:fc:05:67:e3:
         91:fa:28:15:75:5c:d9:5b:d9:e4:aa:62:f4:e9:31:3a:2a:ce:
         77:c1:9c:d3:bb:9b:73:55:1c:1e:01:10:1b:f4:4f:9a:d7:e9:
         2c:a5:96:5a:47:ba:56:51:f7:cf:d9:ac:3b:a2:70:aa:92:e3:
         54:9f:9e:1f:08:34:59:93:b0:3c:0d:88:3c:36:78:c6:a2:61:
         9f:ce:4a:11:7a:9f:c2:b3:41:a6:aa:be:44:95:28:5d:6f:92:
         94:56:4d:9f:0a:28:9a:0c:cb:d9:48:0c:fd:8e:4e:52:4d:d1:
         98:95:df:da:89:11:ae:fc:2b:58:46:b2:70:b4:83:ce:12:57:
         26:0d:ca:b8:82:04:1d:95:7e:48:a6:31:66:9d:35:44:c2:5e:
         99:1d:98:44:89:13:7f:36:84:02:a5:fd:2c:99:29:2b:44:0b:
         19:58:47:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDEDeNQZTFqcA9L9RJDOnZHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ODA3YTNkY2JjMDI1YWNmNjk3YmVmODFlNDAzYjRhOTZj
ZmJiNTEwHhcNMjYwOTIxMTMwMDM5WhcNMjYwOTIyMTMwMDM5WjAzMTEwLwYDVQQD
EyhhZjg2NWUxMGQ2YjdjYWRjMDM1YmE3NTQzMGM2NTNhNTUyOWU2YzFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lEKuBbIDXxgORMYN7v/0exh7IkQ
pEXolnG3/ZY5VMIuAIzRUvBjaKg3Gq5NGPCXyP6BxWPN30YcrTyec/8xUcOc+3eF
jM+dS6wcEOuCRLtX73rEhMys9vSgtFRhd5H2pCuW7GFRe0/tSw1PLj0FLAeAR2x0
lGvqVxZuJKwBm1qs3yw+V7/jFj/wSV01VQe7nBGtPLS77EyRLmE7vnfEUxfqzQ8B
zOqEOfRuT8XrU2UVPOF5ytIUq5emkQwB2VJOSDu+o5Yu/cuR9QvVGT8SA81izdmy
8fqKEyeur+WIPku84dfFbCQTg8pX2hkXkk+NxoP/wqnxf9YAIdnM0TtnoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+GXhDWt8rcA1unVDDGU6VSnmwaMB8GA1UdIwQY
MBaAFFWAej3LwCWs9pe++B5AO0qWz7tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTct
N2UyMTdiZWYyZDllLzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi82NjgzOGItMWIzMy00NzQ2LWFmOTctN2UyMTdiZWYyZDll
LzEvVllCNlBjdkFKYXoybDc3NEhrQTdTcGJQdTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYjW/9H+7
JxLhO+ZFxnb9fjps+FBD7cdVfRRjI0T4Uq+6P1noOQxC8Ys5HvtVpERxFrVpJfts
bsA0POOWaGPJ4Cm1g58zlIcFEbyJI2jor68w8Rj2S2H8BWfjkfooFXVc2VvZ5Kpi
9OkxOirOd8Gc07ubc1UcHgEQG/RPmtfpLKWWWke6VlH3z9msO6JwqpLjVJ+eHwg0
WZOwPA2IPDZ4xqJhn85KEXqfwrNBpqq+RJUoXW+SlFZNnwoomgzL2UgM/Y5OUk3R
mJXf2okRrvwrWEaycLSDzhJXJg3KuIIEHZV+SKYxZp01RMJemR2YRIkTfzaEAqX9
LJkpK0QLGVhHQw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 01:23:34 2026 by rpki-client