Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
File:                     Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft (raw, json)
Hash identifier:          +cOQKFmhTWrNmyFLYKriHX+nbax+0M9EyCloWu0FzVU=
Subject key identifier:   33:58:63:FA:FA:85:1B:99:3D:85:77:2F:E0:2E:A6:4B:C3:47:16:B3
Authority key identifier: 56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C
Certificate issuer:       /CN=5647798f253c724eb07f2e8ad8c2ed949436499c
Certificate serial:       01A13DEEBBA713C3FFAC9DF65232E9A4A800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
Manifest number:          0592
Signing time:             Thu 15 Oct 2026 05:00:18 +0000
Manifest this update:     Thu 15 Oct 2026 05:00:18 +0000
Manifest next update:     Fri 16 Oct 2026 05:00:18 +0000
Files and hashes:         1: 1MRUxxI-MJ5URuxEnbVPosa96BE.roa (hash: ybJfJTh+qledOSXFQ1Rpq1+qpwILYkG/vUQqmage5L0=)
                          2: Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl (hash: FXgAQpH8sXr3UakpQu1I1CGHSol12LmgugtvPa82daQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 23:00:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3d:ee:bb:a7:13:c3:ff:ac:9d:f6:52:32:e9:a4:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5647798f253c724eb07f2e8ad8c2ed949436499c
        Validity
            Not Before: Oct 15 05:00:18 2026 GMT
            Not After : Oct 16 05:00:18 2026 GMT
        Subject: CN=335863fafa851b993d85772fe02ea64bc34716b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:c5:7d:f0:19:b9:2c:4d:cf:40:0d:ec:58:66:
                    ff:69:bc:7d:81:a2:ee:dc:07:4d:28:6e:f7:eb:8c:
                    e8:61:fd:b8:7e:3a:e2:d0:8d:24:54:85:a3:17:e5:
                    6a:05:32:84:dd:eb:81:ea:5f:09:55:79:b6:42:60:
                    4a:ef:12:29:f7:0f:dd:12:14:f8:92:07:48:b7:40:
                    1f:7b:e2:7a:18:ae:7f:2f:e5:f6:2b:5e:20:3f:fa:
                    60:8d:61:23:9e:01:fd:6a:2a:33:c5:61:a6:28:85:
                    b3:11:96:a9:61:d1:4d:7b:0b:75:44:bd:03:71:6e:
                    09:1d:2a:9d:d2:8f:09:c5:34:f6:91:bd:a8:a3:52:
                    07:18:0e:3a:09:b7:c2:1a:b1:85:7c:a1:e7:53:27:
                    56:07:6e:90:dc:71:8f:3a:f1:b2:b1:71:ba:82:19:
                    6d:2f:d1:7e:5f:3d:d0:51:ac:4c:f1:c2:97:f9:aa:
                    bd:0f:b0:e8:c8:7b:83:8b:82:3c:6b:fa:64:c5:25:
                    27:64:eb:68:36:61:8c:31:97:91:e6:fd:0d:c4:88:
                    b9:9b:06:09:72:16:0c:f7:a8:0d:49:a2:4c:68:0b:
                    9b:fc:f5:e0:d9:1c:32:02:62:03:1a:c3:1f:5f:41:
                    ec:93:3c:12:ff:7f:a3:89:56:77:6d:6c:ea:75:8f:
                    05:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:58:63:FA:FA:85:1B:99:3D:85:77:2F:E0:2E:A6:4B:C3:47:16:B3
            X509v3 Authority Key Identifier:
                keyid:56:47:79:8F:25:3C:72:4E:B0:7F:2E:8A:D8:C2:ED:94:94:36:49:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/18/4c4f66-9039-4fb1-bd49-1a4b6edb03a7/1/Vkd5jyU8ck6wfy6K2MLtlJQ2SZw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:a9:b3:e9:41:25:92:77:8e:bb:83:f8:57:12:33:9a:c8:40:
         7b:be:4d:e1:a3:02:1a:6f:75:09:ca:49:35:9c:37:5f:5c:98:
         38:3b:bb:83:05:0f:2b:36:50:31:05:47:d0:76:4a:4d:ce:38:
         1f:12:48:f8:f3:d5:7a:cb:9c:34:64:e6:12:27:f5:b6:15:42:
         74:c4:c9:18:bb:ee:42:aa:58:61:e4:bf:11:91:d6:cb:e5:18:
         c2:71:09:fa:af:14:3f:11:bb:8d:9a:44:c0:a0:2d:e6:7e:18:
         1c:d2:98:89:80:07:8e:b4:ec:68:83:fd:4b:5f:dd:56:f9:bd:
         d4:ba:c0:96:98:43:11:2f:24:7f:d2:c7:c7:7c:37:35:e3:54:
         99:5f:00:ee:b4:87:22:ad:98:95:30:8e:46:f6:ca:d1:ec:01:
         0d:14:68:c5:ea:b2:8b:08:2f:28:4e:d7:af:f4:12:5a:bc:4e:
         8d:a5:1c:43:f6:05:c8:49:2f:f6:07:7d:b5:8f:6c:d6:a1:e2:
         7b:8d:11:f9:75:4d:d9:d2:51:3a:3c:16:bc:73:6c:a4:7c:7c:
         e6:2e:0f:6c:ff:62:d7:92:57:43:22:e1:b8:99:60:6c:0d:66:
         90:eb:80:4e:a7:f4:99:3f:b6:9c:fc:c0:e5:08:05:b3:1b:63:
         6d:4e:45:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 09:20:36 2026 by rpki-client