Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
File:                     VtTyDkiCB7AltwAA0I5lOmQ895A.mft (raw, json)
Hash identifier:          UmVdHT+RjMCq35nu4eEIskpEN4bzCeiGFwx3YzZcXmQ=
Subject key identifier:   06:F5:F2:C1:25:72:13:F6:84:7F:4A:1D:87:74:CA:65:A3:90:52:29
Authority key identifier: 56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90
Certificate issuer:       /CN=56d4f20e488207b025b70000d08e653a643cf790
Certificate serial:       01A174A688D0E3A0904B8B80E42E3B76CF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
Manifest number:          0803
Signing time:             Sun 25 Oct 2026 20:00:33 +0000
Manifest this update:     Sun 25 Oct 2026 20:00:33 +0000
Manifest next update:     Mon 26 Oct 2026 20:00:33 +0000
Files and hashes:         1: DaB1LuuhaaDKlfey4U7FDWZhtoQ.roa (hash: t842HyrQIRVBFuEeUO2AFrcs14Qa/f6iq2PJVi82Skk=)
                          2: VtTyDkiCB7AltwAA0I5lOmQ895A.crl (hash: +sSw9BiqvmVcZQPcA1X7lESqrzKmiKMoVBh240l1vYM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 26 Oct 2026 17:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:74:a6:88:d0:e3:a0:90:4b:8b:80:e4:2e:3b:76:cf:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56d4f20e488207b025b70000d08e653a643cf790
        Validity
            Not Before: Oct 25 20:00:33 2026 GMT
            Not After : Oct 26 20:00:33 2026 GMT
        Subject: CN=06f5f2c1257213f6847f4a1d8774ca65a3905229
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e9:1f:1b:04:ce:13:4f:f5:1d:87:53:f0:30:
                    2d:76:86:dc:c4:55:38:df:de:91:08:ad:45:17:77:
                    ea:78:00:aa:dc:5f:22:ba:a6:6a:66:64:ce:47:ba:
                    db:e4:0d:a6:84:2b:55:ce:ed:f2:ba:b3:53:b5:0b:
                    4b:02:d6:6f:bf:b4:5f:54:00:d4:44:45:58:da:34:
                    11:cc:ae:bc:05:ce:ac:12:85:e3:38:28:9b:9f:7d:
                    65:6d:ea:a5:80:b7:f2:2f:59:8f:92:cd:96:5e:ca:
                    9b:85:5f:38:36:19:f4:05:9d:73:aa:47:db:40:70:
                    dd:35:19:30:00:71:68:33:54:a7:45:70:d5:79:ef:
                    52:89:e8:9a:38:90:fb:e1:62:e6:97:53:73:63:0d:
                    1c:87:4b:9f:4d:58:f6:3d:f4:eb:7c:a6:43:5d:f8:
                    91:01:fe:8c:03:4a:1f:e0:49:02:77:cc:0d:94:ca:
                    7a:df:d7:5a:11:9b:6b:c0:07:eb:f8:63:c5:8c:cb:
                    28:06:22:8b:3e:32:6c:c7:70:7a:19:05:4b:7f:16:
                    ac:4c:50:fc:c8:21:20:b9:68:80:61:a9:bb:6b:01:
                    6c:f9:63:8c:7e:8e:8d:ac:99:92:eb:22:43:61:19:
                    fe:69:b3:ab:de:1b:45:35:3b:d8:33:e5:74:30:e9:
                    c5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:F5:F2:C1:25:72:13:F6:84:7F:4A:1D:87:74:CA:65:A3:90:52:29
            X509v3 Authority Key Identifier:
                keyid:56:D4:F2:0E:48:82:07:B0:25:B7:00:00:D0:8E:65:3A:64:3C:F7:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtTyDkiCB7AltwAA0I5lOmQ895A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/46/6eb899-19bc-45fc-86df-908e692cf3c2/1/VtTyDkiCB7AltwAA0I5lOmQ895A.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:75:31:70:54:bc:60:fa:61:0d:3d:ba:d4:a7:1b:8b:5a:2f:
         46:d7:d1:01:7d:8d:ca:1b:e0:a5:bd:60:b2:c5:e8:d2:7d:57:
         84:ac:2d:0c:7d:99:76:4c:b8:bc:d6:8f:bc:d2:66:a1:e6:54:
         06:4c:b5:69:e7:b6:0c:9c:d3:11:30:f7:81:0d:ce:15:c2:98:
         4d:26:f8:2f:ee:30:55:52:c7:19:b0:98:cd:11:bb:e8:ba:66:
         20:c3:4a:fa:73:7d:82:b4:4c:15:8a:ed:27:1d:55:45:ff:da:
         c2:03:8a:82:59:fc:37:01:ea:f9:9a:d1:3d:bd:a8:3c:0f:08:
         67:a3:a1:80:69:f4:23:1e:69:06:ef:6d:73:43:e6:e6:06:3d:
         4c:23:41:73:41:2c:0b:23:56:87:5d:4d:a5:ca:ae:78:dd:8c:
         7b:46:8a:e9:ab:2c:52:d4:12:7e:5e:d1:89:fe:41:35:e9:39:
         ec:3d:ff:cd:a3:a5:f5:91:ee:5b:2f:54:e7:73:92:7b:f1:6b:
         7f:38:42:94:83:10:53:8e:78:91:10:76:3f:a9:c9:39:1c:9d:
         48:a8:d4:0e:5b:75:52:26:57:ca:eb:ec:ec:7c:bb:7f:e9:52:
         cd:12:ce:2a:d1:ff:c0:27:0f:f7:5c:61:b7:0b:74:7e:1a:36:
         44:36:2b:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 03:25:05 2026 by rpki-client