Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
File:                     VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft (raw, json)
Hash identifier:          MUF+A9y81RErVcDO9//xZlC/D+PUhUtSBxgijZPdXuY=
Subject key identifier:   9A:0A:3D:4B:A0:CA:88:2B:46:5A:62:ED:54:6D:E0:30:DA:B4:60:7E
Authority key identifier: 56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6
Certificate issuer:       /CN=568ae803b9ba38855401827b3eece14505a9c0f6
Certificate serial:       019CAB6B708ACD10C38B89C15FCE2B784077
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
Manifest number:          1857
Signing time:             Sun 01 Mar 2026 22:01:10 +0000
Manifest this update:     Sun 01 Mar 2026 22:01:10 +0000
Manifest next update:     Mon 02 Mar 2026 22:01:10 +0000
Files and hashes:         1: 7mUqcc1ZRAcERQzQ4MU8EdZH35w.roa (hash: xeQvwrLQZUiDoUb0ml1L918hdYLeraoGxz+49zwQRSg=)
                          2: E6FBR8FbVLIUW7WxfYp69wFcuIY.roa (hash: HezEpZLefLuIH9OWJJvBZrFd9gwz+w6esymhDsqSfJk=)
                          3: Nf1GLWHH5S4xnQq4dEe73SmQVsE.roa (hash: QPJuLoZDzY8eonJVvSRYMDnynsieOzZqr/yxLPKKOzw=)
                          4: S9YbIMFSJorIHr_re90ZoTMMK1E.roa (hash: 4Uzvxo6RhXxW8F4qaHX9okkF5Pq4l7xy0xjbdpClalg=)
                          5: VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl (hash: ETlNGeEGtYNQn3JgExqUWF5Ib619715h2UA1UWh/Ujg=)
                          6: agZ_22w8nR7yzP-r4nyk_GYagPg.roa (hash: sBmwyEO+p9XOhRYaD+uacFTguzE0ei3xiuK+qpOGZ10=)
                          7: lrEowygn1dHToN0btk6rp2MTIvI.roa (hash: sTbSNMMoubd2bZ7dOugalKP6owvalS8OX2kJMEZCoIo=)
                          8: oJ73hXNTI3ql6e9efqOk-gbJ-UY.roa (hash: 7RS1/FzkO8/64GmnNWvKz94G3bPh1VWWYxYmkCi0PVE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 02 Mar 2026 22:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ab:6b:70:8a:cd:10:c3:8b:89:c1:5f:ce:2b:78:40:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=568ae803b9ba38855401827b3eece14505a9c0f6
        Validity
            Not Before: Mar  1 22:01:10 2026 GMT
            Not After : Mar  2 22:01:10 2026 GMT
        Subject: CN=9a0a3d4ba0ca882b465a62ed546de030dab4607e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7c:a2:f7:d7:2f:d6:39:5f:59:49:7c:59:52:
                    33:a7:cf:cc:ca:44:b5:3f:f8:f9:bd:b3:4f:ca:2f:
                    c1:a8:0e:c5:0a:49:9a:e0:17:5c:91:50:8a:da:f7:
                    71:be:ea:8c:37:1e:96:50:b2:c8:da:da:51:f1:d8:
                    fe:d9:56:77:b2:53:40:8f:17:c8:51:73:cc:b0:ae:
                    96:dd:d0:e6:0f:26:15:65:8b:b9:78:00:ba:fb:a1:
                    eb:99:42:c0:bd:96:f0:b7:05:c2:5b:c5:5f:ca:c7:
                    63:16:4e:8a:3a:fd:a7:8f:d9:5f:f3:f8:a5:08:46:
                    4f:d0:8a:46:e4:ec:36:bf:2c:db:81:76:b5:7a:38:
                    07:a9:20:3f:64:d6:f9:0b:7c:d5:d3:9d:56:62:50:
                    ec:70:4e:e4:96:87:c0:89:e2:d1:ef:9a:13:9b:17:
                    63:c6:cc:5b:2a:52:bb:b8:0c:8f:77:02:51:dc:0e:
                    d7:63:9c:c6:57:bb:90:3a:7a:1c:ba:28:dd:b2:31:
                    c3:b7:7f:a2:11:26:76:40:63:e0:10:8d:d0:92:0c:
                    fc:f6:cd:a2:78:a7:19:a1:dd:65:8d:d6:c6:01:ae:
                    ad:4b:eb:b7:e5:f7:a4:ff:03:2a:a7:5b:41:57:a8:
                    25:75:db:c1:68:1a:08:49:78:b0:f9:d4:cf:72:88:
                    9a:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:0A:3D:4B:A0:CA:88:2B:46:5A:62:ED:54:6D:E0:30:DA:B4:60:7E
            X509v3 Authority Key Identifier:
                keyid:56:8A:E8:03:B9:BA:38:85:54:01:82:7B:3E:EC:E1:45:05:A9:C0:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoroA7m6OIVUAYJ7PuzhRQWpwPY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/278d5f-9ee6-4477-9fe0-8eae8b75e9ca/1/VoroA7m6OIVUAYJ7PuzhRQWpwPY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:4a:ab:6a:00:e1:a3:c9:f0:b7:61:d8:f3:db:99:8d:6c:cc:
         c4:7c:58:a9:2e:15:e3:ea:41:b0:ca:76:70:93:82:05:ed:6b:
         81:fa:8a:ef:5a:70:ce:bb:22:c7:c1:8e:2f:b7:b4:f5:30:b4:
         8c:d9:44:b8:0e:c8:36:d1:a7:7e:19:25:a6:ed:18:ae:c9:c9:
         d3:ba:80:6f:1f:78:78:57:3f:a9:50:83:8d:59:19:46:ba:e1:
         e9:32:9e:22:a5:64:f9:4e:97:d1:fe:c5:dc:cc:ba:e9:a5:7d:
         6f:ab:d4:01:f3:47:20:90:c5:7c:be:7c:b9:1d:c5:df:0c:fd:
         56:bc:01:4d:27:b9:88:af:60:aa:1d:0b:05:23:ba:cf:48:07:
         c5:b7:0e:46:45:96:8a:1d:7e:db:cb:a0:3c:70:a0:59:df:40:
         7c:e7:49:61:3b:eb:85:37:4d:fb:44:7c:ae:3c:95:6d:8c:3e:
         66:24:2d:cd:a7:aa:87:fa:9e:38:e9:6a:23:97:5d:ad:c6:dc:
         1a:a2:2b:15:3f:fa:99:51:e5:28:86:60:36:34:64:1a:62:c2:
         05:af:07:43:ab:88:ab:fa:3e:14:2c:86:76:8d:81:b7:85:c0:
         17:19:b9:56:96:8d:dd:57:47:ce:4e:b1:f1:1f:d0:72:92:89:
         74:18:72:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyra3CKzRDDi4nBX84reEB3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2OGFlODAzYjliYTM4ODU1NDAxODI3YjNlZWNlMTQ1MDVh
OWMwZjYwHhcNMjYwMzAxMjIwMTEwWhcNMjYwMzAyMjIwMTEwWjAzMTEwLwYDVQQD
Eyg5YTBhM2Q0YmEwY2E4ODJiNDY1YTYyZWQ1NDZkZTAzMGRhYjQ2MDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnHyi99cv1jlfWUl8WVIzp8/MykS1
P/j5vbNPyi/BqA7FCkma4BdckVCK2vdxvuqMNx6WULLI2tpR8dj+2VZ3slNAjxfI
UXPMsK6W3dDmDyYVZYu5eAC6+6HrmULAvZbwtwXCW8VfysdjFk6KOv2nj9lf8/il
CEZP0IpG5Ow2vyzbgXa1ejgHqSA/ZNb5C3zV051WYlDscE7klofAieLR75oTmxdj
xsxbKlK7uAyPdwJR3A7XY5zGV7uQOnocuijdsjHDt3+iESZ2QGPgEI3Qkgz89s2i
eKcZod1ljdbGAa6tS+u35fek/wMqp1tBV6glddvBaBoISXiw+dTPcoiazwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJoKPUugyogrRlpi7VRt4DDatGB+MB8GA1UdIwQY
MBaAFFaK6AO5ujiFVAGCez7s4UUFqcD2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAt
OGVhZThiNzVlOWNhLzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS8yNzhkNWYtOWVlNi00NDc3LTlmZTAtOGVhZThiNzVlOWNh
LzEvVm9yb0E3bTZPSVZVQVlKN1B1emhSUVdwd1BZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUqragDh
o8nwt2HY89uZjWzMxHxYqS4V4+pBsMp2cJOCBe1rgfqK71pwzrsix8GOL7e09TC0
jNlEuA7INtGnfhklpu0YrsnJ07qAbx94eFc/qVCDjVkZRrrh6TKeIqVk+U6X0f7F
3My66aV9b6vUAfNHIJDFfL58uR3F3wz9VrwBTSe5iK9gqh0LBSO6z0gHxbcORkWW
ih1+28ugPHCgWd9AfOdJYTvrhTdN+0R8rjyVbYw+ZiQtzaeqh/qeOOlqI5ddrcbc
GqIrFT/6mVHlKIZgNjRkGmLCBa8HQ6uIq/o+FCyGdo2Bt4XAFxm5VpaN3VdHzk6x
8R/QcpKJdBhy/w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:54 2026 by rpki-client