Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
File:                     vEgmB2OhHnewtdfdICukzDAFOLE.mft (raw, json)
Hash identifier:          rfqRofRQLH+Jy6axEiAI7giUat7RBQn8fRcW3wlpnJA=
Subject key identifier:   52:5A:58:11:FF:A8:5E:94:85:14:CF:3C:8D:E1:FF:22:AB:54:D5:05
Authority key identifier: BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1
Certificate issuer:       /CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
Certificate serial:       01A13937218675E9097E91F1E895C068209D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
Manifest number:          0557
Signing time:             Wed 14 Oct 2026 07:01:16 +0000
Manifest this update:     Wed 14 Oct 2026 07:01:16 +0000
Manifest next update:     Thu 15 Oct 2026 07:01:16 +0000
Files and hashes:         1: vEgmB2OhHnewtdfdICukzDAFOLE.crl (hash: F1AytpXDcGgfZVzPMp9cCXx2guUxusLw0PgvKAH7k9I=)
                          2: vrcTV9T60dw5CNY2Khhi6KZnqHk.roa (hash: ix8gZjImI2UbE6/f3JbGRhO6BlyOiB3BG+MN7icZDoA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 07:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:39:37:21:86:75:e9:09:7e:91:f1:e8:95:c0:68:20:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc48260763a11e77b0b5d7dd202ba4cc300538b1
        Validity
            Not Before: Oct 14 07:01:16 2026 GMT
            Not After : Oct 15 07:01:16 2026 GMT
        Subject: CN=525a5811ffa85e948514cf3c8de1ff22ab54d505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:bb:5b:2c:1b:71:ce:47:95:d7:30:ec:88:bb:
                    66:23:ba:c2:a7:ee:f7:a5:e2:f4:65:ae:63:4c:63:
                    a2:06:ee:de:ec:ab:1c:4d:11:aa:42:99:90:67:05:
                    89:25:23:5f:19:43:ae:ce:6a:db:af:7f:b9:71:1b:
                    a2:54:2c:0f:12:22:cb:09:27:b8:e4:f1:f5:0d:ec:
                    fd:15:8b:a0:a5:aa:71:93:f2:07:5e:a0:c4:26:4f:
                    60:6a:5e:ef:f5:ba:20:ed:c4:65:59:45:41:d2:f2:
                    04:0c:ae:5f:2c:57:36:49:a0:b5:cc:90:7d:f0:91:
                    c4:97:28:6a:fa:c3:b6:db:be:7d:43:8d:34:25:4c:
                    1b:95:c7:db:ea:5f:8a:5d:30:b7:ed:fd:c9:7c:cd:
                    5b:37:6b:73:2c:66:50:66:10:44:2c:07:47:7a:bc:
                    35:1d:52:72:ef:5f:9e:58:2e:91:94:e2:cc:df:c6:
                    06:bc:62:40:d0:1a:41:4c:59:22:bc:5f:f3:20:4e:
                    7c:ac:cd:b4:5a:68:bd:71:05:6e:6c:af:19:27:5c:
                    47:c8:b6:d3:30:b3:b1:06:6e:09:68:60:93:a1:61:
                    96:73:d2:ee:1d:0a:1b:20:2b:cf:34:cf:21:1d:39:
                    2e:ff:c1:4b:2a:8a:d0:39:a3:1e:8c:61:f4:0a:1e:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:5A:58:11:FF:A8:5E:94:85:14:CF:3C:8D:E1:FF:22:AB:54:D5:05
            X509v3 Authority Key Identifier:
                keyid:BC:48:26:07:63:A1:1E:77:B0:B5:D7:DD:20:2B:A4:CC:30:05:38:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEgmB2OhHnewtdfdICukzDAFOLE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/93edc5-cdeb-463e-87b4-9ab5765d5bb6/1/vEgmB2OhHnewtdfdICukzDAFOLE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:90:42:e1:c5:dc:a1:d3:ba:d3:1b:59:af:bb:75:4c:41:11:
         62:32:4a:93:15:4a:34:fb:e0:ec:11:cc:58:6c:ec:a5:aa:1d:
         62:ea:38:3c:b1:89:9c:e4:e0:63:3f:cd:b3:90:22:de:54:8b:
         48:80:19:fd:9e:3c:30:10:07:97:c7:26:d6:6e:2b:6c:79:fd:
         50:71:ae:6c:e0:13:fe:96:5c:f3:e7:ee:8b:97:21:a9:87:0e:
         1a:85:2c:52:63:ff:79:f4:ce:60:e5:d1:58:c4:8e:49:2d:8d:
         70:19:dc:ca:26:81:ee:c1:5f:81:84:d2:d7:b5:95:41:bf:f6:
         5b:87:d1:9a:d5:d3:ee:f1:5b:a6:55:83:4f:08:06:9f:6f:23:
         59:34:5b:dc:80:38:d6:33:d0:62:89:6d:56:54:b0:da:9a:ec:
         77:3b:d2:e8:1d:f3:17:5c:cc:75:45:42:13:b7:8b:75:55:bd:
         a6:31:b0:88:eb:df:e4:27:43:51:be:b9:f2:32:27:2e:d6:ce:
         f8:d5:58:8f:8f:f0:2f:63:60:24:e1:83:70:4d:3b:cf:2d:b8:
         12:84:7d:ac:04:14:1a:d5:fd:ef:0e:78:d7:fd:d3:65:8c:e4:
         43:49:1c:42:d5:d2:69:a5:3f:8a:a4:6c:c2:d9:a5:67:34:7d:
         d3:e7:f3:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaE5NyGGdekJfpHx6JXAaCCdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDgyNjA3NjNhMTFlNzdiMGI1ZDdkZDIwMmJhNGNjMzAw
NTM4YjEwHhcNMjYxMDE0MDcwMTE2WhcNMjYxMDE1MDcwMTE2WjAzMTEwLwYDVQQD
Eyg1MjVhNTgxMWZmYTg1ZTk0ODUxNGNmM2M4ZGUxZmYyMmFiNTRkNTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7tbLBtxzkeV1zDsiLtmI7rCp+73
peL0Za5jTGOiBu7e7KscTRGqQpmQZwWJJSNfGUOuzmrbr3+5cRuiVCwPEiLLCSe4
5PH1Dez9FYugpapxk/IHXqDEJk9gal7v9bog7cRlWUVB0vIEDK5fLFc2SaC1zJB9
8JHElyhq+sO22759Q400JUwblcfb6l+KXTC37f3JfM1bN2tzLGZQZhBELAdHerw1
HVJy71+eWC6RlOLM38YGvGJA0BpBTFkivF/zIE58rM20Wmi9cQVubK8ZJ1xHyLbT
MLOxBm4JaGCToWGWc9LuHQobICvPNM8hHTku/8FLKorQOaMejGH0Ch4xswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFJaWBH/qF6UhRTPPI3h/yKrVNUFMB8GA1UdIwQY
MBaAFLxIJgdjoR53sLXX3SArpMwwBTixMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQt
OWFiNTc2NWQ1YmI2LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC85M2VkYzUtY2RlYi00NjNlLTg3YjQtOWFiNTc2NWQ1YmI2
LzEvdkVnbUIyT2hIbmV3dGRmZElDdWt6REFGT0xFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqJBC4cXc
odO60xtZr7t1TEERYjJKkxVKNPvg7BHMWGzspaodYuo4PLGJnOTgYz/Ns5Ai3lSL
SIAZ/Z48MBAHl8cm1m4rbHn9UHGubOAT/pZc8+fui5chqYcOGoUsUmP/efTOYOXR
WMSOSS2NcBncyiaB7sFfgYTS17WVQb/2W4fRmtXT7vFbplWDTwgGn28jWTRb3IA4
1jPQYoltVlSw2prsdzvS6B3zF1zMdUVCE7eLdVW9pjGwiOvf5CdDUb658jInLtbO
+NVYj4/wL2NgJOGDcE07zy24EoR9rAQUGtX97w541/3TZYzkQ0kcQtXSaaU/iqRs
wtmlZzR90+fzGw==
-----END CERTIFICATE-----
Generated at Wed Oct 14 11:51:14 2026 by rpki-client