Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
File:                     VffKupvV-frB4BRadWfJtFmpXoY.mft (raw, json)
Hash identifier:          0VoEH8pEbIgTWGwf47zRp8k+mWe7UCVEMpEx8qp1tEQ=
Subject key identifier:   79:B0:8A:61:41:2A:2E:BD:59:26:86:28:F4:EB:3C:DF:E4:A2:BA:1C
Authority key identifier: 55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86
Certificate issuer:       /CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
Certificate serial:       019D9C2C9345FF0842804E40D5F1C09F92E9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
Manifest number:          0A4A
Signing time:             Fri 17 Apr 2026 16:01:00 +0000
Manifest this update:     Fri 17 Apr 2026 16:01:00 +0000
Manifest next update:     Sat 18 Apr 2026 16:01:00 +0000
Files and hashes:         1: SZwng8c8STc3WrdaRWzq-6TbXLg.roa (hash: 5kW6U6T1/vZEmpDdes9PfAiCAiyWcN3dkaJYH4AuORE=)
                          2: VffKupvV-frB4BRadWfJtFmpXoY.crl (hash: Nqx5Cz5fNnxbSpqDqpu86x+byZFtGV/fcDtK641SzSE=)
                          3: Wf0i36PV-VmyKUK20H0rdHHPRas.roa (hash: 7LRImySHs+dAxi+a5eFHvvhxZ2AT2UvZ4Ch0CMlh2Ro=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:2c:93:45:ff:08:42:80:4e:40:d5:f1:c0:9f:92:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55f7caba9bd5f9fac1e0145a7567c9b459a95e86
        Validity
            Not Before: Apr 17 16:01:00 2026 GMT
            Not After : Apr 18 16:01:00 2026 GMT
        Subject: CN=79b08a61412a2ebd59268628f4eb3cdfe4a2ba1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:57:ac:44:85:1a:f0:24:d7:55:16:9b:04:b0:
                    3c:c4:af:6f:0b:d1:f2:21:e6:ab:e0:d2:87:f7:28:
                    65:c7:1a:72:fb:ad:f4:54:e2:33:91:2f:58:5f:2d:
                    81:4f:98:76:a6:ea:e6:8e:60:f1:c5:0c:2a:d9:52:
                    1d:08:a0:e6:e8:8b:37:40:0b:22:3a:ae:cd:a3:d7:
                    22:c5:6f:09:1d:79:12:f8:b6:99:3c:38:52:18:36:
                    7f:4c:a4:47:33:f7:6b:83:14:4d:43:37:a1:4b:a0:
                    3f:fc:91:61:5b:69:aa:bf:95:d6:d4:1c:3a:de:ae:
                    86:10:dd:62:f2:93:0b:13:81:05:3f:28:35:99:8e:
                    33:25:4a:80:6a:fc:24:d4:87:df:5a:26:d9:65:34:
                    75:1e:61:cc:d5:1b:1c:cf:ba:0c:4d:1d:9c:76:67:
                    39:ef:d5:9b:e7:a8:08:b7:ae:eb:60:18:ff:c5:47:
                    da:18:ee:ed:9a:20:ef:ce:c9:59:39:63:19:46:7d:
                    6e:c6:7d:2e:a6:58:34:08:cc:aa:9c:43:85:5b:fd:
                    01:c2:6b:1a:0d:c3:19:ab:c5:2f:81:63:76:02:9e:
                    ff:4c:10:07:fb:6f:e9:94:87:b2:68:68:7d:af:9e:
                    d2:a4:ee:b0:8f:50:56:84:e1:eb:1c:49:0a:7a:c3:
                    7a:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B0:8A:61:41:2A:2E:BD:59:26:86:28:F4:EB:3C:DF:E4:A2:BA:1C
            X509v3 Authority Key Identifier:
                keyid:55:F7:CA:BA:9B:D5:F9:FA:C1:E0:14:5A:75:67:C9:B4:59:A9:5E:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VffKupvV-frB4BRadWfJtFmpXoY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/60/f0f6d3-a904-423b-8f95-fc07ce4a37e6/1/VffKupvV-frB4BRadWfJtFmpXoY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:d7:6e:2a:fc:47:f7:45:be:25:be:57:48:fd:27:72:0d:c0:
         dc:ea:64:44:ad:bb:19:4e:a3:20:36:28:63:aa:2d:ad:8d:25:
         38:e7:7f:0f:b0:88:5d:41:ce:45:71:f8:8d:48:01:8d:fa:ae:
         25:55:17:66:a8:5d:b6:0d:79:f4:48:47:8a:03:69:0f:e1:6a:
         86:0c:53:f5:2a:fa:ad:e5:95:63:e9:ac:6d:14:9d:72:40:27:
         dd:be:0a:9e:a4:be:52:e7:87:da:d1:26:10:e7:3b:d9:d5:3a:
         91:d7:cf:89:67:02:4c:0b:8a:b5:bf:fe:4c:d0:79:ab:fc:25:
         27:8b:90:ff:25:ed:da:b6:cf:5e:8f:f0:97:e1:af:39:5a:22:
         7e:e2:57:4e:3e:fc:59:66:1f:54:36:92:8b:56:91:91:67:82:
         d5:22:32:99:62:d4:85:b4:35:11:90:2c:33:2c:ce:d0:e4:53:
         ed:8a:81:26:b6:91:a3:36:b4:82:12:45:fa:3f:36:38:00:5a:
         08:42:37:06:79:88:27:77:78:ae:b0:d5:27:f3:8a:8b:0e:ee:
         41:99:9c:b8:6b:4a:e3:f3:a9:65:47:17:8a:d6:05:b4:1f:86:
         a3:87:00:c8:5e:7e:27:cd:b5:f7:00:03:06:9d:ec:48:3a:36:
         dd:27:75:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLJNF/whCgE5A1fHAn5LpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZjdjYWJhOWJkNWY5ZmFjMWUwMTQ1YTc1NjdjOWI0NTlh
OTVlODYwHhcNMjYwNDE3MTYwMTAwWhcNMjYwNDE4MTYwMTAwWjAzMTEwLwYDVQQD
Eyg3OWIwOGE2MTQxMmEyZWJkNTkyNjg2MjhmNGViM2NkZmU0YTJiYTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVesRIUa8CTXVRabBLA8xK9vC9Hy
Iear4NKH9yhlxxpy+630VOIzkS9YXy2BT5h2purmjmDxxQwq2VIdCKDm6Is3QAsi
Oq7No9cixW8JHXkS+LaZPDhSGDZ/TKRHM/drgxRNQzehS6A//JFhW2mqv5XW1Bw6
3q6GEN1i8pMLE4EFPyg1mY4zJUqAavwk1IffWibZZTR1HmHM1Rscz7oMTR2cdmc5
79Wb56gIt67rYBj/xUfaGO7tmiDvzslZOWMZRn1uxn0uplg0CMyqnEOFW/0Bwmsa
DcMZq8UvgWN2Ap7/TBAH+2/plIeyaGh9r57SpO6wj1BWhOHrHEkKesN6KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmwimFBKi69WSaGKPTrPN/korocMB8GA1UdIwQY
MBaAFFX3yrqb1fn6weAUWnVnybRZqV6GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUt
ZmMwN2NlNGEzN2U2LzEvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC9mMGY2ZDMtYTkwNC00MjNiLThmOTUtZmMwN2NlNGEzN2U2
LzEvVmZmS3VwdlYtZnJCNEJSYWRXZkp0Rm1wWG9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9duKvxH
90W+Jb5XSP0ncg3A3OpkRK27GU6jIDYoY6otrY0lOOd/D7CIXUHORXH4jUgBjfqu
JVUXZqhdtg159EhHigNpD+FqhgxT9Sr6reWVY+msbRSdckAn3b4KnqS+UueH2tEm
EOc72dU6kdfPiWcCTAuKtb/+TNB5q/wlJ4uQ/yXt2rbPXo/wl+GvOVoifuJXTj78
WWYfVDaSi1aRkWeC1SIymWLUhbQ1EZAsMyzO0ORT7YqBJraRoza0ghJF+j82OABa
CEI3BnmIJ3d4rrDVJ/OKiw7uQZmcuGtK4/OpZUcXitYFtB+Go4cAyF5+J8219wAD
Bp3sSDo23Sd1gw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:33 2026 by rpki-client