Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File:                     VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier:          STIdry2NSmk77f0y4Q/1kccfDYvFqDA3bhSTDDvJvY4=
Subject key identifier:   E4:6C:4A:13:9F:BF:D7:4F:06:D1:B4:EF:D9:95:57:93:65:55:18:5E
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer:       /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial:       019CACEBDC4EC81400B810AECDAA754F86C9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number:          0D57
Signing time:             Mon 02 Mar 2026 05:01:04 +0000
Manifest this update:     Mon 02 Mar 2026 05:01:04 +0000
Manifest next update:     Tue 03 Mar 2026 05:01:04 +0000
Files and hashes:         1: M-FsfGOycf9jYfp9tqtSOE1tveg.roa (hash: KbWLzZCgilO6OBGCbfqwG+EF0N+c9KwghmXNtRevPUA=)
                          2: OC1nyRt0bfVZANX8lUlsmij_SRQ.roa (hash: Rdwkl90u1nSZHEd8rY7u8aTFZGWKHVXtuaJS4W++hPQ=)
                          3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: 7XNN3ircP5e8D7MbDd9G9T1oBOgw9u7B1RGyUyLm8Rg=)
                          4: VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa (hash: LHcWGrhhqmQEefD63qRAeICnBie6NA3TujUcOgPmo8Q=)
                          5: X8URGrQy5lQVgKZucRbyZdlIJ0A.roa (hash: v3GGPEKUSmn7q4SXBMTsOj2RRQGTLoKv6ZyqiXOL8do=)
                          6: tEALMFY5mRNnPeI1w2B4fh6s5fw.roa (hash: OpvOgmRGG0JJ9f1GQilIMwIzyL+4wnLk8rAzuKjlbwM=)
                          7: tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa (hash: mCMHaaXhfT9VeDu9M4tgELO+5HgeDqSNi4Gr5v6WmTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 03 Mar 2026 00:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:ac:eb:dc:4e:c8:14:00:b8:10:ae:cd:aa:75:4f:86:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
        Validity
            Not Before: Mar  2 05:01:04 2026 GMT
            Not After : Mar  3 05:01:04 2026 GMT
        Subject: CN=e46c4a139fbfd74f06d1b4efd99557936555185e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:20:02:08:f2:88:e5:75:eb:7b:0b:72:96:b0:
                    6f:4d:be:e5:6b:48:ef:9c:97:00:24:07:a1:9b:65:
                    57:3c:4e:46:53:92:d4:42:f8:2b:eb:fe:b0:d7:87:
                    32:ab:92:73:b7:8d:97:1e:5b:37:20:a8:0b:bd:f1:
                    3e:5d:e8:f1:f7:77:99:22:9b:36:a6:96:54:a9:9a:
                    97:33:b8:cf:93:de:d8:36:f8:a1:31:32:02:d6:2f:
                    b0:83:78:c4:d4:11:44:0e:98:23:4c:8a:10:dd:c6:
                    47:42:ac:32:b5:13:27:6c:8e:fb:38:be:75:6e:c7:
                    73:6c:fe:97:e6:37:29:0b:43:89:74:9e:1a:4e:ab:
                    c9:50:a8:00:a7:7f:df:01:47:7b:c3:a2:24:e9:e7:
                    ca:07:81:02:0d:24:99:d7:7b:da:5d:08:66:81:ee:
                    2d:22:70:db:1b:0e:d0:5d:0a:32:8a:dc:07:b2:f3:
                    09:f7:ef:5a:20:e1:3f:0a:40:83:45:1e:25:c6:99:
                    8e:ff:c0:b4:b2:4b:9e:b1:e8:72:d7:55:e0:1e:3f:
                    d3:02:63:df:54:cb:cd:c4:fc:71:5f:50:4d:56:10:
                    de:1f:17:db:f0:2d:d1:f0:85:b6:83:41:41:c1:5b:
                    9b:a6:90:52:3b:e8:41:06:09:cf:3c:b6:10:5c:96:
                    a5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6C:4A:13:9F:BF:D7:4F:06:D1:B4:EF:D9:95:57:93:65:55:18:5E
            X509v3 Authority Key Identifier:
                keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:f2:65:6c:bd:33:f4:a8:c0:3a:41:5a:90:c9:71:97:c9:2a:
         c5:ec:46:98:a3:eb:be:ad:9e:3c:7c:5d:42:26:f9:92:a1:49:
         ca:e8:60:00:5d:d8:18:33:7d:78:5b:e7:75:0e:0f:01:6c:66:
         52:18:ba:5f:a7:a4:73:55:72:0a:e6:a4:a9:7e:7b:e8:62:ad:
         ec:02:78:a4:10:4e:23:b3:26:7f:e6:78:69:2f:46:63:28:e6:
         cd:90:c8:52:08:ae:fd:19:e9:37:3f:90:ef:ff:2d:a5:85:5d:
         b0:6e:3d:c7:c1:93:78:53:4a:2a:1d:89:c7:76:42:3c:4f:93:
         4d:da:ad:42:96:0f:f6:f8:e4:09:9f:90:fb:94:f7:eb:c6:8f:
         1a:f4:30:5e:fb:95:e1:30:b0:d3:d5:21:3a:7d:8c:0d:4c:94:
         81:78:ea:4b:c2:81:df:06:39:94:29:84:17:77:6a:c4:e3:d5:
         13:c7:78:c9:75:11:10:e2:b8:79:92:3b:e0:e8:a4:34:3d:f0:
         aa:03:91:fb:1c:51:fd:f2:3e:b7:7f:9c:a7:07:5c:16:bf:8e:
         b1:9b:3a:f7:11:e8:bf:fb:26:59:98:12:84:23:3a:78:48:be:
         36:de:e9:1f:42:91:3d:3a:27:1b:dd:cd:a7:45:fa:98:c5:88:
         64:29:94:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZys69xOyBQAuBCuzap1T4bJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzg0MWVlZmYyMGM3OGIzM2Q0MTFkYWU1MWE2OTJhZGI4
OTJlMzEwHhcNMjYwMzAyMDUwMTA0WhcNMjYwMzAzMDUwMTA0WjAzMTEwLwYDVQQD
EyhlNDZjNGExMzlmYmZkNzRmMDZkMWI0ZWZkOTk1NTc5MzY1NTUxODVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniACCPKI5XXrewtylrBvTb7la0jv
nJcAJAehm2VXPE5GU5LUQvgr6/6w14cyq5Jzt42XHls3IKgLvfE+Xejx93eZIps2
ppZUqZqXM7jPk97YNvihMTIC1i+wg3jE1BFEDpgjTIoQ3cZHQqwytRMnbI77OL51
bsdzbP6X5jcpC0OJdJ4aTqvJUKgAp3/fAUd7w6Ik6efKB4ECDSSZ13vaXQhmge4t
InDbGw7QXQoyitwHsvMJ9+9aIOE/CkCDRR4lxpmO/8C0skuesehy11XgHj/TAmPf
VMvNxPxxX1BNVhDeHxfb8C3R8IW2g0FBwVubppBSO+hBBgnPPLYQXJalkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFORsShOfv9dPBtG079mVV5NlVRheMB8GA1UdIwQY
MBaAFFR4Qe7/IMeLM9QR2uUaaSrbiS4xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmIt
MzY2YmExNzAwZmUwLzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9jOGQzOTMtM2UyOC00ZjA3LTk5NmItMzY2YmExNzAwZmUw
LzEvVkhoQjd2OGd4NHN6MUJIYTVScHBLdHVKTGpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIvJlbL0z
9KjAOkFakMlxl8kqxexGmKPrvq2ePHxdQib5kqFJyuhgAF3YGDN9eFvndQ4PAWxm
Uhi6X6ekc1VyCuakqX576GKt7AJ4pBBOI7Mmf+Z4aS9GYyjmzZDIUgiu/RnpNz+Q
7/8tpYVdsG49x8GTeFNKKh2Jx3ZCPE+TTdqtQpYP9vjkCZ+Q+5T368aPGvQwXvuV
4TCw09UhOn2MDUyUgXjqS8KB3wY5lCmEF3dqxOPVE8d4yXUREOK4eZI74OikND3w
qgOR+xxR/fI+t3+cpwdcFr+OsZs69xHov/smWZgShCM6eEi+Nt7pH0KRPTonG93N
p0X6mMWIZCmU1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:18:15 2026 by rpki-client