Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File:                     VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier:          wg5eOCbkLULHJrjOjg0fiqq8Ca3/In1IZg8rplOxLgo=
Subject key identifier:   89:D0:43:91:64:A7:3E:B2:96:E6:6A:DC:17:BC:37:83:FF:2B:1F:C8
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer:       /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial:       019FF3EB9B8657167487F236BBEC30E2D60B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number:          1A00
Signing time:             Wed 12 Aug 2026 03:02:11 +0000
Manifest this update:     Wed 12 Aug 2026 03:02:11 +0000
Manifest next update:     Thu 13 Aug 2026 03:02:11 +0000
Files and hashes:         1: 8ddVo-9kzKVGW2yLY3eaMsy1rnU.roa (hash: fYg9WUAZvsXCn60kBrtqhNECj69V0bbL3jvATcEdq18=)
                          2: MfN2Gu5BN4G7488wno6PGWe0FDY.roa (hash: kLhLY55A0NkLXCFXmojQ0uiumYsyv2wuegRkrcVkjbs=)
                          3: TUxGT6b7VmBODBTYsF2NgpIkI_g.roa (hash: 3zWjegldqSXFUKgzRCSieNP7a6jAxz4Yeeh+x/krXJ8=)
                          4: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: 5Kk+NAfmEyHrVSoCKBkv9bqsp8TyYPyXjRB4AYZ2O+Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 03:02:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f3:eb:9b:86:57:16:74:87:f2:36:bb:ec:30:e2:d6:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
        Validity
            Not Before: Aug 12 03:02:11 2026 GMT
            Not After : Aug 13 03:02:11 2026 GMT
        Subject: CN=89d0439164a73eb296e66adc17bc3783ff2b1fc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:60:2c:cd:28:ac:eb:a4:c1:6d:36:1a:19:78:
                    5c:aa:f6:a6:76:05:29:35:d4:15:d7:da:2b:4b:ea:
                    88:05:0e:bc:20:91:fa:08:c0:bb:c6:99:96:77:53:
                    42:b4:2c:44:a7:b6:d8:a9:e9:ab:2b:20:b6:b9:47:
                    5d:07:97:7a:08:34:fe:3e:9d:db:4d:18:62:45:7f:
                    c1:15:77:54:c3:59:6f:35:10:8d:ea:b7:01:b7:22:
                    92:26:a8:40:77:84:38:76:06:c1:d3:fa:7b:c0:56:
                    33:58:1c:6d:4e:4d:f2:64:ba:92:00:db:be:6f:f5:
                    ef:c8:3a:30:36:81:bb:15:48:6b:8b:14:96:cc:bb:
                    dc:f5:12:ca:0f:ab:98:64:7c:40:97:04:89:4c:2c:
                    02:91:33:e2:4b:e5:55:0b:58:1d:24:ea:b3:c5:d0:
                    49:86:78:85:68:48:48:aa:a0:51:9c:f1:32:3c:5a:
                    7f:2e:23:14:71:af:87:56:3f:26:91:b1:cd:a4:49:
                    b6:10:1b:72:81:31:42:e1:08:3f:c2:d8:2e:79:48:
                    16:2c:fd:01:73:24:ea:70:25:c5:2a:62:d0:71:34:
                    0b:34:c3:ce:e7:5a:ca:ee:fa:c5:81:67:14:cf:7a:
                    ca:3e:b8:6c:f4:0b:f6:8f:37:d4:cb:fa:31:75:3e:
                    ed:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:D0:43:91:64:A7:3E:B2:96:E6:6A:DC:17:BC:37:83:FF:2B:1F:C8
            X509v3 Authority Key Identifier:
                keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:8c:f4:f9:38:a9:06:75:c8:a1:45:44:22:78:ab:69:96:df:
         cf:d7:cb:7b:f0:e1:f8:66:44:db:15:d0:c9:0c:1b:8e:c6:14:
         60:fe:7d:9e:c7:4f:5a:04:47:b5:22:79:f4:de:73:f3:06:a5:
         83:c2:27:30:bc:d1:7e:cb:19:29:37:b2:cf:9d:0e:02:bc:99:
         86:3f:ef:6f:85:21:a5:55:5f:dd:04:fd:3c:52:f8:03:0b:7d:
         1e:81:71:04:a1:86:b3:31:76:a2:3a:1b:dd:e6:52:30:6b:a2:
         02:88:e1:1f:ab:69:fc:2e:95:dc:c6:fb:66:88:c9:96:33:4e:
         29:b7:d8:af:ef:b4:40:f1:74:86:4c:95:2f:bd:20:a6:9b:19:
         ab:02:2f:fb:d0:f1:cb:62:46:a5:c9:4d:72:3a:b6:4a:cf:2f:
         a0:e8:23:fd:39:c7:a6:0c:71:15:52:ab:dc:10:7d:6e:8f:62:
         8d:0d:19:e3:73:ba:59:19:72:3a:bd:c9:5b:2f:5f:c5:50:cc:
         83:a5:31:b3:06:93:8d:06:c0:8d:72:82:13:c2:dc:79:25:86:
         8a:1d:e7:32:c7:b4:ca:d4:1b:05:42:38:bb:68:8f:9e:d1:5b:
         61:b2:86:4b:96:fd:0a:9d:a1:17:50:c5:93:3d:cf:1c:3c:15:
         0f:6b:58:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 10:22:19 2026 by rpki-client