Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File:                     VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier:          3VI9WJNnJbjLK9BPGnxoPDsV3halefDvjRVn4of6qwo=
Subject key identifier:   88:84:E6:FC:E9:9B:3C:05:63:D2:F0:9D:42:96:C0:58:AA:08:FB:13
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer:       /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial:       019EFBA85253F83B3AEC25E80F2AA34BB6F2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number:          01B1
Signing time:             Wed 24 Jun 2026 22:02:52 +0000
Manifest this update:     Wed 24 Jun 2026 22:02:52 +0000
Manifest next update:     Thu 25 Jun 2026 22:02:52 +0000
Files and hashes:         1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: DpfrRRLktX5JO3F6fsiaF1hLfSNt+3RtGSti7L8gaMc=)
                          2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:02:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:a8:52:53:f8:3b:3a:ec:25:e8:0f:2a:a3:4b:b6:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
        Validity
            Not Before: Jun 24 22:02:52 2026 GMT
            Not After : Jun 25 22:02:52 2026 GMT
        Subject: CN=8884e6fce99b3c0563d2f09d4296c058aa08fb13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:c6:6b:6b:b9:5b:20:42:83:af:ea:8c:c5:84:
                    2e:a2:b1:ec:bc:6d:b8:07:ce:51:c8:90:4d:cb:3e:
                    a3:29:fc:63:a0:91:87:45:15:6e:56:a1:33:6e:e3:
                    89:5f:c3:a1:63:e1:17:20:93:05:8e:c6:8a:cc:6f:
                    8a:9a:bd:71:29:e0:08:df:c5:a6:dc:21:ea:63:a5:
                    81:8b:ee:ec:03:e9:74:9f:75:31:f9:78:b7:ce:80:
                    59:5f:d3:f2:98:85:7c:e2:e5:47:48:40:6a:36:04:
                    fd:dc:0a:7f:7d:ce:7f:77:bb:2b:af:27:51:2c:68:
                    18:4f:e9:fe:d4:cc:97:c8:b1:8e:e6:20:c1:57:b0:
                    5c:79:a7:47:a0:f5:64:a1:b3:36:b9:a2:7a:63:15:
                    0f:f6:1a:18:27:ef:72:41:5b:26:e0:04:6b:dd:57:
                    9b:17:41:bb:98:6e:1d:e4:42:8f:1b:15:24:c8:36:
                    ba:a1:82:ab:ee:29:2d:32:a2:a4:9d:2e:7e:b2:3f:
                    78:70:d9:44:01:55:36:4b:99:8e:67:81:2f:10:8e:
                    33:32:cb:f0:c0:bd:c5:f0:a7:c1:38:3a:d4:ea:67:
                    c6:ad:37:cd:e1:3e:f5:ec:97:ac:25:41:b1:d1:15:
                    ec:a9:52:bf:8a:fb:2d:31:14:01:b3:ea:88:3d:ba:
                    fe:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:84:E6:FC:E9:9B:3C:05:63:D2:F0:9D:42:96:C0:58:AA:08:FB:13
            X509v3 Authority Key Identifier:
                keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:51:06:18:fa:c4:27:c2:ff:20:91:de:f5:52:19:00:1b:e0:
         0a:dc:50:57:12:de:e8:cf:7d:e0:d2:73:65:06:09:49:69:9b:
         c4:9a:e9:cd:06:c3:bf:20:f9:6c:1c:17:84:f9:26:70:6d:44:
         82:13:c5:bf:f2:3e:25:ab:d1:a6:73:2b:ef:86:00:1a:25:2f:
         2f:10:4f:9e:cd:01:30:1a:ee:cd:52:9e:cf:67:3f:43:f0:ea:
         c9:60:a5:dd:a7:84:7e:9e:e6:d4:c7:1c:de:1c:bf:fd:9d:2b:
         c8:63:0d:a0:94:12:33:ca:30:65:bd:1b:6c:7b:28:ff:4c:09:
         e8:43:7b:da:e9:e8:75:be:d2:ac:17:6c:de:9a:6e:86:e3:07:
         cd:b4:13:83:e6:64:9c:5e:41:0e:cd:57:9e:d9:da:0a:7c:9d:
         28:0e:2f:e2:18:3c:09:1c:be:09:c4:99:e0:b7:c7:02:4f:25:
         8c:63:53:39:64:44:8b:03:5a:46:14:f1:fe:7c:6b:56:31:05:
         bd:74:23:8f:fb:80:0e:19:22:61:dc:79:e4:50:79:d1:04:76:
         e9:28:17:07:5d:88:7a:3a:ea:eb:c4:bd:30:81:8a:b2:ca:d4:
         44:5e:a8:25:85:e9:ed:26:0f:0f:e6:6b:33:98:90:b0:2a:95:
         cf:34:83:57
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ77qFJT+Ds67CXoDyqjS7byMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDJhMGMzOTgzOTE3NjhjNjE4MWE3M2YxYjQyNmM3NTRl
MTc0Y2EwHhcNMjYwNjI0MjIwMjUyWhcNMjYwNjI1MjIwMjUyWjAzMTEwLwYDVQQD
Eyg4ODg0ZTZmY2U5OWIzYzA1NjNkMmYwOWQ0Mjk2YzA1OGFhMDhmYjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA18Zra7lbIEKDr+qMxYQuorHsvG24
B85RyJBNyz6jKfxjoJGHRRVuVqEzbuOJX8OhY+EXIJMFjsaKzG+Kmr1xKeAI38Wm
3CHqY6WBi+7sA+l0n3Ux+Xi3zoBZX9PymIV84uVHSEBqNgT93Ap/fc5/d7srrydR
LGgYT+n+1MyXyLGO5iDBV7BceadHoPVkobM2uaJ6YxUP9hoYJ+9yQVsm4ARr3Veb
F0G7mG4d5EKPGxUkyDa6oYKr7iktMqKknS5+sj94cNlEAVU2S5mOZ4EvEI4zMsvw
wL3F8KfBODrU6mfGrTfN4T717JesJUGx0RXsqVK/ivstMRQBs+qIPbr+fQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiE5vzpmzwFY9LwnUKWwFiqCPsTMB8GA1UdIwQY
MBaAFFTSoMOYORdoxhgac/G0JsdU4XTKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgt
NGMyMzhjNmYwM2M5LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy8zZWZjNWUtYjQ5My00M2Q0LThlYTgtNGMyMzhjNmYwM2M5
LzEvVk5LZ3c1ZzVGMmpHR0JwejhiUW14MVRoZE1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeVEGGPrE
J8L/IJHe9VIZABvgCtxQVxLe6M994NJzZQYJSWmbxJrpzQbDvyD5bBwXhPkmcG1E
ghPFv/I+JavRpnMr74YAGiUvLxBPns0BMBruzVKez2c/Q/DqyWCl3aeEfp7m1Mcc
3hy//Z0ryGMNoJQSM8owZb0bbHso/0wJ6EN72unodb7SrBds3ppuhuMHzbQTg+Zk
nF5BDs1XntnaCnydKA4v4hg8CRy+CcSZ4LfHAk8ljGNTOWREiwNaRhTx/nxrVjEF
vXQjj/uADhkiYdx55FB50QR26SgXB12Iejrq68S9MIGKssrURF6oJYXp7SYPD+Zr
M5iQsCqVzzSDVw==
-----END CERTIFICATE-----
Generated at Thu Jun 25 08:31:18 2026 by rpki-client