Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
File:                     VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft (raw, json)
Hash identifier:          T0GLuySqqChyfWCupWrh1CZ0I+ojbaEkgZbjXsEETUY=
Subject key identifier:   60:A8:5F:25:B4:1C:64:52:40:1E:F6:E2:84:C7:C3:87:6D:46:07:66
Authority key identifier: 54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA
Certificate issuer:       /CN=54d2a0c398391768c6181a73f1b426c754e174ca
Certificate serial:       019FF8A3672731E541FED861461B1AD34786
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
Manifest number:          0234
Signing time:             Thu 13 Aug 2026 01:01:25 +0000
Manifest this update:     Thu 13 Aug 2026 01:01:25 +0000
Manifest next update:     Fri 14 Aug 2026 01:01:25 +0000
Files and hashes:         1: VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl (hash: Mpq9Fu70DX3wuaZE2LD8oONjRjhStGR4iJs2KCnOyQA=)
                          2: dN5Q2WICYbdZhJA_hHzXkB59500.asa (hash: F1ZxJauAvdVl3Ww3t1yQ6cZBIm2TXKvnPpFnLKpoL0Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 14 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f8:a3:67:27:31:e5:41:fe:d8:61:46:1b:1a:d3:47:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d2a0c398391768c6181a73f1b426c754e174ca
        Validity
            Not Before: Aug 13 01:01:25 2026 GMT
            Not After : Aug 14 01:01:25 2026 GMT
        Subject: CN=60a85f25b41c6452401ef6e284c7c3876d460766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:a4:49:44:0a:a2:aa:4d:e7:0a:64:f9:c6:f6:
                    be:d0:6c:c2:8c:b3:09:0b:ca:78:62:b5:f9:4a:cd:
                    b7:d7:b5:54:c3:18:af:67:20:43:11:6a:93:1e:62:
                    29:d3:0b:b3:4a:99:f5:eb:f4:ca:63:e5:e1:c1:cb:
                    17:7e:cd:f8:50:fe:44:aa:05:bd:dc:4f:a3:df:cb:
                    76:cd:51:82:d3:5b:5e:e8:21:da:0c:7e:47:82:bc:
                    3e:5d:5e:9d:0b:e1:42:e8:b2:82:81:68:e3:76:60:
                    4c:05:e2:da:98:a5:00:65:46:f9:fd:aa:7b:d4:51:
                    36:bc:1e:0b:0e:84:8d:ea:0c:01:72:9b:1f:09:44:
                    13:d1:2b:be:e6:3f:c8:1e:d3:cd:57:0e:ad:c2:6d:
                    6c:cf:4e:2a:57:44:d9:61:24:cb:e0:27:5f:81:05:
                    e4:ae:d9:0e:d3:d0:25:4e:4b:5b:ee:b5:95:ad:4b:
                    21:f4:e1:00:03:f2:e9:99:ef:cb:a0:17:9e:43:38:
                    48:10:29:3d:4f:f0:00:c5:8c:62:11:64:10:73:84:
                    2f:89:25:d9:b7:8b:92:6f:7d:a3:b6:cb:10:a3:69:
                    f5:c8:0b:e9:2e:b5:27:12:cf:ea:d5:d8:60:49:d8:
                    a0:52:e6:51:02:10:7d:ec:a7:e6:25:1a:a1:f8:4a:
                    5b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:A8:5F:25:B4:1C:64:52:40:1E:F6:E2:84:C7:C3:87:6D:46:07:66
            X509v3 Authority Key Identifier:
                keyid:54:D2:A0:C3:98:39:17:68:C6:18:1A:73:F1:B4:26:C7:54:E1:74:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNKgw5g5F2jGGBpz8bQmx1ThdMo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3efc5e-b493-43d4-8ea8-4c238c6f03c9/1/VNKgw5g5F2jGGBpz8bQmx1ThdMo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:b3:ea:31:58:81:58:50:69:a1:55:c7:8a:f1:60:06:c3:6a:
         d4:59:41:58:14:23:7f:bb:0b:c5:a8:78:e2:9d:c5:ab:8a:87:
         99:74:60:39:10:75:28:8c:e2:dc:4b:c8:72:bb:69:e0:d8:cd:
         d8:2d:57:38:3e:ff:e1:99:47:50:79:c3:a1:ba:66:bd:70:8f:
         42:6f:41:dd:e1:42:e8:d9:f9:86:77:e1:6a:31:3a:77:89:56:
         db:67:9c:02:54:f9:7e:2b:7a:ac:43:ac:5e:c7:7d:c9:a1:31:
         91:19:72:eb:24:bc:f3:7b:e7:f4:c0:6b:d7:0d:4c:31:8e:ac:
         f9:c3:6b:88:08:84:06:ca:e2:b2:9a:28:2f:45:39:99:d0:84:
         fd:a2:b6:9d:50:00:f4:71:f1:8f:87:04:41:bf:b7:20:e1:d5:
         99:c2:c9:42:65:03:fe:41:d1:9f:54:80:2f:9e:1f:ce:4a:a9:
         be:cb:ee:fc:07:a3:f2:a0:ac:00:61:ec:ff:13:cf:1d:e2:16:
         0c:f5:90:8f:2d:a7:34:5f:46:ea:ed:2a:92:78:f5:65:d0:27:
         23:f5:42:7c:eb:97:3e:00:ed:27:7c:8a:fd:87:d3:9f:cc:73:
         46:7c:b3:0c:89:d8:a0:cb:f2:0a:26:87:fd:fd:21:50:43:ef:
         43:66:93:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:04:27 2026 by rpki-client