Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
File:                     VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft (raw, json)
Hash identifier:          Ao/UCoemwBc8EF40QiBqK2D80MIkBQrFO+pK9D3hEyI=
Subject key identifier:   60:D1:51:11:8D:3D:38:2D:AE:F5:ED:AE:43:B9:DF:8C:B5:FA:7A:4A
Authority key identifier: 54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6
Certificate issuer:       /CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
Certificate serial:       019E6EE344ADE293F5F3A79E92222F5C201C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
Manifest number:          0106
Signing time:             Thu 28 May 2026 14:00:48 +0000
Manifest this update:     Thu 28 May 2026 14:00:48 +0000
Manifest next update:     Fri 29 May 2026 14:00:48 +0000
Files and hashes:         1: 6x7BJ0F-meGk9fhXJNWGJnuegOw.roa (hash: ejX+MPtDK3gTtFG1432bC6M7t7QPNbrVRz6iGDt2Hfo=)
                          2: VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl (hash: /Ku1B2P2ktGkuVZhEy+cIFYcLbAjPBu/giT5AQDjmMc=)
                          3: oTR56cyeKnrqB4eLr9IFRqGiB88.roa (hash: snlvASDIyvudTtl4HEkxIFNnIhgqIkS7EP587pwAfiQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 29 May 2026 13:25:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:6e:e3:44:ad:e2:93:f5:f3:a7:9e:92:22:2f:5c:20:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54adbbcf9260432abee2013033d4eb95f3bdabd6
        Validity
            Not Before: May 28 14:00:48 2026 GMT
            Not After : May 29 14:00:48 2026 GMT
        Subject: CN=60d151118d3d382daef5edae43b9df8cb5fa7a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:f6:c6:81:0b:09:6b:f2:a5:12:f3:f3:8a:
                    03:d6:05:20:e3:c6:65:61:1b:7f:6a:85:b7:b3:87:
                    c3:14:ad:32:9a:2e:d4:27:0e:a5:14:57:ba:91:c0:
                    96:69:02:fb:31:20:d1:eb:9c:c7:66:03:85:71:2d:
                    c8:bc:45:65:4d:4f:e2:e9:07:96:11:f0:02:a8:bc:
                    0b:dc:d8:fb:6b:4c:2c:64:41:ed:ca:32:1a:27:8f:
                    eb:9e:01:4f:ef:2e:34:29:77:d5:ab:6d:89:2d:15:
                    40:fa:30:ee:cc:f4:26:b7:dd:c8:d2:3f:08:a1:e4:
                    62:42:b6:7c:cd:09:6f:49:e9:1f:20:b0:9e:90:c7:
                    eb:82:f6:2d:3d:d6:80:43:39:9a:1b:4b:af:b4:a8:
                    05:32:b7:58:08:f7:ca:13:bf:36:1b:b5:cf:4e:82:
                    15:af:61:4e:29:51:15:fe:62:20:10:b5:f2:7b:ed:
                    3f:20:c4:20:81:e4:67:ae:03:8d:91:2c:44:af:d6:
                    55:fb:be:84:8b:e5:67:82:57:a5:ce:cf:b9:b8:8b:
                    58:0a:f8:68:11:43:bc:44:74:f0:08:97:cd:2e:2d:
                    16:49:ae:ee:5b:10:fe:37:a9:5d:42:fa:52:51:1f:
                    b8:ca:73:98:31:41:75:79:e5:49:66:3c:1b:fb:fc:
                    9c:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D1:51:11:8D:3D:38:2D:AE:F5:ED:AE:43:B9:DF:8C:B5:FA:7A:4A
            X509v3 Authority Key Identifier:
                keyid:54:AD:BB:CF:92:60:43:2A:BE:E2:01:30:33:D4:EB:95:F3:BD:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VK27z5JgQyq-4gEwM9TrlfO9q9Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/340e56-6492-47e2-99dc-142537de948e/1/VK27z5JgQyq-4gEwM9TrlfO9q9Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1e:d6:4e:a8:73:04:e7:30:68:51:69:27:fe:63:86:0f:b9:9d:
         b3:02:bb:60:17:ee:c1:fd:e0:29:6a:bb:e5:ed:0f:25:4b:ea:
         41:f9:f2:1b:a7:6b:a3:d9:0a:a1:fb:ec:73:a8:d7:29:a2:ac:
         de:15:35:73:46:f5:08:3e:ea:e3:95:25:08:27:34:aa:65:47:
         85:32:4e:62:dc:3c:1d:2e:16:f8:e5:ad:63:f9:59:42:60:93:
         08:c0:d5:cc:99:6e:4f:32:0f:04:90:7c:0f:c9:0f:00:b1:70:
         4d:6b:8d:15:02:f0:4e:f2:be:37:5d:0f:c2:de:39:57:5c:d9:
         eb:0d:fd:44:d2:b2:d7:5d:02:1c:80:f8:d6:cd:2a:82:ee:4b:
         71:91:c8:1b:1f:59:0b:02:18:28:98:09:87:c2:51:76:a9:e2:
         fe:78:3a:a2:5f:c2:7f:99:1f:f9:0b:94:5a:a0:c5:17:2e:39:
         95:f0:9d:7d:66:1a:5b:f3:e4:59:cc:62:c0:40:2a:dc:49:de:
         8d:a2:72:f4:c9:7f:d7:dd:28:cd:d7:73:4b:59:9a:16:ca:4c:
         65:29:c2:18:b1:b5:dc:40:7d:29:ac:da:b6:90:db:11:a8:19:
         0d:03:02:aa:ad:15:38:19:0e:79:ee:71:ee:b0:22:81:8f:f6:
         a1:48:64:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 28 16:24:31 2026 by rpki-client