Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File:                     VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier:          KpTaJsbUtfKuTULbKOD9oYEGjPJLLdyJUSBI9dqDp4g=
Subject key identifier:   0C:02:66:1F:1E:2B:81:C7:3A:05:B7:92:7E:5F:1D:88:60:CB:A6:8D
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer:       /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial:       019FA2CDE5A731A63C80312376F34E08B765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number:          19D0
Signing time:             Mon 27 Jul 2026 09:00:30 +0000
Manifest this update:     Mon 27 Jul 2026 09:00:30 +0000
Manifest next update:     Tue 28 Jul 2026 09:00:30 +0000
Files and hashes:         1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: 7osOL4lo+Mny9U/S3oEBtGZ6O47zDJ/ptE2oAfnwYyA=)
                          2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:cd:e5:a7:31:a6:3c:80:31:23:76:f3:4e:08:b7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
        Validity
            Not Before: Jul 27 09:00:30 2026 GMT
            Not After : Jul 28 09:00:30 2026 GMT
        Subject: CN=0c02661f1e2b81c73a05b7927e5f1d8860cba68d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:e1:ea:e6:a5:a6:f6:fe:43:75:06:1e:01:dd:
                    d7:b5:c5:b5:f1:e2:3d:e1:c4:56:dd:11:00:d2:f5:
                    16:a5:64:20:6c:ad:96:37:0a:bc:1f:d8:8d:c2:12:
                    b2:0b:63:56:f3:27:03:66:38:05:ee:b5:c9:e9:55:
                    fe:4c:37:8e:71:9c:67:87:2e:6f:6f:94:14:9c:18:
                    aa:56:9d:1c:f9:85:49:94:1f:44:92:49:62:1c:ed:
                    8c:70:6c:0c:02:85:e0:c1:0d:02:61:ef:68:7e:5a:
                    cc:5f:6e:3b:84:ca:61:d6:41:cd:46:fe:9b:aa:ac:
                    84:d3:34:ca:7a:00:6a:56:9b:e0:bf:46:ce:d9:e8:
                    52:0b:3a:26:54:7c:5d:a7:c9:c7:10:1e:af:1b:2d:
                    7d:7f:f4:27:ad:9c:b3:b5:b7:e0:08:60:d9:67:10:
                    d0:92:5b:ee:3d:bb:1e:75:cd:ea:f5:9d:3b:98:76:
                    f1:e8:4b:f8:a4:5e:6e:9e:e7:58:e7:71:f7:7f:b0:
                    64:5c:b2:f8:52:17:74:15:d5:ac:d7:19:01:dd:63:
                    57:81:fd:ea:47:47:73:99:6b:18:17:f6:fb:4c:14:
                    2a:2c:78:49:89:f3:ca:5c:39:f2:e7:cf:26:57:2f:
                    fb:c0:00:9a:1e:98:3d:56:3b:af:d0:c3:28:37:f2:
                    d7:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:02:66:1F:1E:2B:81:C7:3A:05:B7:92:7E:5F:1D:88:60:CB:A6:8D
            X509v3 Authority Key Identifier:
                keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:cf:21:43:1d:bb:ad:9c:8e:89:42:21:81:6c:1c:37:3b:7a:
         c9:05:22:07:40:e1:d1:68:2c:19:68:ec:c4:82:60:77:8f:e9:
         45:17:9d:61:7f:78:0b:0a:87:38:0c:7b:4f:2e:81:31:c6:2b:
         4e:f6:7a:a2:1f:c2:74:f9:a6:0b:f3:5c:bc:c6:1e:02:9e:34:
         40:2a:8b:eb:04:54:bf:1a:2f:9c:31:1a:72:f0:86:ac:17:9e:
         bb:53:e9:d4:35:55:50:3b:3e:91:d9:15:00:bd:a0:a8:4b:5a:
         04:7f:2b:b0:39:8c:4b:cd:19:11:68:e4:48:85:bf:92:48:18:
         44:69:70:25:19:09:bd:2a:85:cf:60:96:dc:d7:60:af:8a:dd:
         e2:22:4e:c9:b5:51:39:4b:ea:a5:4a:97:1e:4d:12:f5:13:c8:
         60:0d:5c:69:55:6b:3b:d9:e9:fb:22:35:f7:e2:23:07:f0:5b:
         7c:3c:19:9e:9e:84:0a:e9:7b:c0:fc:37:19:9e:74:96:ce:4d:
         9e:3b:f7:92:4c:e2:a8:07:6a:6c:b9:c1:f0:e0:58:10:c0:3d:
         dc:d0:92:3a:81:26:41:82:76:f2:7a:da:b5:32:35:8e:7b:e3:
         c1:ed:9a:fa:28:51:16:b8:1a:40:2e:a0:d7:25:93:ae:6d:8c:
         22:35:88:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 13:45:06 2026 by rpki-client