Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
File:                     VLQtUje-M_3NNvBdlJzJGOSXJwk.mft (raw, json)
Hash identifier:          KyvKWYhcxTVt9FJ9y50aAAjiZ1JyD1IDHwwBToeoTm4=
Subject key identifier:   DA:7C:FA:7F:40:E9:D3:A3:98:F5:1F:93:51:7F:20:7F:77:E4:60:5A
Authority key identifier: 54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09
Certificate issuer:       /CN=54b42d5237be33fdcd36f05d949cc918e4972709
Certificate serial:       019EFBA8CBB091C081B134390454E460AAF5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
Manifest number:          0755
Signing time:             Wed 24 Jun 2026 22:03:23 +0000
Manifest this update:     Wed 24 Jun 2026 22:03:23 +0000
Manifest next update:     Thu 25 Jun 2026 22:03:23 +0000
Files and hashes:         1: VLQtUje-M_3NNvBdlJzJGOSXJwk.crl (hash: /rj1lwlbH/VnaZi+mNM1UVOwv5awh+4PIojsew6u49g=)
                          2: bexPf4wBiqE5B0cK8WpLE7_TGgw.asa (hash: f6uUWxmQPWv0jNUrF3hj3zTPBTwtBbg/p5UBKL2IpM0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 25 Jun 2026 22:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:fb:a8:cb:b0:91:c0:81:b1:34:39:04:54:e4:60:aa:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b42d5237be33fdcd36f05d949cc918e4972709
        Validity
            Not Before: Jun 24 22:03:23 2026 GMT
            Not After : Jun 25 22:03:23 2026 GMT
        Subject: CN=da7cfa7f40e9d3a398f51f93517f207f77e4605a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:bf:b8:aa:70:76:89:b6:4c:d2:57:0d:f7:f4:
                    3b:c4:7a:53:bb:5b:f4:a1:74:d6:b3:4f:60:23:1a:
                    df:4c:8d:45:43:ae:ae:31:f8:e1:97:e5:40:ac:6d:
                    b0:b7:74:48:0d:47:3c:0f:b3:c0:ac:e8:03:e2:89:
                    27:76:17:1c:f9:d1:7b:1b:c0:43:f6:40:0a:36:fd:
                    b6:86:32:a8:38:be:01:28:e8:19:70:35:de:39:f0:
                    07:0a:0c:03:3c:dd:7f:14:a7:db:a4:d2:48:82:ad:
                    a0:4b:02:eb:f4:39:87:7a:c4:9b:40:d2:57:c7:2e:
                    79:36:46:38:86:58:f4:c8:e7:48:d0:44:8d:00:a0:
                    fe:ae:e0:7f:23:0d:18:e7:24:a6:94:3d:57:93:c0:
                    2a:7a:bd:a9:b3:3a:e0:cb:f8:ab:bb:91:c7:bf:e7:
                    5d:47:55:aa:32:73:f9:f3:c6:fb:2f:5c:4d:a2:45:
                    a3:0b:0d:d0:51:5a:7b:bc:3b:72:06:ea:dd:38:f5:
                    74:45:13:6a:1a:7a:42:28:5f:4e:61:f2:83:ee:57:
                    6e:41:83:f5:e4:05:80:59:81:f1:f8:9a:f4:65:ff:
                    48:b2:75:c5:d6:06:6e:fb:45:06:e0:6c:20:a9:26:
                    31:8b:a8:80:46:57:cb:fb:ae:6c:53:ed:58:bc:e3:
                    b5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:7C:FA:7F:40:E9:D3:A3:98:F5:1F:93:51:7F:20:7F:77:E4:60:5A
            X509v3 Authority Key Identifier:
                keyid:54:B4:2D:52:37:BE:33:FD:CD:36:F0:5D:94:9C:C9:18:E4:97:27:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLQtUje-M_3NNvBdlJzJGOSXJwk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/26/f4ed5f-5a30-49ed-92a9-b85513c6f236/1/VLQtUje-M_3NNvBdlJzJGOSXJwk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:4a:2f:43:be:1f:bf:bb:b7:13:5b:10:c5:88:f4:3c:7b:47:
         62:d3:5e:ef:22:f6:d7:65:80:1c:2d:50:b5:8a:b1:62:aa:f5:
         0c:f6:50:c6:b6:0b:47:41:d6:36:c8:c4:c6:82:80:22:f5:b5:
         52:e3:ba:19:b3:7f:ea:22:57:79:07:ec:cd:1c:06:00:f5:88:
         0a:fe:6f:87:61:da:84:0a:ef:55:71:f0:89:72:96:49:1b:2a:
         fa:a7:6c:c2:80:9e:c1:3d:36:ba:c7:a5:f0:87:96:2d:44:8b:
         eb:21:5a:da:ce:07:05:22:bd:d6:dd:47:ce:4a:9e:52:de:42:
         5d:5b:3f:fa:ac:1a:21:74:9f:32:f4:2c:1b:af:6a:7f:82:df:
         5d:c9:a5:36:02:87:5f:48:f7:f8:88:31:1c:04:a1:75:1b:b7:
         69:da:fa:85:fb:e6:32:bd:8b:3d:40:1a:3a:0a:22:48:08:4d:
         ed:98:25:08:d8:45:a0:cd:85:dd:0f:d0:cf:42:1d:88:48:6d:
         ce:19:ad:1e:cf:26:f2:49:83:ea:b9:af:68:0a:19:50:0d:c6:
         db:81:e7:25:fc:6c:f0:39:91:72:c0:29:8b:c5:af:bc:e1:77:
         4b:b9:b8:b7:ee:c8:79:ae:08:30:2e:f9:5a:94:c1:31:21:a1:
         f8:51:64:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 25 08:31:20 2026 by rpki-client