Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File:                     VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier:          HYcyAC2UD9ZG6KzhqjlwJBwVzpRQxoZC7p+mIk73qqI=
Subject key identifier:   69:63:72:A3:21:FF:2D:87:58:07:9F:86:43:7C:99:39:F4:70:4A:B6
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer:       /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial:       019F197A8ACD23BB2283AE699C542F66B938
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number:          07D4
Signing time:             Tue 30 Jun 2026 17:01:29 +0000
Manifest this update:     Tue 30 Jun 2026 17:01:29 +0000
Manifest next update:     Wed 01 Jul 2026 17:01:29 +0000
Files and hashes:         1: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: dTePhLSkLAr/PmJMJsc+4+5fplBxHemC6g0XDHUHQE4=)
                          2: pQKPikBzd7Oz_I9lHHOOAo5keSk.roa (hash: yDnXs+sIyJdYXEuX7spiKfyy3V1/GMh526F5IcQattQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:7a:8a:cd:23:bb:22:83:ae:69:9c:54:2f:66:b9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e610c2abd3664c11204580f748996555c22225
        Validity
            Not Before: Jun 30 17:01:29 2026 GMT
            Not After : Jul  1 17:01:29 2026 GMT
        Subject: CN=696372a321ff2d8758079f86437c9939f4704ab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c2:c5:c5:aa:7b:40:44:3e:5e:1e:74:b1:25:
                    00:a7:04:8e:19:60:bd:4a:2e:53:d0:cb:a3:77:b1:
                    1b:72:6d:25:b4:ac:1a:de:74:77:f6:bd:3e:33:30:
                    78:14:c0:47:0f:7c:6f:a8:21:f4:17:2f:cc:76:8c:
                    ae:ef:bb:64:dc:9f:88:10:fc:60:35:4f:24:cb:97:
                    83:69:dd:ab:10:55:28:3b:ba:ba:a5:ba:49:27:36:
                    54:55:99:a8:1f:5e:3b:8a:29:b5:bb:f7:42:00:6c:
                    50:36:42:4a:7d:bd:1a:33:02:ca:df:dc:8d:11:02:
                    ba:d8:c7:8c:ae:7a:3b:49:0d:79:4f:78:31:9a:7a:
                    8f:4e:7b:89:5a:25:78:c6:6d:10:95:64:07:f6:af:
                    43:80:65:d7:31:4a:d4:f8:f2:48:46:43:ef:15:86:
                    46:67:a0:c5:24:10:d5:55:7b:44:d7:69:77:85:46:
                    ca:19:49:06:89:4b:7c:98:80:75:1f:de:63:70:f3:
                    d5:0a:20:85:cf:84:49:b5:69:30:ed:b2:2b:ab:44:
                    a5:f3:18:65:97:a1:3c:60:d8:03:2a:23:81:10:f4:
                    0c:d7:49:d2:73:2b:9c:e1:7a:89:31:2e:37:66:8a:
                    5f:c8:7d:33:6b:c0:fb:f9:92:fe:6e:17:bb:f1:0a:
                    2d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:63:72:A3:21:FF:2D:87:58:07:9F:86:43:7C:99:39:F4:70:4A:B6
            X509v3 Authority Key Identifier:
                keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:07:6d:51:1e:c9:1c:70:5c:67:93:0b:a7:18:a6:68:76:ca:
         60:98:27:cc:40:28:27:a8:87:b7:6d:0a:21:9a:da:62:7d:9d:
         78:00:1f:e2:81:4f:2f:5e:f9:8b:72:25:ad:de:d3:bd:5a:df:
         82:d8:7d:d2:55:73:e9:37:bc:c5:bb:63:c1:d3:d1:19:cf:78:
         d9:f5:4e:e4:44:39:dd:ef:40:b8:cd:2d:b6:ae:a3:e6:84:60:
         6e:30:96:3d:82:8f:82:f1:42:9c:70:1a:b5:bb:93:8d:a8:8a:
         a0:97:e3:a4:fc:4d:7d:44:6f:2c:55:85:72:4f:67:01:4a:d1:
         3b:a0:7c:39:23:84:61:58:22:40:78:be:7f:ff:ce:e6:9e:07:
         aa:ac:4b:22:49:26:28:d9:c7:50:cb:5a:66:67:1d:ab:31:9c:
         63:46:80:37:5d:ab:81:fc:00:ef:49:d9:2f:3c:c7:a9:f7:90:
         27:c5:04:58:12:a5:ba:bf:3b:de:25:1c:37:e5:7b:cf:91:56:
         14:b2:5a:84:3b:a9:2d:e0:92:33:04:8b:a2:11:b9:3b:90:46:
         90:c6:e2:42:b8:94:76:eb:48:a8:c5:9b:d4:60:4b:d7:6a:b2:
         3f:cd:00:55:e9:69:86:9c:75:9e:92:9a:07:dc:b2:56:ae:ae:
         a6:cf:65:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 22:18:47 2026 by rpki-client