Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          KVBYgSdeBdF7aEs7D8rZIoBCTaiHC2EEddPTLy69gto=
Subject key identifier:   8A:55:B6:83:AC:DD:0A:30:07:DA:68:AF:57:C8:4E:B1:A8:85:2E:A9
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       01A0016EF5CBFDF59C13C9D4114D1BD12FDE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          1A00
Signing time:             Fri 14 Aug 2026 18:00:44 +0000
Manifest this update:     Fri 14 Aug 2026 18:00:44 +0000
Manifest next update:     Sat 15 Aug 2026 18:00:44 +0000
Files and hashes:         1: 1-VM5a5VKVQLBO_mS5M0AKzrssE0.roa (hash: IZ1q5GIjELLZgJlLEGzKrti0blpYjCurNkMWnWHLthU=)
                          2: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: c87KJsFr94Hti6ZLPtJabqxeObNH3s4M0BfnILljfQU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:6e:f5:cb:fd:f5:9c:13:c9:d4:11:4d:1b:d1:2f:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: Aug 14 18:00:44 2026 GMT
            Not After : Aug 15 18:00:44 2026 GMT
        Subject: CN=8a55b683acdd0a3007da68af57c84eb1a8852ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:e5:15:8c:2c:f5:18:9e:21:16:77:97:86:03:
                    65:f1:3e:58:a6:ee:21:89:77:b2:f6:e6:8a:7b:46:
                    b8:1e:1c:04:80:2c:fc:bd:c0:f4:51:2c:d5:68:ff:
                    1b:a6:0a:14:00:7a:61:90:47:da:39:a4:d0:16:60:
                    77:44:36:f4:14:73:98:bf:dd:f5:9f:b9:43:d1:47:
                    8a:a5:e3:8e:e0:4f:86:ee:de:59:a0:4a:62:27:4c:
                    97:d6:f4:5a:45:7e:96:b4:e6:c2:47:f2:5b:6f:1c:
                    1d:e6:9b:7b:13:7f:96:d2:97:ac:df:ef:cf:2b:19:
                    90:8d:bc:c2:42:35:59:2c:48:25:5d:aa:e3:f7:c7:
                    b9:79:b4:70:90:57:93:9f:91:6f:a8:13:de:83:af:
                    f8:81:16:3f:99:3d:11:c8:db:2d:3d:93:1c:53:0e:
                    16:b8:f6:fa:4d:6a:4f:89:3e:3d:e9:13:2b:bf:97:
                    ea:fc:e8:eb:51:09:57:00:c5:95:8e:70:0c:8e:d7:
                    d4:db:d7:9e:99:37:d3:c6:d6:73:eb:06:9e:03:f6:
                    da:9f:62:84:6a:75:3f:30:3e:57:9a:06:1e:09:2d:
                    e0:44:5f:e2:61:33:5e:e4:f5:d0:2a:fc:1a:a3:49:
                    20:7b:d3:66:eb:c1:c3:d6:e2:14:74:41:9a:55:44:
                    d6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:55:B6:83:AC:DD:0A:30:07:DA:68:AF:57:C8:4E:B1:A8:85:2E:A9
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:b4:85:48:62:86:05:b4:01:30:cb:3b:0a:ca:2a:23:40:9c:
         d7:7a:69:fa:fd:47:ff:ed:b4:c2:7b:9a:77:ff:1e:5f:d5:0b:
         03:e8:11:3c:fd:b3:68:5c:86:eb:6c:55:9e:28:ce:7b:11:66:
         79:64:f2:07:fa:7d:03:c7:84:62:0d:42:47:74:39:69:7d:c9:
         d2:2e:90:26:0c:95:7b:fe:c1:6b:8f:c6:c0:8c:8e:bb:6c:e4:
         b8:ff:17:d4:a3:a6:0f:2b:61:4f:64:ba:15:4f:0d:a3:38:d4:
         50:ed:8b:bb:59:b1:06:9a:23:3a:2f:bd:28:fd:5d:b2:41:18:
         a6:fe:b5:62:49:f6:d2:38:09:4b:80:49:f3:61:47:5a:44:e8:
         76:21:75:15:aa:59:f9:0d:f7:d0:a0:9d:f9:76:c5:da:ed:9a:
         48:13:6b:99:96:34:ee:e7:5c:3b:7c:cf:9e:21:a8:cb:f8:b1:
         3f:c9:9f:58:ef:c4:9e:d6:ee:57:48:80:00:0f:78:03:83:f3:
         ce:09:9b:58:a3:6c:81:73:0f:11:84:f8:74:59:31:37:94:be:
         17:eb:a9:6a:d2:fd:12:40:b5:c0:61:50:d0:05:30:9d:7a:fa:
         21:68:a8:4a:f9:ab:b8:b2:33:b9:ae:6b:8b:15:39:20:08:f9:
         78:c2:3e:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:28:29 2026 by rpki-client