Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File:                     VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier:          AJ2rg2d+mUTXVThw7+cMapubu6SGuTLiHIfyZOo+cVA=
Subject key identifier:   D4:A5:AA:DA:42:9C:22:99:92:4A:EF:9D:D6:5C:26:05:0B:5D:1D:F9
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer:       /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial:       01A039A776C1039E0D4B0634EEC956098184
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number:          03A7
Signing time:             Tue 25 Aug 2026 16:01:11 +0000
Manifest this update:     Tue 25 Aug 2026 16:01:11 +0000
Manifest next update:     Wed 26 Aug 2026 16:01:11 +0000
Files and hashes:         1: 5iHp1QJzSxFi9y4pkePt5QKL-Zg.roa (hash: lJiI1N3DnF79ErzjbyhVb741cRQCBNwpN9QEJj/N4lg=)
                          2: M9L4U5JoYbCtWv7gAD7KA_WviB4.asa (hash: RUh7/m1A6kF4bAMmLaC8OSPQKRtwY1TY3SbqfUWHrbE=)
                          3: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: O1eIPf5n+wvJFFYSw/c1BKBNwyoUFANzXfUmjkmrR7E=)
                          4: fepTS1XefYM5Mm0VJMMPSN02wxo.asa (hash: VKdt4tdwgcz86/Usr6Qv72R8qP1GifrjrQfQv6ap4/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Aug 2026 14:02:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:39:a7:76:c1:03:9e:0d:4b:06:34:ee:c9:56:09:81:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
        Validity
            Not Before: Aug 25 16:01:11 2026 GMT
            Not After : Aug 26 16:01:11 2026 GMT
        Subject: CN=d4a5aada429c2299924aef9dd65c26050b5d1df9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3f:29:12:0c:79:d7:d8:23:b6:f2:ff:df:0c:
                    e9:a8:d4:a1:4f:16:df:c3:03:df:ae:56:ca:52:78:
                    69:98:77:dc:a2:a7:11:7d:6a:a1:28:bc:d3:84:97:
                    08:a4:e5:73:b9:f9:23:53:94:a6:94:16:25:d5:cd:
                    69:57:57:3f:6e:74:e0:0c:25:59:05:bd:9e:8a:18:
                    19:d0:21:a4:74:93:88:32:8e:84:01:82:a6:d6:a4:
                    08:b2:14:db:58:b3:db:b6:6f:20:b6:ad:83:51:f3:
                    1c:b2:97:17:7c:d4:ea:a4:33:b8:59:b9:cd:6b:79:
                    5e:0a:e5:f2:1f:fb:e2:d2:90:8a:a1:f6:9b:93:7a:
                    a2:eb:39:d9:02:cd:73:3b:6d:ac:14:f4:9d:22:04:
                    c0:50:ca:da:62:7d:6d:dd:a8:08:6a:ab:3e:0e:ad:
                    e4:cf:f5:fc:1f:c2:cb:6c:ff:a2:c7:9b:e0:66:04:
                    19:65:f3:8a:79:61:df:af:14:98:86:af:20:f5:74:
                    de:30:fd:b0:91:f4:d6:bf:2f:db:51:c8:fc:23:60:
                    f3:b5:ab:5e:bc:82:8c:78:fe:48:22:ac:d1:eb:46:
                    6d:8c:f3:c4:03:1d:95:d6:36:70:e7:18:24:97:35:
                    01:b4:ee:ba:ba:19:27:bc:ae:7a:58:0e:d9:3b:55:
                    d9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A5:AA:DA:42:9C:22:99:92:4A:EF:9D:D6:5C:26:05:0B:5D:1D:F9
            X509v3 Authority Key Identifier:
                keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:92:24:61:95:3c:ed:4c:8f:4c:b8:fc:f2:23:25:54:db:c7:
         ce:df:ab:e5:62:71:ea:bd:81:db:8e:5a:83:72:f9:22:af:2c:
         ac:14:c9:b4:d8:70:aa:9b:43:97:4a:af:3a:33:3c:14:45:ec:
         ae:d4:77:85:d8:18:9a:a0:af:95:94:f1:59:72:7e:62:3d:bf:
         2b:72:e3:8c:bf:93:1b:dc:7f:2d:53:78:ac:1a:04:29:f8:29:
         95:c8:d9:ab:92:e9:91:74:ae:bd:75:32:c9:e9:1a:3f:5c:66:
         d7:48:12:60:b1:fb:18:d5:27:0b:85:28:31:10:71:41:80:c0:
         64:c3:44:05:83:6a:f0:8f:75:f8:46:99:19:b5:b1:5f:15:19:
         38:58:0b:b7:3e:36:b2:50:d8:48:54:fb:c1:d4:ca:2c:48:11:
         78:de:e2:13:49:04:8e:70:15:9e:1e:27:f5:a6:94:e9:ad:60:
         32:92:2f:2b:30:45:43:7d:bd:4d:61:09:94:a2:19:94:c5:e3:
         a8:ab:47:bc:47:5b:91:a6:ec:71:5c:15:e4:cc:47:ad:8b:ee:
         88:2b:45:54:d6:1c:7e:12:c9:00:31:a4:55:64:14:4c:21:d3:
         a9:ba:62:37:82:c8:0f:37:29:d5:d3:6a:df:f4:c0:49:92:9d:
         10:34:df:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 18:33:50 2026 by rpki-client