Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File:                     VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier:          miipeclZRsv0QX0Wz6VbsdOUtuasfhM80un5lgEtI4E=
Subject key identifier:   A9:C7:C4:27:B0:10:94:EE:B9:82:75:2B:42:FC:75:D8:30:E8:6F:D3
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer:       /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial:       019FA0A8C458041D8A38D3B868AC92F7EB9F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number:          08F2
Signing time:             Sun 26 Jul 2026 23:00:42 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:42 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:42 +0000
Files and hashes:         1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: 8JKcvDDhWJhINYK8/4G1SVfFVwkmbwuUs8qPsXJ1uCA=)
                          2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:c4:58:04:1d:8a:38:d3:b8:68:ac:92:f7:eb:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
        Validity
            Not Before: Jul 26 23:00:42 2026 GMT
            Not After : Jul 27 23:00:42 2026 GMT
        Subject: CN=a9c7c427b01094eeb982752b42fc75d830e86fd3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8b:6f:5d:0c:1f:89:6a:5b:82:10:7c:92:41:
                    71:5b:11:a2:78:a4:dd:ce:70:85:90:05:dd:f1:0a:
                    59:74:83:f9:23:05:d9:97:c2:71:4b:64:ff:e7:61:
                    6c:32:c8:6a:ae:6b:e2:e1:88:ea:b4:92:bb:94:a9:
                    99:64:e5:60:e8:f3:3c:73:79:3d:40:ba:27:0f:fc:
                    48:38:64:b4:27:d3:50:5b:60:c5:a1:a4:e9:fe:34:
                    98:dc:03:95:71:e1:30:ea:51:f3:8b:1e:ed:81:d8:
                    9f:7d:96:88:c6:49:a2:1e:f4:59:8c:f9:57:f0:1c:
                    1a:b9:72:ef:ca:e0:1b:73:8e:13:68:85:13:77:f1:
                    c1:1d:86:5f:56:e7:24:ef:bf:03:c4:f4:95:ce:51:
                    26:bf:f7:61:d3:59:01:4d:a0:0a:01:e1:48:a4:19:
                    25:c7:e5:7b:1b:2e:d7:55:1b:fa:60:95:93:dd:dd:
                    0c:f4:e2:8a:1a:70:eb:e2:c5:68:3f:b4:95:71:0a:
                    4e:37:a5:35:86:d4:f7:36:a4:0f:36:48:8c:40:3c:
                    45:e6:52:e3:0c:1a:f5:23:eb:7d:80:f7:40:44:5d:
                    8f:3c:91:b6:3d:9e:00:43:f4:89:b7:da:25:55:6a:
                    3d:87:98:42:13:80:1a:21:b3:8e:f4:cf:ac:41:2a:
                    fa:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:C7:C4:27:B0:10:94:EE:B9:82:75:2B:42:FC:75:D8:30:E8:6F:D3
            X509v3 Authority Key Identifier:
                keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:29:32:bf:e1:c8:62:c9:a4:5e:11:dd:1b:53:7b:58:e0:4f:
         72:10:88:17:2c:91:40:09:d0:97:70:95:0e:82:d4:1c:c2:7c:
         ac:79:b7:ca:c6:48:9f:16:68:81:47:87:e9:ba:e4:55:b7:1a:
         d7:ab:00:13:0c:1d:3a:d8:45:3a:d3:31:97:93:36:1f:ff:e7:
         29:27:fb:0c:6d:b4:35:bc:75:36:6b:80:11:82:8f:d1:57:05:
         72:bd:97:8a:e7:38:3c:d7:53:cc:d6:97:9b:d9:e8:7c:0d:a5:
         e9:6c:88:68:c3:ca:e1:7b:14:2b:1d:7c:d1:b4:35:98:14:ce:
         3e:cc:7f:1b:c1:4d:46:05:39:63:a7:64:c5:52:64:80:33:5e:
         62:e0:00:48:7a:59:eb:3e:d9:cc:22:7a:a7:93:67:d1:bf:87:
         c9:7e:7d:dc:23:82:37:f7:f4:69:06:a0:76:9f:71:a7:4d:94:
         51:98:4f:61:ef:d4:59:6f:af:6c:0a:1c:83:b1:ee:60:b6:54:
         c4:16:b2:2b:99:10:f2:70:03:e2:bf:42:37:5c:03:fe:54:ee:
         39:c7:9b:46:94:5c:7b:87:4c:63:c3:7d:54:72:2e:4d:3d:3c:
         ef:99:0c:69:5a:39:ef:e0:22:3e:ef:76:d1:b2:9c:c8:de:c5:
         60:93:ad:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:04:49 2026 by rpki-client