Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File:                     VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier:          /JfpnDeGPfu4RAftbX0Gfi5QGUMeiF0bewhdCeUDlfI=
Subject key identifier:   26:B5:9D:0C:93:A3:7E:D2:2C:55:BB:BB:CA:F6:43:2A:7E:8A:53:82
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer:       /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial:       019EB6FC13E89DEB956B59A79A6061A44F26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number:          0879
Signing time:             Thu 11 Jun 2026 14:00:33 +0000
Manifest this update:     Thu 11 Jun 2026 14:00:33 +0000
Manifest next update:     Fri 12 Jun 2026 14:00:33 +0000
Files and hashes:         1: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: gT/X4arkDGsNPAZw+hGwLUU1kFJUX/oArmV6ZVeF00w=)
                          2: ygA-wG9tjRbJFuLnohuNyXMjfgQ.roa (hash: mYTcv7dGzDKbqrjt808JcooFhDSFlGdRfp8YaG3pmNY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 12 Jun 2026 13:27:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:b6:fc:13:e8:9d:eb:95:6b:59:a7:9a:60:61:a4:4f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
        Validity
            Not Before: Jun 11 14:00:33 2026 GMT
            Not After : Jun 12 14:00:33 2026 GMT
        Subject: CN=26b59d0c93a37ed22c55bbbbcaf6432a7e8a5382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:8d:bc:dd:64:f2:7e:41:f8:fd:6b:8b:c0:52:
                    7c:ab:c7:39:60:da:c5:13:31:c5:0c:e2:90:70:58:
                    ad:56:32:06:06:8c:5b:b0:36:a4:31:f9:96:88:a8:
                    a8:61:29:d5:fa:ae:74:8b:2d:f2:d6:0e:44:0d:5e:
                    49:a7:db:45:24:c9:83:d7:b6:80:df:d6:b4:c4:ba:
                    7b:64:20:84:81:58:5e:d0:10:4a:90:ef:75:12:da:
                    48:a4:88:24:bb:05:6d:b7:c5:66:41:2c:af:ef:ea:
                    ca:7d:bc:32:b4:59:df:51:2a:0d:45:fd:41:95:e6:
                    b5:87:a5:4b:df:4c:ac:c8:03:6b:87:75:e1:2c:ea:
                    23:45:4f:f0:a5:d4:6b:32:25:de:02:b1:03:13:46:
                    22:65:88:54:38:e0:bd:f9:6e:b5:1e:32:3a:44:76:
                    14:2c:a3:32:86:e8:10:57:f6:77:7d:ea:da:b0:57:
                    8a:e8:2b:8a:43:3f:c8:c8:e9:91:1c:04:04:03:3e:
                    fa:23:ed:af:2a:3f:53:c5:5c:e1:19:3c:42:ca:b5:
                    16:72:7b:7d:48:c7:6e:1d:f0:4c:26:df:d6:f4:1f:
                    be:e8:b6:3d:51:70:0e:72:47:35:a7:37:31:ca:45:
                    3f:9f:ed:1b:1d:f3:3b:01:62:b2:9e:10:77:ef:be:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B5:9D:0C:93:A3:7E:D2:2C:55:BB:BB:CA:F6:43:2A:7E:8A:53:82
            X509v3 Authority Key Identifier:
                keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:c1:ad:50:37:9d:c7:cf:6c:c4:9e:15:5b:ed:df:c2:1a:ba:
         33:62:b1:1f:98:4c:b0:c7:63:5e:eb:5a:4b:e9:66:3e:7f:65:
         32:10:43:74:3e:c3:da:20:3f:f1:1c:14:76:54:12:6f:d0:18:
         e0:e3:f0:d7:e1:fb:98:98:30:85:bd:3c:91:a5:fc:90:a8:15:
         b9:09:e2:ac:0a:60:dd:cc:f0:64:0f:89:54:2e:88:c0:5c:c8:
         13:60:1a:5d:15:77:49:d6:48:21:48:21:5b:99:19:7e:6f:6d:
         d1:40:1b:a6:2c:14:64:60:b1:bd:26:22:6f:9e:15:bd:f2:44:
         c5:97:6f:99:23:83:7e:e0:a0:68:30:0b:2c:10:13:ea:c2:c8:
         57:79:74:0f:6e:6a:1f:9d:3c:d6:f9:65:b1:e1:c9:6b:2d:b0:
         3a:96:a4:d6:20:05:a7:7d:34:30:ba:5a:85:e5:1f:10:1f:b9:
         c7:0d:da:d9:ff:f7:b4:bc:41:1f:40:a6:1b:98:34:27:bb:d2:
         4b:72:44:e0:c6:61:3e:2f:65:3a:5e:ff:18:45:32:e6:02:84:
         37:e6:2f:56:16:7a:f1:c5:76:6c:a6:72:43:b1:19:cf:73:b0:
         dc:e1:76:d9:47:da:20:d2:e4:1d:1b:71:6d:58:34:4a:4b:ec:
         ff:64:08:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ62/BPoneuVa1mnmmBhpE8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YmJkYjJkOTgwYWMwYTgyN2MwY2M2ZWQwZjkwNjc0OWNi
MmNlYTEwHhcNMjYwNjExMTQwMDMzWhcNMjYwNjEyMTQwMDMzWjAzMTEwLwYDVQQD
EygyNmI1OWQwYzkzYTM3ZWQyMmM1NWJiYmJjYWY2NDMyYTdlOGE1MzgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY283WTyfkH4/WuLwFJ8q8c5YNrF
EzHFDOKQcFitVjIGBoxbsDakMfmWiKioYSnV+q50iy3y1g5EDV5Jp9tFJMmD17aA
39a0xLp7ZCCEgVhe0BBKkO91EtpIpIgkuwVtt8VmQSyv7+rKfbwytFnfUSoNRf1B
lea1h6VL30ysyANrh3XhLOojRU/wpdRrMiXeArEDE0YiZYhUOOC9+W61HjI6RHYU
LKMyhugQV/Z3ferasFeK6CuKQz/IyOmRHAQEAz76I+2vKj9TxVzhGTxCyrUWcnt9
SMduHfBMJt/W9B++6LY9UXAOckc1pzcxykU/n+0bHfM7AWKynhB3774lOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa1nQyTo37SLFW7u8r2Qyp+ilOCMB8GA1UdIwQY
MBaAFFS72y2YCsCoJ8DMbtD5BnScss6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQt
ZjM4NTU5YmU4MGU5LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQtZjM4NTU5YmU4MGU5
LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARsGtUDed
x89sxJ4VW+3fwhq6M2KxH5hMsMdjXutaS+lmPn9lMhBDdD7D2iA/8RwUdlQSb9AY
4OPw1+H7mJgwhb08kaX8kKgVuQnirApg3czwZA+JVC6IwFzIE2AaXRV3SdZIIUgh
W5kZfm9t0UAbpiwUZGCxvSYib54VvfJExZdvmSODfuCgaDALLBAT6sLIV3l0D25q
H5081vllseHJay2wOpak1iAFp300MLpaheUfEB+5xw3a2f/3tLxBH0CmG5g0J7vS
S3JE4MZhPi9lOl7/GEUy5gKEN+YvVhZ68cV2bKZyQ7EZz3Ow3OF22UfaINLkHRtx
bVg0Skvs/2QIvw==
-----END CERTIFICATE-----
Generated at Thu Jun 11 23:07:59 2026 by rpki-client