Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
File:                     VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft (raw, json)
Hash identifier:          kFU2r4Wrkw4VW0t/jBEmLLG8jkk5uMMfVuR1IQFgdU8=
Subject key identifier:   8A:3C:F3:B7:9B:95:5F:B3:32:A0:F9:E7:E6:BE:22:A7:42:30:21:1E
Authority key identifier: 54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44
Certificate issuer:       /CN=54158203da3a1e96318e85043411e7d4d03d4c44
Certificate serial:       01A001384A3F497D1D70079E68B7AECE7422
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
Manifest number:          0531
Signing time:             Fri 14 Aug 2026 17:01:01 +0000
Manifest this update:     Fri 14 Aug 2026 17:01:01 +0000
Manifest next update:     Sat 15 Aug 2026 17:01:01 +0000
Files and hashes:         1: VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl (hash: VMFc43TPKVcy998YzTKppzlKigixNabfHw286eeSLoU=)
                          2: tOX7dyIThoDN1xaTAaaJqMi__Vw.roa (hash: k4fTptzT7qrxypPu30EJnb+ns+ku02IYmPLr0kX7y1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 17:01:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:01:38:4a:3f:49:7d:1d:70:07:9e:68:b7:ae:ce:74:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54158203da3a1e96318e85043411e7d4d03d4c44
        Validity
            Not Before: Aug 14 17:01:01 2026 GMT
            Not After : Aug 15 17:01:01 2026 GMT
        Subject: CN=8a3cf3b79b955fb332a0f9e7e6be22a74230211e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7f:a0:a7:18:bd:bf:a3:58:fe:9b:f0:f0:8f:
                    9a:43:0f:34:75:52:de:fc:82:84:12:e2:a7:df:02:
                    d1:ba:a4:ca:3c:d9:0e:a5:a6:f7:24:25:88:e9:e7:
                    e8:73:e9:06:a9:8d:fb:6d:57:c5:63:1e:a4:4d:78:
                    11:c6:f5:1a:26:92:e7:3d:5f:b9:3c:90:64:17:88:
                    8c:73:06:fe:9a:02:e2:89:fa:a3:1a:f6:69:f4:d7:
                    47:41:01:ea:4a:f3:ed:a1:27:9e:fa:94:6b:f1:4b:
                    63:81:92:e2:c3:b4:30:cf:ef:79:dc:4c:a0:9f:c7:
                    5a:f2:a5:08:f8:c9:90:cd:c5:2e:34:d2:ef:73:94:
                    b3:a0:16:ad:77:19:84:af:3c:ed:27:3a:06:55:ac:
                    dd:0a:72:0e:49:30:d9:d9:39:41:fe:46:e1:25:0e:
                    44:eb:46:f8:de:ea:eb:88:f0:29:bd:03:ef:b5:97:
                    4a:6a:c9:53:be:48:2c:62:88:66:89:06:6d:7f:95:
                    9a:77:e5:93:55:c9:ce:e9:df:4d:ca:10:3a:b7:e0:
                    a4:ec:e3:82:95:60:24:29:a6:86:70:8d:ce:97:96:
                    a4:60:65:95:9f:c6:a5:4c:bd:54:2e:50:48:88:85:
                    be:68:26:5c:01:1f:0c:7f:a6:2d:a7:32:c9:34:f2:
                    a8:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:3C:F3:B7:9B:95:5F:B3:32:A0:F9:E7:E6:BE:22:A7:42:30:21:1E
            X509v3 Authority Key Identifier:
                keyid:54:15:82:03:DA:3A:1E:96:31:8E:85:04:34:11:E7:D4:D0:3D:4C:44

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBWCA9o6HpYxjoUENBHn1NA9TEQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/91fdb3-13e2-42b2-ac73-1a55d1e4c21c/1/VBWCA9o6HpYxjoUENBHn1NA9TEQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:07:d4:dc:73:6c:21:48:13:99:39:c7:1f:c1:7e:c7:73:42:
         1c:32:81:aa:34:8e:1d:26:e0:36:07:e2:0a:ef:61:33:28:71:
         5a:2d:8a:5f:a0:f0:47:9b:ce:70:ef:5f:3a:c3:c3:33:44:47:
         3a:cb:ec:b5:5e:9a:4c:e6:e3:73:f3:d8:bb:4a:46:70:7b:e4:
         59:c7:0b:f6:87:ba:08:47:89:cb:d6:92:92:28:14:72:bb:d2:
         3b:c5:68:9a:00:4d:6e:bc:6e:75:24:00:53:fc:a3:c8:7e:44:
         b6:bf:34:e5:45:36:64:c1:a4:17:6c:36:65:70:47:dd:84:5a:
         57:e6:44:e5:57:49:07:29:27:5d:d5:33:d9:ae:86:71:7d:68:
         6c:82:ba:64:5a:bc:8a:d3:44:57:f5:d0:17:ae:8e:0a:86:77:
         78:f1:94:5e:90:7a:d7:84:8f:f1:0b:17:02:04:18:4e:71:f2:
         f1:7a:e1:d9:3c:0c:6b:4b:4b:6b:39:a6:0b:d9:de:4e:65:d7:
         1b:3a:03:17:82:fa:52:93:31:83:b3:93:86:ad:0d:a8:d7:49:
         01:dc:aa:2e:a4:e3:eb:7d:c0:a1:1c:c5:d8:3b:d2:64:e8:34:
         94:da:06:5e:dd:cb:a7:ec:5f:f5:fe:bb:55:a6:03:1c:71:83:
         70:4f:eb:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:16:27 2026 by rpki-client