Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
File:                     VLjgSw4aTU46KN8V61hJPnY3frA.mft (raw, json)
Hash identifier:          9BfGjlY2duZyYIpiAN8fqM6C3KtG2S1nvc7ns0+hX0U=
Subject key identifier:   F9:B9:4C:CD:D3:F8:D2:A5:F6:DC:DB:54:3F:B8:AD:E5:1D:4D:0B:F1
Authority key identifier: 54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0
Certificate issuer:       /CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
Certificate serial:       019FA0E07D45D8D26475D9EEA23ABAADB247
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
Manifest number:          19CE
Signing time:             Mon 27 Jul 2026 00:01:34 +0000
Manifest this update:     Mon 27 Jul 2026 00:01:34 +0000
Manifest next update:     Tue 28 Jul 2026 00:01:34 +0000
Files and hashes:         1: Q56vED3-1_h936Q-ifWJs53c2GY.roa (hash: OY22bFuEd/zv+11Gst6hYDrj07QiCcY3HPOcMh0b7Ks=)
                          2: VLjgSw4aTU46KN8V61hJPnY3frA.crl (hash: ZCPK8FAZ3J/RHyYxQw7MUzeQRQ7Et2TtHNVRUVMX9rM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:e0:7d:45:d8:d2:64:75:d9:ee:a2:3a:ba:ad:b2:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54b8e04b0e1a4d4e3a28df15eb58493e76377eb0
        Validity
            Not Before: Jul 27 00:01:34 2026 GMT
            Not After : Jul 28 00:01:34 2026 GMT
        Subject: CN=f9b94ccdd3f8d2a5f6dcdb543fb8ade51d4d0bf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:66:78:fb:79:e9:0b:f5:6d:95:69:63:19:96:
                    fe:a6:6b:a1:73:17:b9:fa:9c:12:37:56:32:fb:5f:
                    80:4d:f9:0d:e8:e5:9d:fb:0d:e2:09:c5:ad:08:69:
                    1c:ee:32:30:76:77:1b:d1:fb:dc:86:da:de:65:ed:
                    90:c1:8a:93:d1:34:8f:a2:f5:69:f3:ad:24:ee:e6:
                    1e:d0:c1:6b:13:f7:98:6f:96:2d:8c:c3:29:1d:6f:
                    c4:19:1d:48:25:a2:7f:dd:7a:84:51:b0:12:70:de:
                    32:76:db:56:72:a0:4f:19:1d:d3:b1:ff:92:c5:10:
                    10:7e:ee:92:20:b3:0c:a1:60:dc:03:39:a0:d5:23:
                    30:19:c4:3a:2c:fb:6f:38:8b:97:47:11:77:84:20:
                    d9:04:da:c0:75:36:fa:1d:2b:5d:2c:d4:95:e3:0f:
                    c4:99:a9:3b:7a:90:a3:f1:1a:d8:8d:a3:0d:92:50:
                    0c:e3:89:ef:df:d4:b0:ee:d9:4a:22:b5:d2:f8:54:
                    c3:37:51:e3:50:bf:09:b0:f1:86:da:a5:d3:f3:ba:
                    a0:b4:e1:3a:70:cb:41:8c:81:ba:3f:db:55:37:e0:
                    40:ef:e2:83:55:5d:59:bb:03:71:c8:de:56:93:c1:
                    6f:fc:5e:0b:6b:19:c4:89:ad:c7:32:19:7c:64:e4:
                    6b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:B9:4C:CD:D3:F8:D2:A5:F6:DC:DB:54:3F:B8:AD:E5:1D:4D:0B:F1
            X509v3 Authority Key Identifier:
                keyid:54:B8:E0:4B:0E:1A:4D:4E:3A:28:DF:15:EB:58:49:3E:76:37:7E:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLjgSw4aTU46KN8V61hJPnY3frA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b72b97-f9a5-4486-aaab-63916f7f174b/1/VLjgSw4aTU46KN8V61hJPnY3frA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:7c:02:6b:36:5c:e1:bb:04:da:5c:e2:4c:91:31:66:a0:87:
         45:f2:0c:7e:9c:3c:ff:5c:ce:43:38:7f:45:16:47:4a:bf:bd:
         1f:68:88:1e:c3:c2:8f:7f:06:89:f2:41:bb:79:51:ec:34:8d:
         b3:11:96:c9:53:73:59:71:b6:9e:ad:cc:79:9a:13:1d:21:7e:
         7b:25:36:a4:14:05:e2:23:d1:96:e4:c1:0f:56:c7:07:91:4e:
         cb:21:ff:2f:df:95:cc:4d:e8:3b:5b:a2:90:21:47:d1:72:8a:
         ad:91:05:0b:09:7b:1c:b5:ce:1b:47:0b:ed:82:df:a8:95:77:
         b4:31:d2:e0:9c:d1:db:97:2e:04:68:f0:61:66:12:9a:8a:29:
         b9:16:5e:6d:e2:d7:d6:37:dd:a4:42:3e:95:39:d2:cb:f5:08:
         90:be:c0:1b:d8:e8:72:48:94:d5:18:f7:59:69:fa:7b:65:aa:
         2d:99:9a:25:55:54:31:8f:cf:b1:5f:3f:a4:71:d8:71:fc:24:
         f3:d1:f1:fb:ea:f1:f1:2a:ed:2d:44:c2:dd:50:e9:29:a1:e0:
         29:91:5f:4b:1f:86:60:97:78:2b:d4:38:c9:0b:80:fc:89:25:
         7f:11:98:58:b5:5c:ef:95:21:ed:4e:10:9f:cd:5f:eb:8f:45:
         b2:a8:03:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 04:30:24 2026 by rpki-client