Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
File:                     vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft (raw, json)
Hash identifier:          xtYT8YpAS1HkI1q/qRrIGuEYIeiuIGVtzgFLpOA0Qh8=
Subject key identifier:   50:7B:09:6E:46:3F:EE:6D:41:E2:DD:75:8E:6A:89:C5:BA:3F:53:33
Authority key identifier: BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9
Certificate issuer:       /CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
Certificate serial:       01A0028214DD7D065C8CE34E82AAAB85384E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
Manifest number:          2B
Signing time:             Fri 14 Aug 2026 23:01:14 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:14 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:14 +0000
Files and hashes:         1: 1--vzy1e-ka0R2VffB1Cs0T0nvBI.roa (hash: BXk8ninGeDuuF8CYBQR72p10jh3CVqnPWA05JGML8xw=)
                          2: vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl (hash: kvTzi4WKr0j7l9IPpPajSIe485Cuul+setPWUeNJtAY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:82:14:dd:7d:06:5c:8c:e3:4e:82:aa:ab:85:38:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf07fa84498913cd0af247b98fc2e4daf147f7e9
        Validity
            Not Before: Aug 14 23:01:14 2026 GMT
            Not After : Aug 15 23:01:14 2026 GMT
        Subject: CN=507b096e463fee6d41e2dd758e6a89c5ba3f5333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:37:b4:4a:7b:62:b3:63:b9:93:c0:31:80:fd:
                    f6:00:6c:25:4f:a9:7d:79:89:dc:53:ac:6f:a1:6f:
                    55:bd:f8:71:f9:ff:cf:8f:e1:9b:1c:3f:60:d7:cd:
                    5b:85:3a:28:b1:64:79:6b:a5:55:c6:82:58:29:62:
                    7f:39:24:2f:6c:b3:d9:b1:27:97:ef:f4:ed:3c:48:
                    55:07:ac:d9:f3:6c:cc:6f:c2:91:ef:2d:f9:8e:56:
                    f9:69:08:87:37:bb:4f:7f:76:c3:95:a9:d1:01:27:
                    91:50:a5:77:92:bd:f3:da:c3:85:40:51:64:46:ee:
                    c3:80:7f:7a:0c:6e:73:2b:7a:54:90:15:ef:8f:5f:
                    0b:44:0e:3a:f6:8d:32:93:2a:be:74:a3:84:3e:e2:
                    90:fd:58:58:e4:9d:bd:07:63:d2:95:e6:7b:2a:e1:
                    59:ab:b6:de:14:bf:75:91:46:b3:96:44:8e:c0:5a:
                    f4:7d:b3:87:cb:5d:38:89:93:07:44:01:00:68:36:
                    2f:74:c8:fb:dd:79:7a:a1:4f:ce:7d:aa:7f:54:84:
                    f7:89:03:49:da:de:6f:ca:b0:a0:80:3b:b9:9b:d3:
                    f8:9d:59:fc:e7:e9:19:b7:74:e5:ca:3b:44:bb:f1:
                    83:c4:2d:1e:e2:8f:57:1f:3f:27:41:fe:d0:52:66:
                    67:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:7B:09:6E:46:3F:EE:6D:41:E2:DD:75:8E:6A:89:C5:BA:3F:53:33
            X509v3 Authority Key Identifier:
                keyid:BF:07:FA:84:49:89:13:CD:0A:F2:47:B9:8F:C2:E4:DA:F1:47:F7:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vwf6hEmJE80K8ke5j8Lk2vFH9-k.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/96/2c8ba9-d803-475b-91d5-c7a871d2dfa2/1/vwf6hEmJE80K8ke5j8Lk2vFH9-k.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:2d:52:4c:bc:f6:29:72:20:a4:c9:53:0a:e5:fe:9b:a7:c0:
         34:e9:de:2f:32:34:21:8c:62:d2:58:88:20:25:75:8e:b7:d3:
         66:00:58:a8:47:71:22:46:de:b4:d7:e1:f4:7c:e5:ec:a5:77:
         77:77:2c:96:3f:76:7f:b0:0d:23:6b:38:cc:bf:cd:f0:d1:15:
         31:3a:20:a1:08:e7:d7:df:0a:87:3f:dc:76:08:7b:48:e5:db:
         f8:49:56:47:7f:27:43:03:ba:6f:45:e1:04:af:41:b4:a7:9d:
         02:35:7b:c7:2a:08:5e:ad:17:d1:4c:25:e2:52:60:59:12:4d:
         56:23:0d:5d:29:c9:53:65:07:0d:0d:b9:58:d0:08:b3:1a:1f:
         f9:46:97:5f:61:a2:e1:a6:64:4e:a5:9f:eb:21:5d:49:5d:e9:
         29:4e:8f:05:1b:f9:f5:83:54:a1:4f:48:d4:96:36:27:fd:62:
         23:6a:58:e4:5d:10:b8:6d:55:fe:4b:8b:f9:19:f3:f3:0f:39:
         ea:c6:03:65:f8:fb:e9:37:eb:20:cc:e0:1d:4c:62:69:dd:3c:
         dc:0a:b7:32:7f:b0:ba:94:af:a8:63:df:a6:36:e2:0f:1f:af:
         08:08:4d:ee:8d:71:68:d9:f3:97:9e:82:48:f9:3e:7f:92:5b:
         4c:70:19:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:11:29 2026 by rpki-client