Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
File:                     VEBNpgLasGJb5yI9CTILHNeq_O0.mft (raw, json)
Hash identifier:          lT9uDunz8Aaly22ib0wu9IxYPKMozwzlckMUvpQeeAI=
Subject key identifier:   FC:D5:04:B7:23:A4:06:FB:C1:86:A7:37:6E:C3:81:F7:C8:95:2B:5C
Authority key identifier: 54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED
Certificate issuer:       /CN=54404da602dab0625be7223d09320b1cd7aafced
Certificate serial:       019FF759A20B5C3AC78E5F5DC5ED617B9ADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
Manifest number:          19FF
Signing time:             Wed 12 Aug 2026 19:01:14 +0000
Manifest this update:     Wed 12 Aug 2026 19:01:14 +0000
Manifest next update:     Thu 13 Aug 2026 19:01:14 +0000
Files and hashes:         1: FVd89nTPPD9IzdTMNGXkVd5Fz7M.roa (hash: o4fOKN67hOq3ekX5RPCUgwu3ftf0QCCHscRuqhwqtT0=)
                          2: VEBNpgLasGJb5yI9CTILHNeq_O0.crl (hash: l/j+pFLby9/UQgov5ZigFB8vdwNc2GUUPWfvl9YuapY=)
                          3: YogSL5izPYypDSpRN-bhm7FC-Zc.roa (hash: SYMSdL9jKWAhxjZJN7qyE8Onp0ESoc3LmqO5sBgdEyM=)
                          4: mt8AHoYLt3mvqgIfRZp4QwH3u1w.roa (hash: 7MjOgwhf1xPnvfegvDmAvTWCavPasFV1fKSbjNEHbXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:59:a2:0b:5c:3a:c7:8e:5f:5d:c5:ed:61:7b:9a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54404da602dab0625be7223d09320b1cd7aafced
        Validity
            Not Before: Aug 12 19:01:14 2026 GMT
            Not After : Aug 13 19:01:14 2026 GMT
        Subject: CN=fcd504b723a406fbc186a7376ec381f7c8952b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:96:92:00:04:5f:13:79:d4:20:b9:8e:e8:02:
                    66:f7:9d:2c:47:48:00:2f:8c:f5:7e:0e:cc:52:d3:
                    8f:b1:45:b1:47:19:6d:6f:c3:74:d9:12:1e:11:b1:
                    19:00:f6:ba:35:c6:a8:ae:a5:79:e0:fa:dd:63:e4:
                    9c:12:3d:76:ef:3e:3b:77:5c:9c:a0:b2:e3:2d:93:
                    32:d5:f1:fc:d4:f0:79:ae:5c:9f:52:9a:71:56:18:
                    21:6f:27:5d:ff:d9:64:27:ec:c4:50:7e:1c:21:c5:
                    77:ca:25:71:cc:42:b6:f7:5e:e5:5c:c1:30:f0:cb:
                    c9:b0:c3:71:86:f7:3c:ea:02:4a:5c:12:41:12:cd:
                    19:9d:08:69:57:34:38:82:ca:96:83:8f:a1:65:26:
                    a2:ec:18:5a:d9:66:15:56:85:8b:b5:78:91:08:c9:
                    9c:1b:f4:4c:a9:13:1f:ef:8d:2a:98:fd:5b:58:f7:
                    69:f7:3a:11:4b:be:f6:46:4e:24:32:91:be:56:19:
                    b1:cb:1b:37:10:ff:c0:b9:74:b5:44:ad:ca:2c:96:
                    b6:a4:ad:b2:07:07:f3:69:e2:82:e4:e9:35:43:d3:
                    16:29:8c:a5:8d:5c:21:92:0a:d5:df:70:8d:3e:d2:
                    35:5a:74:b3:97:06:6a:7f:60:11:a6:99:2d:84:bc:
                    d0:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:D5:04:B7:23:A4:06:FB:C1:86:A7:37:6E:C3:81:F7:C8:95:2B:5C
            X509v3 Authority Key Identifier:
                keyid:54:40:4D:A6:02:DA:B0:62:5B:E7:22:3D:09:32:0B:1C:D7:AA:FC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEBNpgLasGJb5yI9CTILHNeq_O0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/7d2cb5-bddf-4201-baf8-1b24484e55ec/1/VEBNpgLasGJb5yI9CTILHNeq_O0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a1:81:bb:0b:ba:55:85:a5:6f:91:89:c7:3e:65:51:3d:3b:
         c6:60:99:02:e8:14:6e:a2:3b:0a:d7:25:1a:be:91:f0:96:26:
         af:48:83:4d:c5:76:f9:f2:51:74:75:29:b9:cf:ec:ee:92:c6:
         7b:34:dc:9e:a7:cc:3d:dd:a5:de:8e:d3:6c:72:1d:24:dc:19:
         d8:84:69:1b:16:dd:69:6e:df:dc:6f:3d:41:df:3d:45:e7:2f:
         48:fb:7c:74:29:49:3b:d9:bc:91:0e:dc:54:72:06:93:7c:a2:
         e8:12:2d:e3:34:26:8b:6a:14:4d:2a:8f:e9:f0:dc:82:aa:95:
         2f:b5:b8:f6:5f:2d:2f:f2:61:fa:b7:77:a0:36:5e:b6:ca:89:
         5e:35:8f:44:8f:41:18:80:0e:65:61:d5:96:d4:12:42:cf:2a:
         57:34:71:31:89:65:0f:e3:02:27:de:02:b0:11:84:df:54:24:
         c6:4f:73:3f:f1:1c:04:7e:1c:ac:73:13:3e:f5:5c:46:f5:17:
         5a:50:fc:36:9f:9b:0c:14:7d:4d:23:ef:ec:ca:c7:63:df:7d:
         55:f2:c4:10:e7:69:52:07:d0:9e:b2:9e:38:24:48:92:a6:40:
         eb:f4:1e:db:c2:7f:86:33:13:7f:71:5c:cf:79:eb:79:5e:3b:
         8e:76:8c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:38:36 2026 by rpki-client