Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File:                     1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier:          h4dEL+7htW7QqOenG5sJ17ZR67/PeVwrCBSVo6qnew8=
Subject key identifier:   6C:C5:32:25:10:A9:37:F2:59:42:FD:00:B5:E0:5E:C1:29:CA:96:82
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer:       /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial:       01A00093E5D9785A01E1F17ED46B5E525468
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number:          1544
Signing time:             Fri 14 Aug 2026 14:01:27 +0000
Manifest this update:     Fri 14 Aug 2026 14:01:27 +0000
Manifest next update:     Sat 15 Aug 2026 14:01:27 +0000
Files and hashes:         1: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: 6xSWkFGtGZcHi3TB0Qn3G7Y1fQ3lIM4yA2tQnqj1AcE=)
                          2: TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa (hash: V0MpIpfQqolsEoLYmXod5/+AyCdlRH/FtrIJe/Y/B+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 14:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:00:93:e5:d9:78:5a:01:e1:f1:7e:d4:6b:5e:52:54:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
        Validity
            Not Before: Aug 14 14:01:27 2026 GMT
            Not After : Aug 15 14:01:27 2026 GMT
        Subject: CN=6cc5322510a937f25942fd00b5e05ec129ca9682
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:50:54:85:c9:3e:59:3e:c3:5f:c0:e6:d2:d3:
                    b8:92:a5:01:ca:8d:92:d7:77:ec:5c:02:b0:4a:40:
                    cb:78:82:e6:ef:5d:40:0d:53:67:af:ac:76:d1:11:
                    26:ea:7f:5c:07:d7:a7:49:f2:99:8d:8f:fc:a2:65:
                    cd:cd:5c:f8:30:91:05:cc:9c:b8:d9:76:2e:f4:b1:
                    1e:ab:85:d1:eb:de:fc:a7:da:be:53:57:35:d8:a1:
                    16:c0:56:f7:41:c4:55:fa:8e:3e:76:8f:89:55:16:
                    4a:21:63:ab:b6:99:27:96:8c:6b:ea:6a:90:8f:7d:
                    43:b1:39:84:8d:6a:80:c3:b2:7b:e6:40:ad:4c:e6:
                    df:f9:09:59:9b:67:e7:cf:cb:7f:87:e5:d1:dd:fd:
                    ca:bb:54:38:5b:22:78:91:45:cb:c2:20:05:75:34:
                    36:22:b7:c0:cd:bc:59:d1:36:66:52:f2:e7:eb:df:
                    57:50:b1:91:c7:6f:d8:16:54:84:66:57:5f:3d:7b:
                    d6:bc:69:fd:ad:2b:b7:74:ca:c4:f7:e9:e2:fb:90:
                    a9:da:10:51:c6:4d:48:43:b6:f6:db:a8:d5:f6:6e:
                    04:0f:2a:29:64:1b:9a:96:bf:9a:6a:4c:fc:ab:c1:
                    b6:a8:fc:1b:dc:07:0b:53:43:5d:f0:63:22:ed:8a:
                    c8:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C5:32:25:10:A9:37:F2:59:42:FD:00:B5:E0:5E:C1:29:CA:96:82
            X509v3 Authority Key Identifier:
                keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:31:f9:9e:31:93:d0:46:b3:6f:cb:0a:47:6d:0f:b0:29:b7:
         4c:0f:9a:17:0b:92:af:2e:44:19:51:5a:c2:e2:0c:21:97:d2:
         93:ad:b2:1d:9a:52:49:02:8d:84:7b:db:c0:a8:60:ec:8d:36:
         34:37:e2:9b:ae:63:5d:74:dd:5b:3e:34:09:c8:14:8d:de:8a:
         0b:69:36:2b:31:b3:9e:73:28:ab:ee:8c:6e:88:5f:d7:29:02:
         1d:f3:df:08:34:bb:39:82:6f:a7:af:56:d3:c9:df:09:c4:e0:
         9d:fe:5f:32:c2:03:f3:31:07:36:e9:64:96:2f:c5:56:bd:66:
         ac:97:ea:e4:23:83:57:c6:25:71:c4:56:d0:d5:f9:f2:03:8f:
         80:ef:05:42:d5:dd:44:70:cf:9f:6d:f4:8f:fb:cd:2d:88:3d:
         a4:f6:92:2f:41:73:e7:5c:68:91:f3:88:8d:48:ce:6f:e9:fe:
         57:3c:d0:eb:c7:29:d0:03:6b:87:d3:b6:1a:e2:6e:0b:96:ca:
         fd:e2:2f:2b:7e:26:25:e2:42:19:e6:d8:1a:24:91:bf:a9:fa:
         66:29:c7:75:c7:2d:0f:7e:48:e4:73:d0:c5:2d:f1:78:b1:d0:
         0a:5b:9b:d0:0a:a7:13:bf:37:db:bf:05:1a:0c:e3:ea:89:a2:
         66:38:d5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 14 23:28:30 2026 by rpki-client