Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
File:                     VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft (raw, json)
Hash identifier:          TINfo0k5/JM8VAYt32F/vnl/a4G578nSffISzE9BKBs=
Subject key identifier:   43:1C:27:77:5A:84:63:EC:0C:8C:21:97:5E:52:F1:8B:E7:B6:A6:9A
Authority key identifier: 55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
Certificate issuer:       /CN=55167557894686ee0c8727b961cc4b9230005f38
Certificate serial:       01A0035E9E23C0E8AB39C09CD0496B98942B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
Manifest number:          7B
Signing time:             Sat 15 Aug 2026 03:02:07 +0000
Manifest this update:     Sat 15 Aug 2026 03:02:07 +0000
Manifest next update:     Sun 16 Aug 2026 03:02:07 +0000
Files and hashes:         1: VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl (hash: lSR+2mF3KSIgiDgGMYwrpBuoaaGNci2eImldOg+lYxY=)
                          2: qjU3-mg-6plX7NPtZmDw0teXaog.roa (hash: yHPCb3W11kzbNlMZG3Tad2k2N/aaDEDcgs/PQrk8prM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Aug 2026 02:46:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:03:5e:9e:23:c0:e8:ab:39:c0:9c:d0:49:6b:98:94:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55167557894686ee0c8727b961cc4b9230005f38
        Validity
            Not Before: Aug 15 03:02:07 2026 GMT
            Not After : Aug 16 03:02:07 2026 GMT
        Subject: CN=431c27775a8463ec0c8c21975e52f18be7b6a69a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:77:fc:f1:34:fb:71:21:ed:15:d5:e7:d7:f0:
                    b2:c2:af:a0:e8:f4:9c:37:b5:e9:4a:5e:e7:3a:41:
                    68:9f:65:0b:1e:88:cf:1b:00:dd:b9:c4:c6:91:96:
                    bb:0b:34:5a:df:36:a6:4a:f6:40:77:fa:a3:89:4d:
                    44:86:d9:60:dd:f1:a0:29:5a:5d:ce:a9:16:25:f0:
                    15:ed:70:ff:cb:97:03:05:30:ff:4a:2e:a4:68:c2:
                    3e:29:2d:f5:0c:8e:ab:82:2a:ce:6e:70:2f:5e:62:
                    36:04:8e:5d:cc:0b:48:23:e1:8b:72:6b:7d:fa:aa:
                    e2:95:4b:96:85:2d:49:34:ce:2a:a3:12:88:b2:5f:
                    dd:7e:fa:52:c7:b6:e9:0b:b8:a9:a7:da:11:4c:60:
                    cb:6b:29:5c:a7:a0:c1:7c:6e:f9:17:9f:41:0b:d0:
                    9c:0c:e1:a3:f3:ed:2e:66:6d:66:54:be:bc:46:bb:
                    fb:6a:0b:59:36:96:21:eb:87:96:82:71:7d:a8:46:
                    e2:f5:ce:8d:94:db:a0:54:0b:a4:99:9d:f7:6d:c7:
                    bc:57:47:ab:91:5f:a1:a4:c4:ea:a3:e8:54:07:0e:
                    55:aa:5a:55:9a:a4:0f:e4:be:bf:62:c6:71:3a:5b:
                    a9:11:e9:dd:1f:48:f9:14:a2:6a:29:a8:fc:fb:68:
                    e8:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1C:27:77:5A:84:63:EC:0C:8C:21:97:5E:52:F1:8B:E7:B6:A6:9A
            X509v3 Authority Key Identifier:
                keyid:55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:9e:22:c8:c4:b7:b0:ac:d5:b8:e9:4b:30:28:8d:8e:5c:b1:
         4e:07:46:1b:cc:65:2d:e0:4e:70:d1:49:74:e8:f6:a9:70:8a:
         df:9b:b1:80:29:c4:8d:d7:bb:f3:d2:2c:0d:f3:c2:0f:21:90:
         73:b7:65:a6:01:58:50:eb:50:95:d9:d6:62:34:b9:f2:13:bc:
         6a:67:01:f0:fb:4b:1d:de:46:e9:b4:61:50:3a:98:77:8a:dc:
         3e:46:77:d8:55:8d:28:25:60:32:49:ef:9f:9b:e0:07:e4:9c:
         77:3d:2a:de:41:b5:b3:c2:5b:97:f9:fc:76:60:11:0c:87:35:
         32:24:8d:f9:ab:49:20:ca:ed:f0:f0:f1:1f:08:1b:c1:8e:ac:
         a8:dd:14:ae:a7:d7:e9:43:d9:89:02:c6:55:e2:b7:ee:49:70:
         38:8e:fb:d4:8e:59:cd:f1:8a:d6:df:dc:1e:43:8c:05:63:8f:
         27:7b:18:32:1f:c6:46:7d:fb:4d:dc:c0:91:f6:13:4e:b5:91:
         3d:1b:ca:de:3b:d0:f9:9d:ea:56:ac:43:dc:11:8b:88:34:06:
         88:97:75:64:6a:ff:9c:88:78:73:7a:59:0a:c3:d8:f2:cd:86:
         39:d8:3d:f8:8a:5a:e9:84:40:28:f3:c8:7b:03:78:84:6a:c6:
         39:9c:0e:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 06:12:00 2026 by rpki-client