Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File:                     VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier:          FeNHuB0U/k99AiCO+6aYHZNl+fTyPmM/M3Gl5UV/l1k=
Subject key identifier:   EE:54:F6:AC:38:A1:FB:1E:A8:76:AA:D6:6F:9E:07:73:EF:31:C5:27
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer:       /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial:       01A00281EA27DEFD1B9A07307B4518821392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number:          066A
Signing time:             Fri 14 Aug 2026 23:01:03 +0000
Manifest this update:     Fri 14 Aug 2026 23:01:03 +0000
Manifest next update:     Sat 15 Aug 2026 23:01:03 +0000
Files and hashes:         1: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: HqeSzPjVOwGJtz6CNKvn7ik+ToiXoFhxfyTML2fHwFU=)
                          2: ZHhc0L728ye9C_PaxE7QKIWysf0.roa (hash: IYrJXv7Z8+WyubB49OSinWGa68suJopradNDMs9g9yQ=)
                          3: mUqS4S5SL9Pvq3yISShuWCb9ZtE.roa (hash: uUcTOLjK+7qjGVmB7WyFwvHdMHjyRZf2FkbrhsEB5pY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 15 Aug 2026 18:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:02:81:ea:27:de:fd:1b:9a:07:30:7b:45:18:82:13:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
        Validity
            Not Before: Aug 14 23:01:03 2026 GMT
            Not After : Aug 15 23:01:03 2026 GMT
        Subject: CN=ee54f6ac38a1fb1ea876aad66f9e0773ef31c527
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:40:20:65:e5:6e:5e:a5:ad:f2:b2:01:bb:12:
                    b4:f3:69:c9:31:65:d3:50:40:31:03:51:ea:76:8e:
                    bb:f4:d0:26:42:0d:d4:d7:85:bf:dd:f2:7c:85:57:
                    18:b5:0a:2b:63:17:31:6b:ae:5b:2b:76:ba:55:a3:
                    d2:b0:c5:27:36:ea:34:33:a5:8b:ad:8e:4c:0f:f9:
                    6c:ae:f3:99:98:63:8b:5f:5d:4c:50:d3:7c:ea:6f:
                    93:3b:df:f3:d6:de:68:82:0b:9f:81:87:d1:07:8b:
                    49:9e:b0:93:9b:59:64:c5:79:6f:00:93:45:49:1f:
                    9f:67:03:13:a8:4f:b0:62:3e:47:9f:4d:05:e8:0c:
                    32:51:02:28:66:8f:eb:b7:0f:5d:0f:3b:97:33:e8:
                    5f:9d:cb:6a:49:e2:ba:6e:65:86:ca:bc:69:6b:62:
                    eb:3a:9e:d1:06:b0:3f:79:ab:05:9c:bc:fd:cd:25:
                    2e:e8:e2:a9:16:11:59:4f:6e:ea:09:1d:72:fc:df:
                    c6:43:22:57:3d:8d:71:c3:c4:7a:55:62:92:bd:f2:
                    38:3b:50:45:c1:02:ef:32:e3:6a:08:95:c0:bf:42:
                    ff:7b:b9:bb:9f:e7:f6:92:19:aa:b4:22:09:d6:ba:
                    72:59:72:a7:3c:0d:5f:7a:73:21:c6:cf:c2:dc:ea:
                    22:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:54:F6:AC:38:A1:FB:1E:A8:76:AA:D6:6F:9E:07:73:EF:31:C5:27
            X509v3 Authority Key Identifier:
                keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b0:e9:7e:37:54:10:99:a9:98:cc:24:1d:3b:70:cd:da:a8:
         30:a6:3f:32:ef:0d:3e:1f:0b:2d:24:01:ac:8b:2f:1a:86:7b:
         83:f8:af:88:51:0d:4e:a4:93:6d:d9:af:73:96:1e:da:8a:49:
         91:b3:5f:9e:dc:48:e2:af:fc:62:a7:56:cc:4f:88:da:3c:12:
         39:83:d2:30:83:3b:c5:55:57:be:0e:09:8c:9a:ea:99:13:19:
         57:f3:b6:7c:3d:7b:c6:1e:92:76:cb:db:4f:4e:fb:c7:1c:59:
         96:41:23:65:44:30:67:75:27:42:52:83:bd:c3:66:58:23:60:
         21:fe:6d:df:e2:09:06:ca:71:a4:3d:4b:83:13:42:00:0a:72:
         86:3f:3e:6c:96:89:49:d5:53:f6:f6:37:01:a8:24:7f:4c:e8:
         50:17:86:5e:3f:ce:c3:d7:cd:11:42:a1:2c:29:8f:cf:63:dd:
         38:5f:a1:01:33:1d:14:ec:e4:42:93:66:72:33:f3:3e:bb:1a:
         5d:7c:8e:86:68:2c:bf:43:44:a0:4d:41:95:89:39:4a:d2:e2:
         5c:62:29:36:7f:02:86:d2:5b:35:26:f8:a1:20:f9:6f:e5:9b:
         c2:10:7d:a7:ad:9e:c0:46:b7:4c:67:03:7f:ca:b3:a3:b1:4b:
         3e:35:ea:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 03:15:07 2026 by rpki-client