Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File:                     VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier:          SGhEKTECECLD3+3SVTS1Ps0ib6I06ZwAxUCP2ivlqqE=
Subject key identifier:   5F:66:D2:BC:74:C6:52:F5:E4:32:EB:FC:52:DC:2C:3C:73:CB:73:12
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer:       /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial:       019F9EF220549A58CB35C94486B57CF4AE6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number:          15FC
Signing time:             Sun 26 Jul 2026 15:01:35 +0000
Manifest this update:     Sun 26 Jul 2026 15:01:35 +0000
Manifest next update:     Mon 27 Jul 2026 15:01:35 +0000
Files and hashes:         1: 9W5GOtFDpWBFLP39aI9-GYTv67w.roa (hash: Ly+0aJYut/pTQfmmUwMydFSUtJuswgS18u/UPXI+/4A=)
                          2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: WKQuRw/MzPn9TyqmmAU58IMm7GfPHwcVUpgmEs+j4po=)
                          3: vmidCd491rgHxm_kqaantMVtBCY.roa (hash: S7soOr3p/jzFrWPo7JyKIxI7COyYwQ/uXhA0aHPeUi4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 14:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:f2:20:54:9a:58:cb:35:c9:44:86:b5:7c:f4:ae:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
        Validity
            Not Before: Jul 26 15:01:35 2026 GMT
            Not After : Jul 27 15:01:35 2026 GMT
        Subject: CN=5f66d2bc74c652f5e432ebfc52dc2c3c73cb7312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:2e:5a:b9:69:ac:08:10:66:61:c5:bb:ec:ae:
                    f7:e0:8f:34:0d:18:00:76:ae:8b:5c:e1:ad:0b:54:
                    b8:c7:fe:ac:ce:95:49:bf:8b:50:c8:d3:80:dc:2f:
                    29:ce:cd:9a:6d:1b:64:83:a4:b5:72:88:d5:0f:d3:
                    69:b8:7b:e4:7d:db:65:7c:58:2d:b0:88:9e:fe:08:
                    fd:3f:23:07:ea:6b:9a:3f:c9:81:6f:25:13:dd:03:
                    c1:bc:50:0c:b4:e7:b4:b3:f8:db:23:b3:cf:78:27:
                    78:fb:06:9c:4f:65:dd:0e:f7:35:7e:07:5a:f1:4c:
                    a7:c6:d9:ce:4d:64:b8:c3:03:57:3d:a3:3c:dc:52:
                    e8:cb:42:8b:2f:f1:c9:af:ef:42:01:b3:9c:7e:80:
                    03:19:29:38:f5:22:5e:b6:5c:21:5b:67:39:dc:f6:
                    16:75:1c:d5:3d:d8:a7:60:47:45:51:44:e1:59:69:
                    27:40:c2:b1:69:b9:80:1b:43:ab:2e:45:b7:10:9e:
                    3f:4d:a5:a4:d8:64:bf:68:1d:66:4b:65:97:37:3f:
                    5d:4b:85:41:2e:89:a6:ab:fb:42:67:27:c7:e3:18:
                    2a:0c:7d:71:9f:40:19:7b:01:fd:dc:2e:cd:f9:72:
                    02:c8:a7:8a:66:21:c1:91:6b:a4:5e:c6:2c:51:97:
                    8f:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:66:D2:BC:74:C6:52:F5:E4:32:EB:FC:52:DC:2C:3C:73:CB:73:12
            X509v3 Authority Key Identifier:
                keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f1:1c:35:38:7c:2a:1e:57:db:96:f6:3d:94:58:00:4b:45:
         be:fa:fb:2f:b6:ea:eb:72:52:20:e0:74:01:de:cc:b3:e9:f7:
         fa:72:5b:9e:4f:bc:4c:51:9b:a1:d6:a8:e0:03:69:2c:35:e9:
         ae:60:0e:58:6a:9f:8a:2e:ad:e9:2f:cb:80:b5:66:b8:55:fc:
         90:2f:29:52:dc:5a:bf:3f:03:7e:69:be:ae:7b:a9:fd:51:cf:
         8b:85:02:0f:72:4c:58:46:a9:d0:ca:7a:94:ed:7d:c8:8b:fc:
         1b:91:10:5c:cf:2e:81:59:ed:e5:3c:f1:90:ef:f9:25:91:d9:
         17:42:42:dc:80:33:ad:e4:b5:f7:fb:67:ac:54:2d:85:df:f3:
         5e:6a:a1:a1:cd:a5:0c:ea:40:fe:1f:75:60:bb:ec:36:9e:69:
         f5:2f:ea:8b:c3:ac:d7:73:52:1e:d7:11:32:24:1f:5d:ec:a6:
         b6:3b:69:f8:aa:0b:a3:25:a1:10:f8:79:d7:2d:e4:00:19:16:
         df:0e:ef:73:94:91:e3:50:7a:d1:64:a8:1d:b5:99:44:8f:b0:
         78:57:8d:bc:8d:21:32:0b:81:15:f1:e7:9e:63:c7:c2:cb:fd:
         7d:eb:e6:95:1b:d7:ae:7c:ae:af:ef:88:b2:df:84:c2:fe:68:
         e5:d3:4d:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:16:39 2026 by rpki-client