Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
File:                     hVan-anfCAeBbIQtoWeJ1d28g1U.mft (raw, json)
Hash identifier:          epXc4mVY1f0BKMiirPa0hYCT/VzRefLxbXStiyXkxfE=
Subject key identifier:   3C:2F:A8:7F:62:DA:A1:F1:AA:76:0B:81:53:D8:FB:D5:6A:0E:2D:04
Authority key identifier: 85:56:A7:F9:A9:DF:08:07:81:6C:84:2D:A1:67:89:D5:DD:BC:83:55
Certificate issuer:       /CN=8556a7f9a9df0807816c842da16789d5ddbc8355
Certificate serial:       01A06F843C961D9520A806A8CBE108B0283D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
Manifest number:          B3
Signing time:             Sat 05 Sep 2026 03:02:12 +0000
Manifest this update:     Sat 05 Sep 2026 03:02:12 +0000
Manifest next update:     Sun 06 Sep 2026 03:02:12 +0000
Files and hashes:         1: hVan-anfCAeBbIQtoWeJ1d28g1U.crl (hash: 8uQE9DzEw999V2mrWH9PNv4K5GEfc3OUiFXpBJZJbdc=)
                          2: ryjc2rw6_c8wKxTaH4dTfMsIflg.roa (hash: hlu7n01esDPMySYwsP8341m6f4R4t9WEUfR5CWyefQs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Sep 2026 01:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:6f:84:3c:96:1d:95:20:a8:06:a8:cb:e1:08:b0:28:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8556a7f9a9df0807816c842da16789d5ddbc8355
        Validity
            Not Before: Sep  5 03:02:12 2026 GMT
            Not After : Sep  6 03:02:12 2026 GMT
        Subject: CN=3c2fa87f62daa1f1aa760b8153d8fbd56a0e2d04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:93:ae:31:eb:f1:3d:ff:eb:3c:43:dd:e8:59:
                    48:1f:d0:d6:fa:89:cd:9d:e7:1b:6f:76:8a:97:54:
                    08:31:ed:21:70:ec:b2:58:ab:27:d0:aa:47:01:cf:
                    53:b4:d4:0f:24:f1:05:02:8e:20:d2:26:ef:03:b9:
                    b3:8a:3c:45:b6:88:c5:21:ca:bf:44:01:b9:66:7b:
                    05:d1:01:32:af:26:df:37:1f:46:75:fb:fd:1e:f9:
                    75:ec:f1:9d:24:3f:80:5b:a3:82:dd:42:2e:f9:65:
                    a5:29:b8:61:c3:49:ac:a2:3a:59:9f:63:95:6d:50:
                    13:9f:3c:e8:0e:3c:40:19:37:ab:fa:b2:98:2e:ac:
                    4b:a9:ef:08:b0:e3:54:ef:b6:6d:83:fc:8b:2a:84:
                    80:29:8c:76:7e:ff:86:1b:74:21:e7:97:a0:29:a2:
                    6b:72:a8:c7:cf:23:a0:36:83:58:90:88:4e:2d:7c:
                    99:61:86:a7:c1:34:34:84:3f:6e:2d:ed:66:79:e7:
                    c6:b7:89:7a:dd:b8:66:a9:2f:6f:e5:e0:3c:7c:f9:
                    34:86:c4:1b:6c:30:3a:a2:72:93:fb:34:34:6b:c2:
                    47:b1:ba:45:da:fc:a9:82:9f:03:9a:90:ae:b2:7f:
                    6a:e5:b1:a8:87:7b:56:9d:6d:de:ca:f2:7d:19:9b:
                    91:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:A8:7F:62:DA:A1:F1:AA:76:0B:81:53:D8:FB:D5:6A:0E:2D:04
            X509v3 Authority Key Identifier:
                keyid:85:56:A7:F9:A9:DF:08:07:81:6C:84:2D:A1:67:89:D5:DD:BC:83:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hVan-anfCAeBbIQtoWeJ1d28g1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/6ae58c-7618-41ba-a343-c46d7bac02fc/1/hVan-anfCAeBbIQtoWeJ1d28g1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:93:b8:3c:e8:c2:75:2c:bc:c9:5d:8c:e6:b9:a3:ca:67:a5:
         f1:d3:84:09:85:08:26:c1:78:e5:1d:b9:15:00:e0:9d:ab:3f:
         ce:0b:5b:62:ef:5c:a1:5c:a5:f8:6d:01:b7:54:9a:3d:73:8d:
         37:31:d0:ce:47:18:a4:dc:53:99:84:52:8b:2c:ce:9d:ac:1b:
         37:fd:6e:8a:be:9e:d4:e4:18:02:a7:31:06:1e:01:4b:72:37:
         42:4c:9e:11:8d:67:6e:1c:6b:a4:af:e8:6f:77:f6:34:6e:04:
         0b:15:ba:f8:f7:a0:5f:1c:fd:39:a8:c9:20:1d:1a:88:1b:05:
         a4:66:c9:9c:f0:f6:b1:89:3b:4d:3e:f5:ea:8e:89:4e:52:b5:
         2d:a6:dc:b5:9a:f6:3e:9c:b9:ba:06:f0:67:69:b0:a8:2a:0f:
         1b:f2:74:c2:38:a7:b5:46:94:0b:21:87:0e:17:b8:c9:1f:88:
         af:35:49:d1:a7:8e:0e:4c:aa:05:09:7e:7e:d1:ad:8b:9d:ad:
         f0:f0:69:3e:7d:36:d8:ff:f2:dc:ae:22:b4:bd:84:e9:0f:50:
         e9:33:bb:3c:86:fc:23:03:74:6f:fd:5c:5a:69:76:e9:f6:d2:
         98:f5:4e:43:31:bc:38:35:81:fe:32:c1:e5:0c:a8:03:5e:f9:
         a5:a9:aa:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 08:54:00 2026 by rpki-client