Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
File:                     VChf_ulzEsUcOoBf-TQOvsM1JyA.mft (raw, json)
Hash identifier:          S6emZG85RVHb2OsEZu/OAAETec666Z2iaPaFpbr2xVM=
Subject key identifier:   4C:6E:C9:16:55:E9:07:B4:A6:C8:8B:92:DE:86:F7:13:78:FF:3A:08
Authority key identifier: 54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20
Certificate issuer:       /CN=54285ffee97312c51c3a805ff9340ebec3352720
Certificate serial:       01A13A495229BF6F7E51EBDCC765BA6D0C07
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
Manifest number:          1AA3
Signing time:             Wed 14 Oct 2026 12:00:46 +0000
Manifest this update:     Wed 14 Oct 2026 12:00:46 +0000
Manifest next update:     Thu 15 Oct 2026 12:00:46 +0000
Files and hashes:         1: VChf_ulzEsUcOoBf-TQOvsM1JyA.crl (hash: ZtNg3fwobupxCxPLxIp/A2H19nQzYhi3e0nm9ndzvCw=)
                          2: quaERpVai1sNprczU8FisK5Qlbw.roa (hash: 0uc7UZicAoBceoPlFZS+k/jk7F3r3BjUwZ1eJiYDf4c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 15 Oct 2026 12:00:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:3a:49:52:29:bf:6f:7e:51:eb:dc:c7:65:ba:6d:0c:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54285ffee97312c51c3a805ff9340ebec3352720
        Validity
            Not Before: Oct 14 12:00:46 2026 GMT
            Not After : Oct 15 12:00:46 2026 GMT
        Subject: CN=4c6ec91655e907b4a6c88b92de86f71378ff3a08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:16:f5:3c:93:01:ac:4f:2a:2c:6d:b8:25:6d:
                    6d:ea:3b:76:70:38:65:33:b5:ce:c2:05:c7:a0:6f:
                    5c:e2:86:6e:c2:0f:ab:19:62:e2:88:03:96:bc:37:
                    4b:e3:bd:79:a9:15:5f:45:ed:f3:4e:69:4c:c1:fa:
                    9d:88:36:3b:97:87:fa:7f:3c:3b:39:11:41:f8:df:
                    0f:e1:fc:65:9c:e8:92:f4:b0:7e:36:a1:27:fc:43:
                    68:d4:5e:e6:4c:3e:04:40:24:2e:1c:3b:71:9f:78:
                    73:61:25:f3:a9:d3:9f:64:f0:d4:db:01:cc:80:e0:
                    32:ae:6f:63:82:bb:e5:e5:ed:f0:63:65:7b:03:6f:
                    b1:32:77:a1:cf:18:51:2c:42:d4:f2:33:55:c0:e4:
                    92:8b:99:40:dc:c0:f0:5c:6b:ad:80:a8:0f:f1:92:
                    7c:18:da:34:d2:6b:6c:93:cc:4a:04:0d:aa:67:bd:
                    5a:51:b4:83:de:1a:1b:2a:07:54:4b:2b:93:5e:68:
                    ab:6d:8a:88:c6:e8:c7:e9:68:e4:bb:ed:7a:03:da:
                    b2:8e:a1:2f:70:10:a8:41:e5:2d:c2:6f:b9:e7:d7:
                    ad:ec:18:e1:4e:49:e6:f6:58:23:c1:21:f5:d5:07:
                    43:15:ca:c5:a8:c4:0c:06:a1:bd:ef:90:7a:f3:93:
                    07:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:6E:C9:16:55:E9:07:B4:A6:C8:8B:92:DE:86:F7:13:78:FF:3A:08
            X509v3 Authority Key Identifier:
                keyid:54:28:5F:FE:E9:73:12:C5:1C:3A:80:5F:F9:34:0E:BE:C3:35:27:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VChf_ulzEsUcOoBf-TQOvsM1JyA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/22/31bcbd-ee65-4f97-9a22-8a7e63e8cd75/1/VChf_ulzEsUcOoBf-TQOvsM1JyA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:29:73:63:70:8c:8c:c7:0d:0a:c6:2a:d8:d3:67:11:7f:33:
         bf:36:6c:3c:dd:c1:d2:fa:16:52:0b:55:9c:76:24:e2:0b:80:
         c6:52:e2:20:a8:6d:0b:33:a7:c0:4e:74:2c:1f:87:2f:45:19:
         6f:01:51:66:61:8f:e0:71:51:04:ca:14:f5:11:ab:81:39:fd:
         62:0f:c3:f4:4a:93:0f:df:ae:89:79:95:03:d0:c5:d0:4c:f2:
         8e:db:93:d2:d8:5f:eb:c9:9a:78:38:42:16:0e:35:b5:bb:03:
         b0:f7:14:76:03:c6:75:f8:ab:35:24:b6:10:76:34:02:e5:60:
         b8:96:26:2b:44:4c:4e:b0:16:0e:5b:d1:f4:38:c6:93:5d:07:
         fe:dc:a0:9c:ad:51:e9:97:b5:e1:2c:90:de:f2:5c:a0:98:0e:
         5c:db:62:20:fd:e7:19:0a:8b:4e:15:a4:50:2e:4e:e7:08:10:
         18:3d:a8:b4:d8:9b:5f:76:35:6e:1d:37:64:77:0b:45:f5:b0:
         33:94:7a:99:58:39:c9:d6:52:e6:21:12:44:ab:0b:09:6a:5d:
         e4:fd:61:13:8f:48:af:52:cb:79:da:01:c1:2d:26:c7:dd:38:
         33:e4:f7:db:f9:5e:88:e9:e9:f6:0f:f7:61:dc:e5:ba:50:c1:
         2f:ed:b1:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 17:47:59 2026 by rpki-client