Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          oz1gytIv6SCPNhXccNak0Ty7qKebAaQIFScUNS3vMc4=
Subject key identifier:   20:8A:C4:66:67:CF:5A:6A:96:B8:FF:37:B9:16:70:95:91:B0:B6:7B
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       019EC2C91E54995D25CC6177AFDBF7295352
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          195B
Signing time:             Sat 13 Jun 2026 21:00:20 +0000
Manifest this update:     Sat 13 Jun 2026 21:00:20 +0000
Manifest next update:     Sun 14 Jun 2026 21:00:20 +0000
Files and hashes:         1: 1-VM5a5VKVQLBO_mS5M0AKzrssE0.roa (hash: IZ1q5GIjELLZgJlLEGzKrti0blpYjCurNkMWnWHLthU=)
                          2: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: AitdCx+A9TJ2B1EqakSPdTVRTaVrTH3FfPykN5UZIGw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c2:c9:1e:54:99:5d:25:cc:61:77:af:db:f7:29:53:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: Jun 13 21:00:20 2026 GMT
            Not After : Jun 14 21:00:20 2026 GMT
        Subject: CN=208ac46667cf5a6a96b8ff37b916709591b0b67b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:fc:7c:3e:0f:c5:3b:8c:11:c4:88:27:f1:cc:
                    d9:da:9f:6a:02:c9:73:8f:06:7b:00:d8:ff:bc:f7:
                    bb:17:44:0f:15:c9:ca:db:70:82:50:1f:91:9a:54:
                    84:d1:54:de:97:29:c7:82:1b:b9:fe:b3:4b:5b:4d:
                    c2:5c:80:f1:d2:d8:ee:3c:c5:50:25:d8:92:c7:b2:
                    9b:6a:b7:f2:f3:01:08:da:c3:fe:ad:4d:bf:22:b9:
                    f3:95:19:1c:27:f5:b2:ad:04:6e:13:41:30:9f:07:
                    ab:51:a8:42:f6:60:1b:ec:a7:7e:89:57:cd:74:36:
                    7d:01:b1:ac:0e:33:dd:f9:43:a2:a1:ad:37:75:e0:
                    8c:55:67:2e:f1:d8:62:9b:ed:bd:e6:c2:4b:f4:c4:
                    04:93:09:75:fc:be:0f:36:6d:4d:e6:50:7d:d1:47:
                    8e:d1:b3:e1:3f:1f:e0:d8:20:4a:25:17:27:d5:3e:
                    0b:67:fd:10:b6:d4:e5:97:69:04:b0:ee:9d:df:fe:
                    ad:5f:ae:4b:15:cb:1b:46:85:6e:b6:7a:a6:d6:53:
                    b7:6f:88:27:88:52:32:60:cf:36:d9:4e:2f:88:34:
                    20:99:63:00:f0:0c:16:64:3d:48:d6:ea:a4:ed:6d:
                    e9:93:7c:18:e5:de:07:ae:ca:2d:b9:45:2f:76:e0:
                    45:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:8A:C4:66:67:CF:5A:6A:96:B8:FF:37:B9:16:70:95:91:B0:B6:7B
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:ea:b6:1d:46:7d:62:0a:c8:11:42:01:f1:f0:9d:ab:26:
         cb:e8:17:ff:f8:5e:41:63:87:bc:f1:25:b6:ea:c0:13:fa:1d:
         9f:6e:ff:75:01:05:fe:91:76:f2:d9:f9:95:1f:e6:92:7f:fe:
         d9:97:57:91:0e:c8:1b:46:34:df:e8:21:4c:7e:b6:2a:75:db:
         2a:09:af:02:06:a6:ac:6c:47:7e:80:57:71:f0:2b:62:a3:9b:
         ba:f8:3f:7c:bc:16:08:9f:93:11:56:97:bd:97:fb:dd:69:0e:
         21:a9:a7:02:2f:07:3c:14:44:5c:ee:71:47:08:21:18:5f:02:
         88:07:23:e0:52:ac:94:e9:72:62:36:5d:67:1c:50:d7:90:53:
         8e:71:f1:78:83:b6:5b:ad:b6:a5:c8:8d:39:3c:c9:73:29:bb:
         93:f2:bd:a5:8b:28:02:40:3b:22:ca:91:7c:7c:b8:65:d4:53:
         19:99:e3:f1:9c:6b:2a:3b:d3:84:32:ba:70:e3:8e:d6:e5:8e:
         98:1f:e7:cb:c9:ca:b7:8a:72:25:0c:77:98:6a:2b:b1:b3:d1:
         c3:31:3a:ad:7d:6a:ad:18:e0:15:9a:f5:7f:85:52:13:e1:d0:
         12:be:6a:51:d8:b2:3d:8d:27:06:75:0c:63:61:99:00:9e:f4:
         f2:a4:8e:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:38:17 2026 by rpki-client