Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          HRp+nb3G1ztWUS9bU4jRpKSdmBaugDrHcAaE6LcnWaM=
Subject key identifier:   2B:83:2B:FF:74:90:84:C2:66:30:DF:B6:30:BF:B7:32:36:93:34:59
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019EC412D75C58B61F99DAF11C08F720BC31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          15AB
Signing time:             Sun 14 Jun 2026 03:00:29 +0000
Manifest this update:     Sun 14 Jun 2026 03:00:29 +0000
Manifest next update:     Mon 15 Jun 2026 03:00:29 +0000
Files and hashes:         1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: JP6T97dAHnMI9JUhsyvTfY3/yCe8JAc/FbSpCQiEDc4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c4:12:d7:5c:58:b6:1f:99:da:f1:1c:08:f7:20:bc:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Jun 14 03:00:29 2026 GMT
            Not After : Jun 15 03:00:29 2026 GMT
        Subject: CN=2b832bff749084c26630dfb630bfb73236933459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:c0:5a:d2:ff:68:d1:27:df:e6:ba:ef:fb:
                    26:b5:d0:cb:33:2c:ba:f4:89:e4:de:22:b4:cf:d5:
                    cd:9e:15:ad:e5:a1:02:5e:7f:6e:f7:30:3a:2f:53:
                    c8:36:1b:ab:78:15:ad:73:ac:bd:94:d7:42:d1:7a:
                    86:0f:35:b2:49:cd:0c:fd:75:b4:51:fc:de:6a:b7:
                    89:25:e6:50:f6:4e:24:0c:5a:dc:6d:05:a8:82:8d:
                    de:c0:9f:3b:c7:a7:b4:a6:89:c8:f1:43:e2:16:d3:
                    e7:cb:3e:5b:e0:de:52:2d:56:c6:5e:f3:1a:f5:7a:
                    29:79:ac:22:dd:c1:d5:40:05:35:5d:30:bf:82:77:
                    51:ef:a3:e6:7c:6b:38:29:75:6d:d6:ec:0d:92:6b:
                    02:c5:99:b6:f9:46:5a:eb:6b:f1:97:bf:1b:0f:5d:
                    67:63:e9:bd:f0:2c:6d:f9:7e:5d:86:89:68:68:5b:
                    1e:be:e3:62:4f:25:ab:c7:21:e4:e5:ee:d6:02:cb:
                    81:f7:b1:f5:c4:0a:13:63:38:3f:eb:fd:9b:db:b7:
                    06:78:3a:35:8f:08:86:40:00:67:8e:26:c1:3c:c3:
                    a7:45:b7:85:2a:42:07:e4:c2:e7:a8:92:c7:f1:d5:
                    8e:2e:3b:8f:28:41:06:a3:a6:a6:49:b7:b5:fb:58:
                    4e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:83:2B:FF:74:90:84:C2:66:30:DF:B6:30:BF:B7:32:36:93:34:59
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:e4:da:d2:0b:90:0f:61:98:32:56:99:fa:63:99:84:44:eb:
         76:d6:89:1e:28:2c:3b:ed:a4:1a:38:ee:b8:ee:54:28:85:6b:
         7b:78:75:da:65:f0:77:10:15:73:71:e4:8f:a1:6e:c7:c7:57:
         9b:62:85:03:88:b6:98:3d:bf:a5:8c:cc:6e:7b:43:20:9e:7b:
         1c:64:02:9f:db:a9:3c:d8:f9:f4:bc:09:a0:85:ee:d9:8b:85:
         3e:6a:0c:39:25:eb:8e:ce:fd:2b:2b:fe:a7:50:b3:d5:31:1b:
         f1:ff:79:b9:d7:b1:f1:da:80:a9:90:91:45:1c:6d:fd:aa:34:
         7e:ba:7c:59:80:94:9a:74:4a:1c:2b:fb:6a:4f:41:4b:6a:c1:
         9d:6e:63:5a:ad:39:df:50:67:0d:74:cf:8a:7b:32:c8:e7:4a:
         40:24:28:cf:2f:fb:24:7d:57:ae:f7:d0:73:97:54:61:71:8f:
         fb:39:c2:f8:bc:45:ee:09:1d:54:24:56:99:89:5c:34:63:c1:
         53:1d:33:a3:f5:d8:64:d4:85:78:d1:20:f6:b1:ce:28:44:f9:
         59:97:05:55:ee:4b:60:81:af:d0:7c:07:d1:61:18:ce:f5:15:
         6f:d2:52:f8:43:2c:7d:83:5e:c4:0f:c3:1a:e3:bf:9b:0d:7f:
         da:1e:d5:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:21:57 2026 by rpki-client