Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
File:                     VAPl-EBdYIW430v84d2bs-eMIZk.mft (raw, json)
Hash identifier:          yr80ZpTeNsmG72Q/5wSfJZ+CyGVw1dR64xs6qq1G4ns=
Subject key identifier:   93:E3:A8:DE:37:16:F1:0D:F2:5F:CA:A0:76:10:DD:DF:DB:0F:BC:6A
Authority key identifier: 54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99
Certificate issuer:       /CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
Certificate serial:       019EC3DC3C646087BB94BB262DC34CB5AEAF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
Manifest number:          1964
Signing time:             Sun 14 Jun 2026 02:00:50 +0000
Manifest this update:     Sun 14 Jun 2026 02:00:50 +0000
Manifest next update:     Mon 15 Jun 2026 02:00:50 +0000
Files and hashes:         1: 2p_MSB5aNHumaKfYN1tMK3QplXs.roa (hash: UN2v4qeX/yLlS8F+HWJDtro6RjRbrWRJJSxi6nWaH2s=)
                          2: BF-nL4uG2sSiQtOPU2cS1CI2KIs.roa (hash: xmeFaZONF0d3logp8Ko7Dq9BIdCJ2HzNVPvTRTT54tA=)
                          3: VAPl-EBdYIW430v84d2bs-eMIZk.crl (hash: 3fg7hgL2o+uj7KE4ABhzrKA5eYsYNhwX18Ozi7/Sjug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 15 Jun 2026 02:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:dc:3c:64:60:87:bb:94:bb:26:2d:c3:4c:b5:ae:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5403e5f8405d6085b8df4bfce1dd9bb3e78c2199
        Validity
            Not Before: Jun 14 02:00:50 2026 GMT
            Not After : Jun 15 02:00:50 2026 GMT
        Subject: CN=93e3a8de3716f10df25fcaa07610dddfdb0fbc6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:5f:70:a6:60:8e:3e:e4:60:b2:a5:0a:67:e0:
                    75:d7:b2:ba:54:3a:8d:c5:4a:3c:fb:f0:ff:93:f8:
                    f3:41:d1:f8:84:c6:bf:25:1c:39:41:e0:e3:bf:f3:
                    cc:27:d5:82:de:16:d5:2c:f4:29:61:2c:07:b0:b0:
                    ff:52:ed:b5:e8:ff:b1:19:3d:cf:4a:0f:91:2c:a5:
                    90:6b:48:f9:a9:2f:c1:2e:c7:25:90:f3:06:39:cb:
                    3a:5a:10:04:85:fd:25:ba:bb:33:73:92:32:cd:53:
                    56:06:03:c4:75:f7:9f:86:27:c1:c2:18:a0:30:80:
                    9e:7e:e7:51:69:26:db:30:2b:9d:76:26:e9:87:22:
                    d2:58:3c:d1:0b:c1:b8:3e:14:0d:a4:5c:5d:ac:65:
                    e3:6d:77:df:e5:9a:90:5c:76:31:f4:3c:37:4a:6d:
                    37:fc:55:de:4f:e0:82:5e:62:3b:91:82:03:3f:17:
                    86:77:ea:b8:64:04:3f:2a:12:5b:04:b1:6e:63:02:
                    d1:ef:29:86:c2:a7:e2:43:59:be:43:72:5b:f7:7a:
                    03:e9:bc:89:93:95:ad:7e:8c:68:36:a1:fa:0d:ae:
                    87:0a:2c:fd:28:9b:0d:e8:9b:f3:28:45:9e:0c:a3:
                    67:8a:7b:09:e1:f7:ab:9f:07:b9:d4:cb:17:cd:f0:
                    d3:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:E3:A8:DE:37:16:F1:0D:F2:5F:CA:A0:76:10:DD:DF:DB:0F:BC:6A
            X509v3 Authority Key Identifier:
                keyid:54:03:E5:F8:40:5D:60:85:B8:DF:4B:FC:E1:DD:9B:B3:E7:8C:21:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAPl-EBdYIW430v84d2bs-eMIZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/67/aee8d9-21ed-4db7-bd70-15a42ac9efa8/1/VAPl-EBdYIW430v84d2bs-eMIZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:09:f8:18:b2:97:f8:4e:65:4c:ce:fb:e7:82:eb:a1:6e:79:
         60:1b:b0:7b:ca:64:88:27:ed:e9:e3:75:eb:18:82:97:68:c0:
         d8:d0:bc:c1:97:7c:d7:c3:1c:f8:9b:17:52:2a:84:8c:58:78:
         80:ef:dd:47:9a:ef:12:69:e9:ae:14:83:20:a3:d0:b9:b6:28:
         77:23:e6:26:75:9b:61:f0:8e:43:ff:a4:4a:47:f4:3a:e2:ae:
         6e:b4:36:4a:e7:e0:46:68:38:90:2c:97:78:6a:79:a8:78:bf:
         29:f1:b7:db:c3:38:12:1a:3e:c0:78:a9:f6:44:b9:21:7c:f7:
         ce:c6:5f:f2:81:bc:81:d1:f2:4b:2f:bb:03:31:2c:ce:33:16:
         db:38:7c:ae:ba:b9:70:62:36:24:2c:c5:48:6b:4a:80:06:5b:
         57:90:ce:57:c8:ef:fa:ca:99:7f:a7:ab:91:0c:57:16:8f:00:
         ad:ca:7f:06:8b:89:5c:ef:e7:7b:20:79:54:3e:ec:4b:5f:c2:
         ee:7c:0a:a5:ca:58:da:f7:d4:53:b6:d4:00:c2:05:1c:fc:c5:
         39:a1:04:af:d2:98:f7:88:cc:50:99:1b:af:e0:aa:55:e9:d2:
         25:dd:91:58:d6:86:21:eb:f4:a6:80:1b:f7:39:70:fb:d1:e6:
         92:90:72:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:26:00 2026 by rpki-client