Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File:                     1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier:          VTPpklw75UKBJV01Te3bUN9pxmTkgyaDOlUkbAXAvxg=
Subject key identifier:   F1:8F:30:E8:04:E0:A2:8F:E3:03:64:C2:B7:F3:92:36:69:59:84:D7
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer:       /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial:       019EBFFF1A8756A244FFE6D2F1CF95434661
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number:          149E
Signing time:             Sat 13 Jun 2026 08:00:27 +0000
Manifest this update:     Sat 13 Jun 2026 08:00:27 +0000
Manifest next update:     Sun 14 Jun 2026 08:00:27 +0000
Files and hashes:         1: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: dhO1UCSxjQGmX5rwg5dQc572Mjdavnsg19u4Ol57CXU=)
                          2: TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa (hash: V0MpIpfQqolsEoLYmXod5/+AyCdlRH/FtrIJe/Y/B+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:00:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:ff:1a:87:56:a2:44:ff:e6:d2:f1:cf:95:43:46:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
        Validity
            Not Before: Jun 13 08:00:27 2026 GMT
            Not After : Jun 14 08:00:27 2026 GMT
        Subject: CN=f18f30e804e0a28fe30364c2b7f39236695984d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5c:cc:3e:13:7a:60:f6:26:2e:45:d1:cd:0e:
                    95:a6:64:41:58:27:b5:55:79:3a:ea:f5:5b:b5:ae:
                    64:58:12:f6:63:b4:63:71:df:69:d3:c5:ed:45:a5:
                    65:c2:7e:ba:35:fb:01:0d:7a:4f:82:5f:30:8d:97:
                    36:38:ef:de:6f:92:91:44:3c:1d:58:ab:b9:0e:a5:
                    94:4c:6c:94:c4:c2:4d:88:53:ca:e9:f2:58:72:a8:
                    30:26:52:8e:a7:88:2c:1f:5a:a8:b2:ba:75:0a:64:
                    46:c4:43:d7:24:be:e0:57:ec:c7:f3:a0:fd:73:39:
                    77:3e:e8:89:a8:1c:b1:1c:0e:a0:92:1f:18:c9:62:
                    5d:b5:e2:c3:c6:7a:93:19:af:08:d6:8b:f3:ed:e2:
                    6a:51:0e:ae:91:78:ad:06:a4:6a:b6:5b:e3:71:28:
                    40:e4:07:df:3a:ec:7c:b1:a0:6d:7b:35:0c:7e:6d:
                    c2:d7:dd:f4:06:bc:c1:a9:18:8e:29:d6:c2:00:52:
                    9f:94:02:ee:12:a0:35:33:4f:81:a4:9e:d1:c3:66:
                    79:d8:3f:07:87:35:a8:c0:95:12:40:8f:fc:97:06:
                    fd:16:55:21:43:19:ed:a8:36:68:d6:7b:b5:8d:7a:
                    70:9e:31:63:be:55:e4:79:b4:02:90:c7:d0:1e:fa:
                    e5:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:8F:30:E8:04:E0:A2:8F:E3:03:64:C2:B7:F3:92:36:69:59:84:D7
            X509v3 Authority Key Identifier:
                keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:16:1f:c3:c5:ea:e1:41:f6:cc:4c:fc:18:a0:97:14:19:
         a6:a7:2f:90:3e:44:56:7b:1c:cf:36:5b:1f:8e:82:f3:ea:cd:
         0c:fe:d9:85:e6:b6:d0:4a:e3:8a:77:f5:82:eb:13:bd:97:37:
         99:78:69:41:ed:e4:b9:a4:4d:ee:64:9a:9a:a4:15:05:28:4b:
         71:96:86:b7:c2:a1:10:5a:ca:62:62:5b:38:8b:95:7a:ef:e1:
         d4:7e:12:c9:e1:70:ff:8b:25:94:8a:44:d0:8f:dc:c3:3e:5a:
         b0:3b:7e:db:09:c2:98:d7:95:a5:33:ba:d9:7d:5a:30:1e:35:
         58:af:98:f0:0b:fd:92:40:40:ec:55:4c:36:3e:65:4c:d1:b4:
         64:5c:e7:d9:7d:97:89:5b:cb:f2:aa:b5:d1:43:65:79:9f:fa:
         28:f9:aa:f5:98:9d:e1:01:66:18:da:2e:e5:68:68:0d:6d:ea:
         19:02:53:43:d7:01:5a:0a:69:c1:4e:03:1c:55:ef:32:5c:53:
         1c:f6:8e:52:f7:cd:6f:9d:05:3d:59:7f:7e:b7:c4:39:da:29:
         25:6d:ed:55:b9:59:42:08:98:b3:3b:30:9d:7b:ef:24:f3:a4:
         0a:a9:bb:92:c2:5d:c3:93:2b:65:24:01:35:80:85:25:91:9e:
         a8:07:a9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 13:20:07 2026 by rpki-client