Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
File:                     VG3jJt6VIr0pa-1II4XJdpJY2PE.mft (raw, json)
Hash identifier:          YcqQUVythyVrN6MBQDlNGC2MReUulG+UF6oXYsKWfGw=
Subject key identifier:   30:E2:F6:5E:9B:48:D5:87:22:42:5C:15:B9:51:8F:10:51:83:FC:87
Authority key identifier: 54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1
Certificate issuer:       /CN=546de326de9522bd296bed482385c9769258d8f1
Certificate serial:       019EC33740AD54C40F6F225BFD7C0A05DF95
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
Manifest number:          1043
Signing time:             Sat 13 Jun 2026 23:00:38 +0000
Manifest this update:     Sat 13 Jun 2026 23:00:38 +0000
Manifest next update:     Sun 14 Jun 2026 23:00:38 +0000
Files and hashes:         1: ApzBB8QQLMI_xsO48Jm3jxRXuhI.roa (hash: K+MZAh6Qr7nnvD9WoHZdULSDa2rCr8sl1Vr//Yn6JfU=)
                          2: VG3jJt6VIr0pa-1II4XJdpJY2PE.crl (hash: wzZTagMwtfMYQCCZPd9tSAP9TUdL5TVYHHB3aQTvZdA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c3:37:40:ad:54:c4:0f:6f:22:5b:fd:7c:0a:05:df:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=546de326de9522bd296bed482385c9769258d8f1
        Validity
            Not Before: Jun 13 23:00:38 2026 GMT
            Not After : Jun 14 23:00:38 2026 GMT
        Subject: CN=30e2f65e9b48d58722425c15b9518f105183fc87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:ed:f3:e6:75:86:de:2c:c7:cb:d8:43:7e:42:
                    bb:e5:7c:99:fb:c6:63:fb:15:4f:5c:61:be:8d:16:
                    f8:b0:6a:1e:a4:0d:91:60:c0:e0:47:a4:46:4e:22:
                    82:b8:7f:f6:6a:bf:9d:7b:11:5d:1d:53:04:7c:98:
                    a3:2a:49:d2:ef:70:fb:5e:fa:3c:9d:f4:2c:de:c6:
                    b3:d9:16:d9:2c:cd:47:d7:0c:9b:98:2f:16:70:ba:
                    12:e1:ee:1d:e5:7c:39:c1:d6:66:cc:1a:69:f2:42:
                    60:c1:25:4b:1f:ff:97:f1:94:3c:64:5c:07:2f:cb:
                    6d:e4:c6:31:04:00:3b:f0:05:29:dd:2c:37:78:d5:
                    48:94:ab:d2:f9:cb:42:84:76:f1:eb:e8:97:7b:aa:
                    e1:89:21:55:e2:ea:fe:a5:8c:c3:74:a6:cf:61:97:
                    d3:45:4f:45:29:bd:92:42:63:af:04:fe:7d:48:02:
                    5a:8a:85:f6:11:6e:44:d5:a7:bf:d9:b2:5c:a3:c3:
                    1c:2f:9f:e7:a7:59:c6:bd:ed:ce:2c:bc:44:f2:9c:
                    85:fb:b0:ac:f8:c3:d6:2a:d9:6c:ae:6c:54:ad:2e:
                    7e:50:a6:ef:11:26:aa:a7:ba:a9:e9:73:71:e1:a2:
                    93:c6:77:b9:d0:8a:9e:05:b8:18:ea:f6:a1:39:e0:
                    ff:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:E2:F6:5E:9B:48:D5:87:22:42:5C:15:B9:51:8F:10:51:83:FC:87
            X509v3 Authority Key Identifier:
                keyid:54:6D:E3:26:DE:95:22:BD:29:6B:ED:48:23:85:C9:76:92:58:D8:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VG3jJt6VIr0pa-1II4XJdpJY2PE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/1bad7e-cf5c-4d1c-864a-4937601c8fea/1/VG3jJt6VIr0pa-1II4XJdpJY2PE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:dc:d7:24:2d:10:03:6c:ca:8f:c4:8e:3f:5d:99:05:5e:21:
         ed:8f:d5:84:93:d5:85:75:27:53:61:4e:49:9a:41:d9:3e:33:
         31:bb:12:2d:1d:bb:3f:89:31:ff:bd:15:c0:7b:3d:51:2a:0e:
         2f:14:12:08:fc:33:78:a6:7f:ff:bb:7c:68:7c:ae:2c:8b:4d:
         b4:ef:6a:32:83:95:ba:c4:11:f6:b9:35:a7:ce:08:e5:41:70:
         c3:c8:14:1a:0e:28:a4:86:14:21:7b:f3:e6:dc:8e:3e:96:6e:
         04:9d:09:8f:5d:60:a1:79:ad:f0:d3:c2:f9:2a:ee:63:0d:29:
         f2:a4:0e:72:e2:ce:cd:6b:c1:d1:0d:0d:48:55:c8:80:be:f7:
         0a:48:e3:d6:5c:6a:7f:1e:e4:e1:4a:08:9f:c8:3e:bf:73:94:
         2e:f4:8f:09:2f:51:06:66:79:d1:41:15:52:d5:0e:c9:01:9e:
         ea:f2:9e:7d:05:a8:be:d4:0a:d3:3c:16:88:59:f3:93:db:72:
         be:0e:8b:c5:87:34:8f:f5:04:08:1c:2f:a9:49:d7:ed:5a:5a:
         76:7f:d8:2b:5a:39:7c:62:46:d9:10:51:38:a4:bc:03:0a:45:
         87:e2:38:c7:15:da:b0:ff:e9:9a:b8:72:76:18:cb:e6:ad:78:
         45:28:1b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 04:02:12 2026 by rpki-client