Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
File:                     VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft (raw, json)
Hash identifier:          TEje3b0exEUmOLSZsI1kIfv5ShO7U3k7stJ4bfgCtG4=
Subject key identifier:   EB:7B:EE:77:64:EB:68:60:3F:F5:89:44:27:74:4F:A2:98:BD:2E:C1
Authority key identifier: 54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71
Certificate issuer:       /CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
Certificate serial:       019FAAF5DA6FFD6A72208E83D38E6CED7B29
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
Manifest number:          0447
Signing time:             Tue 28 Jul 2026 23:01:06 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:06 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:06 +0000
Files and hashes:         1: VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl (hash: I2hQJpoO1aJeVjtuBrgP0XHI8PSLlMm91Eq7HIttx00=)
                          2: ubGuCjFPVxiulreO2SsJV28pVp0.roa (hash: 3l6ifc5EarfHeykyetQk/cEwR8Fv+CohcJmFJI84qI0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f5:da:6f:fd:6a:72:20:8e:83:d3:8e:6c:ed:7b:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54deb1d6a377ac9d1f5b888c5cd1d400c7997271
        Validity
            Not Before: Jul 28 23:01:06 2026 GMT
            Not After : Jul 29 23:01:06 2026 GMT
        Subject: CN=eb7bee7764eb68603ff5894427744fa298bd2ec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a2:05:57:a5:72:ee:a7:e3:46:3f:5f:bb:ff:
                    db:52:c0:8a:79:3a:ca:24:75:f3:28:db:3f:8e:9c:
                    12:2d:cd:57:6c:05:24:e4:3b:dc:4d:f7:63:aa:ec:
                    2a:b6:0b:b9:e0:58:94:e9:f8:2d:af:40:9a:dc:5c:
                    ba:ef:43:b0:b0:9a:cc:95:98:39:39:3e:e2:c5:27:
                    d7:3f:c4:4c:57:28:ce:2a:26:5a:43:0d:bc:e4:82:
                    a1:04:4b:92:77:b2:48:1c:53:cc:9c:c7:67:fa:c5:
                    e5:96:84:a9:bd:01:e6:55:2c:85:35:79:d0:20:23:
                    f2:0f:0a:72:36:69:77:7c:71:96:2d:22:92:83:ff:
                    85:10:7c:ad:ad:7a:93:7b:9e:1c:fe:d6:86:76:c0:
                    ba:a6:de:c3:54:9f:88:89:e1:10:21:57:60:fa:ca:
                    dc:07:b7:37:ea:40:26:62:52:65:dc:29:b5:f0:12:
                    4e:9f:48:61:8f:73:a0:e5:a2:25:45:3a:c5:86:36:
                    db:c9:5a:7f:62:03:b5:27:f0:6f:5a:7c:38:17:86:
                    57:a8:19:9b:55:c4:bb:24:7c:d0:00:57:a4:92:4c:
                    21:41:18:f7:21:45:ec:4e:e8:07:f4:de:2a:f0:d2:
                    81:f2:64:26:d9:12:86:0f:27:33:66:e6:99:2c:31:
                    78:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:7B:EE:77:64:EB:68:60:3F:F5:89:44:27:74:4F:A2:98:BD:2E:C1
            X509v3 Authority Key Identifier:
                keyid:54:DE:B1:D6:A3:77:AC:9D:1F:5B:88:8C:5C:D1:D4:00:C7:99:72:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/04439f-42e3-4e6c-bd3b-b336f31e4a74/1/VN6x1qN3rJ0fW4iMXNHUAMeZcnE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:7e:fe:b6:9c:96:ce:16:c8:04:5d:e9:25:97:36:a8:96:2b:
         6a:61:44:46:ca:61:8c:6c:fc:dc:0d:eb:45:ae:30:64:25:95:
         a7:75:30:59:1c:5f:c0:1d:90:eb:30:d9:f4:37:c0:40:02:3e:
         c4:b0:43:f5:a5:39:cd:7e:d3:42:93:e6:88:9f:3a:a9:6d:45:
         a8:4e:03:2a:aa:d6:01:cf:33:72:c9:bd:09:fa:d6:6f:fb:79:
         5b:37:56:67:18:b3:c3:ec:63:22:fb:60:65:5d:e7:64:c9:dc:
         fe:c8:10:c3:1a:a5:ac:6f:2d:02:d6:ba:97:fa:59:dc:c4:3a:
         69:11:2f:2e:bb:57:51:ed:c1:c4:c3:e4:80:fa:e9:3e:96:3d:
         dd:6e:f2:be:f1:00:f3:e1:ae:aa:b6:fe:d7:e2:87:08:4c:28:
         c2:1f:16:29:f0:f8:ff:ed:53:df:0f:d3:20:2d:fe:52:f5:86:
         68:f0:8f:38:cb:79:21:52:2e:ee:ba:36:a4:b6:c0:f8:4c:1a:
         04:cb:e4:a2:47:b5:c0:b6:a7:02:92:ad:49:9e:a4:40:a1:59:
         3c:2b:96:70:3e:d9:8b:74:0c:13:ad:06:4a:1b:f5:ab:7f:8d:
         d3:68:c9:0b:d7:84:d5:87:6c:1f:c7:c1:6d:68:82:e7:ee:da:
         66:72:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:37:54 2026 by rpki-client