Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
File:                     VKDwgR-cJWN0RIqgFdd2knGCG_M.mft (raw, json)
Hash identifier:          bqun8FAxcelpryXfRMAho1YArIgp8NqsU1NIRtj+VwI=
Subject key identifier:   23:00:F4:B9:2C:5D:9D:8B:31:D6:B7:92:49:DF:E7:F3:EC:86:2E:02
Authority key identifier: 54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3
Certificate issuer:       /CN=54a0f0811f9c256374448aa015d7769271821bf3
Certificate serial:       019EC111F324B3245BBD664233F0ED850B10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
Manifest number:          0210
Signing time:             Sat 13 Jun 2026 13:00:39 +0000
Manifest this update:     Sat 13 Jun 2026 13:00:39 +0000
Manifest next update:     Sun 14 Jun 2026 13:00:39 +0000
Files and hashes:         1: Be8ZE-3fUDOUREKbRltRl9iw1eI.roa (hash: ts/tUG1XY8HQ9PPvnRSU96o95po47vRKYvpi0JSwMOQ=)
                          2: JPN0ZhHYSvkn7r532xwlghazy8M.roa (hash: b6weq00B1xhN/jGEGOFPdub/LMTw7LxhTg6NLGhBKwY=)
                          3: UZH0fpr1tyUVaCTBDnjkP57r0fg.roa (hash: asbZ5HvBqKNvkMzm24LOBMXDZ+s4an0DuYC6LDjlSWE=)
                          4: VKDwgR-cJWN0RIqgFdd2knGCG_M.crl (hash: /WFxgjPLxS3p0OFuuTR69DIFQQKsQMOCKnQQsFQCY9w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:11:f3:24:b3:24:5b:bd:66:42:33:f0:ed:85:0b:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54a0f0811f9c256374448aa015d7769271821bf3
        Validity
            Not Before: Jun 13 13:00:39 2026 GMT
            Not After : Jun 14 13:00:39 2026 GMT
        Subject: CN=2300f4b92c5d9d8b31d6b79249dfe7f3ec862e02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:2f:d1:9b:a1:7d:2e:08:52:f1:0f:b5:b7:ce:
                    e1:9b:57:32:68:1c:88:c3:56:13:2e:6c:09:9a:26:
                    34:75:66:7a:9c:ee:52:90:47:39:56:bc:84:1c:45:
                    90:1c:cc:2c:b2:fe:a5:72:80:79:dd:67:b4:a1:26:
                    29:5c:96:db:d9:0e:b4:90:29:6d:98:48:eb:27:d6:
                    88:5b:78:cf:f8:84:c9:56:0e:df:b2:d1:be:a0:a0:
                    00:23:4c:56:46:b6:21:10:22:50:cc:a7:27:55:fa:
                    4a:c6:e6:d1:47:ea:15:00:0d:c1:ec:98:3c:97:c0:
                    6f:f1:e6:c6:f5:df:f8:3b:37:0d:66:4e:21:4a:0c:
                    1a:aa:d6:04:14:99:96:90:ff:69:0e:ce:a7:ee:5f:
                    97:a7:70:66:a3:cc:23:47:4e:50:eb:56:e7:48:4a:
                    32:21:95:bb:d8:4d:3b:45:46:7f:4e:5d:bb:ec:30:
                    bb:db:22:f4:59:33:97:c6:78:b6:31:95:ab:d2:0a:
                    24:c4:b2:8c:cc:c3:da:11:7c:9d:e3:48:37:41:0c:
                    87:d4:64:f7:aa:8b:aa:f3:33:88:d9:de:00:81:f1:
                    68:e4:0a:9c:14:86:b4:f1:1c:61:a2:6d:62:5e:b1:
                    d9:29:72:0a:8d:6b:5b:a6:88:ad:3a:5b:2b:11:d7:
                    64:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:00:F4:B9:2C:5D:9D:8B:31:D6:B7:92:49:DF:E7:F3:EC:86:2E:02
            X509v3 Authority Key Identifier:
                keyid:54:A0:F0:81:1F:9C:25:63:74:44:8A:A0:15:D7:76:92:71:82:1B:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKDwgR-cJWN0RIqgFdd2knGCG_M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c6/cae8a7-00da-4873-bf2b-02964c50d212/1/VKDwgR-cJWN0RIqgFdd2knGCG_M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:d3:91:26:e8:e4:1e:a6:de:91:6b:af:6d:7b:71:97:ad:7b:
         53:31:4d:1c:5b:56:bc:da:e9:26:a0:47:41:41:de:50:3d:91:
         28:e6:b1:b5:72:dd:a3:5e:9e:8e:02:92:b6:e7:3b:e5:fc:15:
         c6:41:2d:7b:e2:53:5e:fc:c4:b5:eb:8c:85:60:64:81:2a:49:
         9f:1f:33:47:b1:05:e8:e1:3f:d3:ce:ac:be:be:ce:8e:89:31:
         5d:e4:59:38:6c:2b:2f:90:6c:58:52:e7:55:12:44:af:f6:fc:
         f8:b1:43:a9:94:7d:c0:a9:7f:86:55:79:f4:6f:9a:4f:9f:e5:
         1c:a8:b7:a2:0a:ce:aa:3f:4a:d4:11:83:c7:9d:05:52:4c:86:
         41:ee:cd:cb:ac:84:36:5e:37:14:d8:88:36:68:42:c2:f9:05:
         c7:82:a0:62:18:39:35:93:22:ee:32:1d:a0:4a:55:84:51:84:
         db:cc:6a:d0:0d:d6:26:43:01:42:1e:96:c6:85:a5:c6:f0:9e:
         ef:4a:36:79:01:91:5e:42:d0:e0:48:0a:81:be:8c:5f:7b:1f:
         a6:dd:c5:30:28:a1:22:e6:9d:dd:3a:69:a6:e5:0c:8a:3a:00:
         cb:2e:bc:32:28:d2:5c:f3:8e:79:90:11:ba:7d:5b:f0:2a:7e:
         05:ec:7b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:45:57 2026 by rpki-client