Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
File:                     VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft (raw, json)
Hash identifier:          PYRsuEKducnPxpWjXuQpoOgQy9rna58o0RzNhp4c3vg=
Subject key identifier:   F0:1C:21:7B:E6:3A:45:33:B9:B1:44:C9:59:FF:62:A2:E3:53:AF:C4
Authority key identifier: 54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50
Certificate issuer:       /CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
Certificate serial:       01A0D4CB737794C5DD3ED7EBAE2377E13C09
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
Manifest number:          028B
Signing time:             Thu 24 Sep 2026 19:01:38 +0000
Manifest this update:     Thu 24 Sep 2026 19:01:38 +0000
Manifest next update:     Fri 25 Sep 2026 19:01:38 +0000
Files and hashes:         1: LpiRzUIJUTDqe4gSj8ZBL1pjI5k.asa (hash: 9vpRMBwHLJ+gwVVy2U1cWncm4c8I6qEnRJ9+hefVBkw=)
                          2: VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl (hash: z0GDpvT51j79/TaYup3R0TrIBN/PHKvZmchTNu9bM9s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 25 Sep 2026 14:17:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:d4:cb:73:77:94:c5:dd:3e:d7:eb:ae:23:77:e1:3c:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540825ec7bd33a02204cd1bc1535fc1ca2150950
        Validity
            Not Before: Sep 24 19:01:38 2026 GMT
            Not After : Sep 25 19:01:38 2026 GMT
        Subject: CN=f01c217be63a4533b9b144c959ff62a2e353afc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:bf:85:1e:00:3c:ef:90:19:e7:3c:a3:40:ef:
                    a5:6c:87:2c:57:04:73:8e:82:51:dc:83:72:c0:79:
                    08:72:10:e7:0d:77:06:54:bb:8a:e3:af:17:be:14:
                    0a:c8:20:13:ee:6d:a5:91:80:b0:26:10:a2:78:83:
                    52:70:73:87:6a:54:0b:89:33:78:7f:a3:8c:ce:9d:
                    e3:0f:f2:66:7b:a5:cf:ff:b3:c5:86:ad:5c:5f:40:
                    d5:b2:f6:aa:b5:94:a2:b8:37:bc:eb:2f:12:39:34:
                    67:65:47:b8:59:ba:54:69:e7:29:96:c5:84:b1:41:
                    7f:b1:20:f2:7e:8e:9d:ef:79:c8:40:cf:95:8f:b7:
                    37:1b:28:63:14:dd:4c:80:4c:00:29:53:fa:a6:19:
                    48:df:8d:3d:ce:98:04:2c:b9:b8:45:bc:bf:aa:d9:
                    d2:3d:b3:69:3d:92:4f:a5:0c:94:04:96:fd:00:a6:
                    88:50:ca:23:6d:8d:96:24:ff:9a:7c:f4:ca:8d:ab:
                    1e:7f:0c:65:2a:62:7a:cd:81:35:58:3e:28:4a:12:
                    f4:10:c9:23:89:55:65:e4:04:7d:5e:e9:8c:6d:5a:
                    3a:93:42:b2:7e:3a:83:0d:30:b5:bb:27:0f:ab:cb:
                    93:1c:27:62:bc:bd:36:dd:fc:35:95:c0:30:c5:5d:
                    46:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:1C:21:7B:E6:3A:45:33:B9:B1:44:C9:59:FF:62:A2:E3:53:AF:C4
            X509v3 Authority Key Identifier:
                keyid:54:08:25:EC:7B:D3:3A:02:20:4C:D1:BC:15:35:FC:1C:A2:15:09:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAgl7HvTOgIgTNG8FTX8HKIVCVA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/68bf54-d989-4881-a76f-5f2f15be27c4/1/VAgl7HvTOgIgTNG8FTX8HKIVCVA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:c2:f2:df:c8:9b:59:3c:49:c1:11:4c:2a:c0:e0:22:ff:
         6d:e0:d3:84:39:17:88:22:78:ad:ef:20:71:9a:4c:d5:88:59:
         c0:a0:d3:52:51:8a:42:1f:59:76:07:2c:db:30:b0:8f:de:63:
         d6:08:9a:d7:cd:d5:9b:17:ed:5d:82:27:23:d6:39:41:8a:4f:
         f0:6c:01:52:de:06:23:de:94:d6:48:fd:fe:b3:4f:29:14:81:
         04:a5:85:c5:af:2e:9e:39:49:35:2c:89:7d:af:32:cb:15:bb:
         98:69:fa:04:e0:f0:d3:1c:79:a8:24:91:41:ec:cc:dd:9a:82:
         5b:30:4e:3b:04:a5:c4:0b:eb:aa:cd:47:81:af:79:a0:a9:25:
         52:b9:1b:0b:31:1c:9f:b9:43:80:35:a5:6e:b8:0c:7a:fb:af:
         a9:09:22:10:0a:b9:fa:48:c2:e2:ca:46:0c:1f:12:df:7c:9c:
         7e:dd:0c:eb:d6:79:31:4e:68:45:6e:e2:d7:14:89:5e:25:74:
         46:8e:8e:dd:3d:c2:45:a3:7e:f1:e0:7f:92:16:64:32:f0:4f:
         92:22:19:24:8d:a8:e5:1b:40:7d:df:d3:60:85:65:39:ba:35:
         3c:0d:b3:aa:f7:71:b3:55:42:77:00:d3:98:a0:d6:d9:27:91:
         ad:7b:2e:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:46:01 2026 by rpki-client