Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
File:                     92_VaGdIVkFeseITQqrzI7N7ei4.mft (raw, json)
Hash identifier:          jwNqHDdqQ0i+80HiEkjM4cpcIXXkYLyQCtqqlCGbRrs=
Subject key identifier:   46:1E:5D:88:36:DA:26:D9:58:EE:A7:F1:23:08:1B:D4:80:1A:4D:C9
Authority key identifier: F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E
Certificate issuer:       /CN=f76fd568674856415eb1e21342aaf323b37b7a2e
Certificate serial:       019FAA873B19300DDBDD303D44F5A2F7F162
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
Manifest number:          0B21
Signing time:             Tue 28 Jul 2026 21:00:16 +0000
Manifest this update:     Tue 28 Jul 2026 21:00:16 +0000
Manifest next update:     Wed 29 Jul 2026 21:00:16 +0000
Files and hashes:         1: 6CVNw0HuhfYE-VtYjj7hpSTWYM0.roa (hash: c2peJHLqAks7ODKSa9ozbh1moP7dEpQyilF1Kiyo7as=)
                          2: 92_VaGdIVkFeseITQqrzI7N7ei4.crl (hash: 15ivvkHSGqdeMWCvmLDO3qTg0phPBq/MJtRYQqP+C8E=)
                          3: V-iqtypPqxyXIimSwNSMICX4_yc.roa (hash: 9qP4GMfzWZry9x0Ww/FVfCGvc27G3M28cDlCP2F//ws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:00:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:87:3b:19:30:0d:db:dd:30:3d:44:f5:a2:f7:f1:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f76fd568674856415eb1e21342aaf323b37b7a2e
        Validity
            Not Before: Jul 28 21:00:16 2026 GMT
            Not After : Jul 29 21:00:16 2026 GMT
        Subject: CN=461e5d8836da26d958eea7f123081bd4801a4dc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ce:52:26:d7:08:d5:79:a4:af:ef:09:fa:e2:
                    38:02:83:56:cb:42:28:39:ad:92:88:19:9e:c7:3f:
                    9b:87:37:85:f3:1e:aa:c8:77:93:1f:fd:24:be:d2:
                    fb:30:14:f3:18:f0:60:02:10:42:cd:3a:26:5f:d0:
                    2b:3f:ee:ed:48:9d:5a:11:4f:4c:5a:4c:8d:c2:eb:
                    63:70:5e:f9:e4:48:21:df:74:a3:0b:06:cd:70:d5:
                    7b:e5:7b:5a:92:f4:64:82:13:9b:a9:41:e0:09:3d:
                    b3:2d:75:bb:84:d0:80:e5:56:79:a5:83:60:1c:95:
                    3d:d2:65:5f:f6:54:05:d2:2c:c5:33:a9:58:41:1b:
                    4a:c8:2c:84:5c:98:0a:bf:28:5f:2b:2b:dd:c1:bd:
                    08:ef:70:70:d2:b0:24:21:8b:cf:1d:03:39:1c:57:
                    34:9f:9a:14:cf:f3:93:71:0a:6c:11:d8:8e:4c:bf:
                    0d:05:d0:5e:c2:d6:36:20:df:9e:44:b3:ed:a7:8a:
                    7e:17:b6:e7:a2:1c:5d:9c:ca:02:69:cf:ec:23:5a:
                    32:fb:6b:54:fb:83:88:56:32:1e:65:f3:a4:d3:cb:
                    5e:25:dc:5b:ec:5e:55:a7:ab:8a:a0:5b:4c:c1:43:
                    aa:86:5f:9e:f0:ce:f4:db:78:dc:3e:8f:09:ac:08:
                    94:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1E:5D:88:36:DA:26:D9:58:EE:A7:F1:23:08:1B:D4:80:1A:4D:C9
            X509v3 Authority Key Identifier:
                keyid:F7:6F:D5:68:67:48:56:41:5E:B1:E2:13:42:AA:F3:23:B3:7B:7A:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92_VaGdIVkFeseITQqrzI7N7ei4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/db/540da5-27fb-46e6-a132-b54d82d8be7b/1/92_VaGdIVkFeseITQqrzI7N7ei4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:b1:42:3d:89:63:74:26:82:fb:8b:8f:c9:78:6e:9a:cf:83:
         39:f0:e5:08:8e:d0:4a:ed:7e:b9:45:7b:90:e0:7b:ca:14:8b:
         8f:00:e8:7b:58:89:8c:c3:d1:db:3c:1a:b7:5c:8a:b0:03:88:
         3a:f6:03:02:0a:29:71:ad:fa:c3:17:9a:9f:aa:58:98:51:f4:
         f2:78:17:38:7a:d7:7c:3f:08:84:67:a3:62:ee:c6:e7:d0:db:
         ec:22:98:2e:cf:e3:a8:2c:99:2c:19:e9:60:ee:d0:0b:85:57:
         34:21:45:13:52:16:86:83:8b:05:44:0a:a7:ff:2b:c4:42:e7:
         57:41:81:4d:73:4f:2b:12:be:a3:0f:d5:bc:65:bb:45:d2:9b:
         b1:bb:47:0e:22:40:37:8f:dc:02:ad:d7:43:07:f6:82:c7:20:
         00:8c:b9:c0:73:ae:79:85:31:9b:96:60:2d:2a:2a:08:27:45:
         70:63:7a:9d:6b:04:4e:66:57:ec:58:7c:cd:0d:f4:55:1d:f6:
         4e:f1:b8:ac:43:52:07:fb:62:e2:8a:1a:9d:d8:71:60:0e:9a:
         7d:b2:5b:59:cf:39:83:88:fa:6e:08:4c:61:34:c4:6f:c6:3e:
         4b:90:94:55:15:07:8d:16:5c:06:16:46:35:c7:b4:a2:a3:7f:
         a3:26:6b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:52:54 2026 by rpki-client