Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File:                     VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier:          IBN0xtyYtMk1CpQPwfe/Aft4cacZEWGkRvW7XVDGGV4=
Subject key identifier:   BA:75:90:79:63:B7:A3:1A:47:55:6D:97:5F:22:07:9E:5F:ED:B9:27
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer:       /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial:       019F91DA63F3F1D5657236396A99C80BCB99
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number:          13BB
Signing time:             Fri 24 Jul 2026 02:00:36 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:36 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:36 +0000
Files and hashes:         1: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: dNWJf5mzTL8H/g5+RlRdTnUBpuFmQYDrpeo1vm4a3Bc=)
                          2: i7eXSggzIa8jg89Jivwa78vJNEM.roa (hash: UXM3SC+hGfgrD/liPgCeamJJIYAqzLm8hy7hdC8Ta6o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:63:f3:f1:d5:65:72:36:39:6a:99:c8:0b:cb:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
        Validity
            Not Before: Jul 24 02:00:36 2026 GMT
            Not After : Jul 25 02:00:36 2026 GMT
        Subject: CN=ba75907963b7a31a47556d975f22079e5fedb927
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:b6:4e:43:7e:eb:96:ef:c6:6d:77:64:c4:41:
                    60:62:8c:37:61:9f:b1:1f:2b:79:2a:c6:97:75:bf:
                    22:53:a7:6e:0c:71:24:6a:5f:a3:b0:58:35:86:23:
                    1a:9e:06:c2:0e:39:2c:64:bd:8d:ba:b8:5c:75:48:
                    c9:dc:5c:76:b6:6d:4b:4d:33:f1:6a:c5:32:42:c5:
                    c1:5e:cd:f6:f3:3f:60:30:51:7f:fb:b0:96:53:49:
                    8a:57:40:a2:27:7a:9a:30:a7:53:bc:80:6f:87:70:
                    10:9c:19:c0:3b:ca:c6:bc:49:b5:81:9f:f3:12:48:
                    60:71:c1:6e:a7:1b:c7:0c:c2:c7:02:ea:0b:db:84:
                    e2:a6:18:f6:b3:22:9b:1f:e1:f6:5f:27:19:fd:4d:
                    9e:cf:8b:da:f7:7c:ec:f4:04:f7:bc:de:15:c3:70:
                    3a:8f:f9:f7:1d:ea:bd:13:a6:24:b4:9b:18:7a:46:
                    8f:07:70:e5:ed:1d:d2:59:e5:94:b7:74:61:b7:5a:
                    5b:8a:d9:28:a0:74:1c:1d:0e:e2:48:f4:a7:77:49:
                    2e:b7:bb:83:8f:97:f4:8e:95:3f:d9:4b:cb:7e:89:
                    84:aa:5e:67:05:4e:5c:79:72:2b:c9:1b:26:bc:8b:
                    db:b9:a8:24:5e:cb:df:50:18:68:24:2a:bc:63:40:
                    21:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:75:90:79:63:B7:A3:1A:47:55:6D:97:5F:22:07:9E:5F:ED:B9:27
            X509v3 Authority Key Identifier:
                keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:87:05:33:63:5d:09:ad:5c:87:18:3f:e1:ff:c7:17:46:5a:
         90:39:06:6c:7e:4a:41:0a:d8:d0:36:76:ae:1f:41:49:f3:de:
         92:1a:ff:f4:3e:31:81:71:53:02:4e:95:2d:72:9c:36:58:fb:
         da:d1:6e:e4:c3:a5:03:70:29:be:31:90:47:3d:92:8b:48:e9:
         0c:fc:32:1a:1c:e4:03:33:56:65:3d:53:b8:0b:1c:3a:7c:08:
         cb:29:83:47:48:4b:29:b2:3c:66:5f:82:cf:97:75:11:36:31:
         e8:28:fd:07:12:83:d2:49:93:08:b6:92:80:a5:04:eb:43:34:
         74:47:d3:04:23:67:be:2f:75:7d:42:47:27:ed:3b:19:73:7b:
         a5:7f:1f:b3:6a:4f:b3:73:ab:fb:68:dd:87:1a:de:3f:4a:73:
         63:13:5a:83:c2:62:bf:fd:45:38:d8:bf:64:74:57:4b:9b:ca:
         75:a7:71:a6:e1:8b:06:b3:0a:3a:c6:30:8f:9f:2e:1e:af:4c:
         26:5a:fd:96:89:43:40:81:1e:89:f5:a6:f4:90:27:7b:b2:1f:
         4a:4b:4c:a2:a1:02:26:f2:35:0a:b4:a6:3d:4d:8e:36:10:1c:
         24:01:d7:ca:6c:08:e1:f9:17:a3:10:36:7c:af:f1:b4:44:e5:
         e6:3d:62:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:24:04 2026 by rpki-client