Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
File:                     1-vcGbaCaViJCYORuom3Jyx26jjc.mft (raw, json)
Hash identifier:          FIDqjBBd4x41EUvvF5m49y/D0jVhe/0wpIz+a/zVWG4=
Subject key identifier:   3A:5C:B0:10:A0:4D:59:42:EB:4F:27:06:DB:C0:1E:C3:69:F5:D6:B8
Authority key identifier: FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37
Certificate issuer:       /CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
Certificate serial:       019F90914FB7771A04FA1BCF628C783A597C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
Manifest number:          150A
Signing time:             Thu 23 Jul 2026 20:01:09 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:09 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:09 +0000
Files and hashes:         1: 1-vcGbaCaViJCYORuom3Jyx26jjc.crl (hash: 10CUuMrHqRXFetu+D5gV4igZVqCOt6c8yuhGtCeo+mI=)
                          2: TWtbyGXJNUqoK61RLF8Zk_yb-OA.roa (hash: V0MpIpfQqolsEoLYmXod5/+AyCdlRH/FtrIJe/Y/B+g=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:4f:b7:77:1a:04:fa:1b:cf:62:8c:78:3a:59:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=faf7066da09a56224260e46ea26dc9cb1dba8e37
        Validity
            Not Before: Jul 23 20:01:09 2026 GMT
            Not After : Jul 24 20:01:09 2026 GMT
        Subject: CN=3a5cb010a04d5942eb4f2706dbc01ec369f5d6b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:14:98:e9:5d:28:9c:5a:34:f5:27:73:08:5b:
                    39:a7:3a:77:2b:e2:fd:9d:12:ac:e1:f6:11:73:b9:
                    f0:53:80:a8:a3:60:f1:38:c3:08:63:7a:bb:4c:92:
                    be:3e:3f:f0:77:66:c3:ad:5f:27:03:1b:04:13:ac:
                    09:08:17:fe:eb:18:55:56:f7:9e:4a:73:b6:26:de:
                    bd:87:eb:25:b4:43:92:14:ff:53:a6:64:d1:bf:2f:
                    7f:5c:19:f9:97:7a:26:40:dc:29:30:8b:9e:d1:6e:
                    79:4b:b2:df:f3:c2:46:90:4a:3b:2f:a3:44:32:2f:
                    40:a5:1e:1f:74:d7:77:63:bb:5c:a8:04:54:0c:c5:
                    1f:6a:d2:d2:b8:77:5a:c0:73:c3:13:90:5e:c6:51:
                    0e:b5:a3:d5:73:68:96:19:33:9f:06:bc:6a:4a:e1:
                    31:fe:da:8d:75:eb:6f:0e:2c:25:22:e0:2f:ce:a2:
                    21:6a:a6:76:de:be:1d:1f:79:94:bc:25:11:0b:0e:
                    1e:bd:b7:6d:d4:0a:58:c9:03:74:11:3f:f0:6b:6e:
                    af:6f:13:29:ce:fa:e8:0e:73:ab:bb:95:3c:70:71:
                    54:45:5c:3c:b5:97:4e:bb:a3:19:e9:63:15:1c:67:
                    d1:7e:9d:b9:49:45:4c:85:25:a5:7a:55:8c:3d:b3:
                    b3:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:B0:10:A0:4D:59:42:EB:4F:27:06:DB:C0:1E:C3:69:F5:D6:B8
            X509v3 Authority Key Identifier:
                keyid:FA:F7:06:6D:A0:9A:56:22:42:60:E4:6E:A2:6D:C9:CB:1D:BA:8E:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-vcGbaCaViJCYORuom3Jyx26jjc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/6dbc2f-0f0b-4a2f-b149-b75983122455/1/1-vcGbaCaViJCYORuom3Jyx26jjc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:d2:39:98:03:09:20:3d:5b:86:92:b8:9a:0f:8e:3b:85:2a:
         66:5d:75:5b:e1:63:1f:0d:99:2e:92:a5:05:32:06:c5:42:ee:
         c2:61:40:08:1a:4f:c8:93:34:cd:5d:9c:d5:83:52:8c:cd:8a:
         df:50:63:45:0c:a4:10:15:ef:eb:05:74:53:61:16:48:27:88:
         e3:07:22:af:62:c4:19:77:05:f8:82:f4:a0:c8:c9:79:17:12:
         67:f2:33:60:19:e2:97:f7:2d:27:11:30:eb:20:a7:08:60:ff:
         f1:d5:6e:23:29:39:7d:70:23:e4:40:bb:fa:ae:84:78:b5:14:
         c2:bc:cd:cc:42:34:ea:b3:4e:6e:fb:b4:86:fd:88:55:65:e0:
         95:27:fe:3e:dc:8b:e8:7d:97:43:95:1c:1d:f6:29:b0:ff:9a:
         85:d5:c3:85:b4:10:37:75:6b:c0:c0:02:81:be:44:c0:99:93:
         9b:6d:41:93:14:30:c2:ed:01:d5:ae:15:48:a2:92:e2:6a:36:
         54:66:27:16:6c:30:b3:87:1d:d2:88:51:c8:93:7f:02:8a:ed:
         a8:c6:bf:7d:83:b6:ce:17:31:f8:c4:61:71:96:63:75:5f:09:
         76:b8:f5:59:9f:7b:65:1d:89:93:87:da:d3:af:af:a5:da:9d:
         a8:62:33:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:18:33 2026 by rpki-client