Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          OVVyxgpsjeP89DT3VB3Q9kHb3ZbllHDFwl35L7yMOzI=
Subject key identifier:   30:17:64:FF:88:91:5F:8D:E2:FC:40:85:1D:47:1C:01:87:06:15:19
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       019FA74FCD148AD734BB908E474C6670DF2D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0FE8
Signing time:             Tue 28 Jul 2026 06:00:52 +0000
Manifest this update:     Tue 28 Jul 2026 06:00:52 +0000
Manifest next update:     Wed 29 Jul 2026 06:00:52 +0000
Files and hashes:         1: VvLDxcl32RkX6o9cAk2ZhuKfm2s.roa (hash: GVngVUnES7V1tiNdjBZcMzfC0juakBJRqkf8oHdzHXc=)
                          2: YXyKSQA62yKkb7oIprfQWpNYq5k.roa (hash: 2S/w+1qpceETf27eC9DVFe1O3Yuo2aVT1QqWaFNm3nw=)
                          3: fR8Sj7qPvSsegrc5cvXE_3c58VA.roa (hash: valE9KfmP8wJDIQ+h1QKYZFv8JH48MGyAU5h4M83KlM=)
                          4: h2fFhltE1j4W1TzV3SImbYKEr0o.roa (hash: X5kjZcwd4ieoyDROQzqJxZ1Df7FtqvD2AkJ0544uHm8=)
                          5: hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa (hash: 86deeND43J6o/LVaKUcKau2VOr6OHvLSqsJsfXpJwdk=)
                          6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: EdIpWZ7Wu/kJfgBndLIAksuGQm54dsPuWS7fOd1f1vA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 06:00:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:4f:cd:14:8a:d7:34:bb:90:8e:47:4c:66:70:df:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Jul 28 06:00:52 2026 GMT
            Not After : Jul 29 06:00:52 2026 GMT
        Subject: CN=301764ff88915f8de2fc40851d471c0187061519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:ff:4d:92:1d:e6:b9:3f:ed:08:90:c3:1c:
                    20:48:07:ab:fe:1c:5a:bb:62:58:bc:1f:0b:e2:ad:
                    3b:f8:ce:43:32:31:a2:fa:84:e2:12:50:aa:ce:55:
                    cb:e7:e7:e8:ac:fe:66:26:03:d7:19:60:07:05:45:
                    f4:33:81:a6:72:c2:79:fb:a5:c5:e7:26:eb:6e:81:
                    a0:5a:29:8d:e6:d6:d8:9a:00:8f:39:ed:78:22:2f:
                    ee:14:4c:43:90:73:22:e1:5a:93:39:44:5f:1b:96:
                    64:51:b0:4c:ee:f5:b8:cd:77:fd:4c:3c:0f:f2:ba:
                    04:f7:44:f4:35:78:40:c0:dc:28:db:ca:ee:a4:62:
                    4e:07:66:78:db:d1:bc:db:9e:37:d2:36:b5:cb:2a:
                    63:59:5f:a3:de:71:a5:d9:15:36:4d:79:ac:50:82:
                    c0:7b:07:f0:a3:ab:ce:83:81:88:57:58:5b:5d:65:
                    b6:83:90:c4:5a:2b:0e:47:6e:56:2e:80:c5:55:25:
                    e0:b5:9c:46:7d:c1:a1:9e:a0:11:ce:4e:b8:d0:d2:
                    63:0e:97:d4:93:b8:ae:03:73:b1:ec:06:e2:54:ae:
                    9e:ed:0b:b7:91:54:1d:6f:1a:0f:55:bd:9c:94:54:
                    65:db:f5:19:d7:b3:c2:ff:47:dd:c2:88:24:bc:75:
                    b0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:17:64:FF:88:91:5F:8D:E2:FC:40:85:1D:47:1C:01:87:06:15:19
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:03:b4:f8:26:ac:34:fb:0c:3d:a8:24:e8:8c:86:3f:c0:0d:
         7c:49:f8:41:15:5c:3b:52:d9:6d:aa:38:a5:dd:b0:51:98:c0:
         e0:50:78:2d:57:0a:8e:34:80:fe:73:33:b3:f7:dd:be:fe:80:
         04:e6:d9:5c:62:98:93:5e:a6:19:bc:3d:26:96:73:53:68:c1:
         bc:20:89:80:e5:3e:92:19:6a:f9:8c:d2:90:29:5a:91:5a:7c:
         49:5f:0c:cc:2f:28:cb:ef:e1:80:9c:b8:05:a1:12:05:15:56:
         3a:67:a4:4f:35:b9:6f:e1:09:88:3a:8b:fe:c5:fe:d3:f9:93:
         a7:8d:69:f2:e0:d1:2b:cc:74:8d:52:1d:ee:ee:1b:29:10:3b:
         14:09:18:e3:45:25:ff:19:96:86:0f:91:c1:04:ba:dd:fb:8c:
         23:1f:e8:34:ab:39:e4:60:97:37:93:8a:5c:8c:e9:58:0d:6f:
         c5:ce:ca:7c:bd:69:80:49:83:87:8d:12:f1:9d:46:8a:00:bd:
         42:10:45:a8:d6:61:04:6d:3c:d0:8e:f1:25:35:32:08:97:95:
         12:07:92:56:04:72:95:0d:34:7f:76:d6:22:4c:51:d5:ce:76:
         43:a3:d4:d0:dc:1d:37:21:9c:d0:ea:bb:da:6c:4b:46:50:34:
         d3:f9:38:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 16:08:06 2026 by rpki-client