Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
File:                     vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft (raw, json)
Hash identifier:          AlpBnH1MBQqsfGBWSJDimRDDs2pI5Vc1Fup+XbQ7cWc=
Subject key identifier:   3D:69:80:2B:39:66:AA:12:53:75:F6:C5:74:F5:E8:48:01:8D:96:CB
Authority key identifier: BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D
Certificate issuer:       /CN=bc9a381f8a60cc51b52990ed386948f684c3159d
Certificate serial:       019FA9AC7463FFEF8914C9D195571DEF5CBE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
Manifest number:          05CE
Signing time:             Tue 28 Jul 2026 17:01:19 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:19 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:19 +0000
Files and hashes:         1: j6hllAPOfjGlxSjPf2J6ZRdZpJo.asa (hash: U2oiN7OANfQlnqJQht1FjgSLsysseVC5VhtI3rsOfnE=)
                          2: vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl (hash: crwQW6VILi53zh3/HlPQf++QzBMDbxSXMXYNxA/MOxM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:74:63:ff:ef:89:14:c9:d1:95:57:1d:ef:5c:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9a381f8a60cc51b52990ed386948f684c3159d
        Validity
            Not Before: Jul 28 17:01:19 2026 GMT
            Not After : Jul 29 17:01:19 2026 GMT
        Subject: CN=3d69802b3966aa125375f6c574f5e848018d96cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5d:1c:85:ff:ca:9a:a7:85:1a:71:59:91:02:
                    78:0e:1c:40:c3:0d:7a:a3:06:c4:78:11:49:eb:26:
                    a3:55:2d:3b:60:b6:95:ae:52:1e:06:1a:1f:42:d8:
                    bf:e4:d3:24:f5:b4:2a:01:9e:d7:3e:8a:3a:51:7c:
                    fd:3b:e3:b6:5e:51:48:c1:02:f0:c9:25:90:8d:9e:
                    00:51:1a:a5:c7:74:27:b5:3d:ff:e9:72:26:9a:a5:
                    f1:11:09:70:82:d1:5d:7b:99:f3:b4:62:c5:45:0e:
                    9b:f4:5d:bb:33:05:da:a4:db:c8:99:f2:2c:49:6e:
                    7d:9f:3a:89:8b:45:4f:a4:c3:3f:15:10:d2:55:d2:
                    08:b1:97:cd:34:80:a3:f2:d8:10:dc:0c:82:59:27:
                    b0:e5:55:10:54:a8:a8:ef:fa:64:df:c2:66:97:78:
                    b2:1e:3a:9c:47:0b:f6:b9:f9:cf:66:40:4f:77:38:
                    9a:b5:07:72:fa:de:b5:e2:33:2c:bf:08:b8:71:e6:
                    68:bf:27:9d:bb:11:eb:dc:a9:f0:d6:36:f8:eb:9f:
                    00:25:f1:89:91:ae:60:32:61:92:3d:ca:17:10:e0:
                    74:dc:ea:97:43:6b:23:79:cc:91:6f:72:f5:fe:35:
                    1a:29:c3:d1:95:07:d6:94:f3:d3:f6:15:e1:2c:60:
                    32:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:69:80:2B:39:66:AA:12:53:75:F6:C5:74:F5:E8:48:01:8D:96:CB
            X509v3 Authority Key Identifier:
                keyid:BC:9A:38:1F:8A:60:CC:51:B5:29:90:ED:38:69:48:F6:84:C3:15:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/ca0e7e-4ecd-42ee-a859-ea0718359e52/1/vJo4H4pgzFG1KZDtOGlI9oTDFZ0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:30:96:61:66:11:a3:f9:24:1b:54:93:00:fe:cd:21:52:65:
         9f:b6:a2:cd:56:55:b2:ef:fd:47:e6:18:98:1e:d3:3c:4f:a2:
         37:82:a4:bf:ba:1e:4a:3e:56:b9:59:71:30:9f:4b:9a:42:9c:
         b8:7c:27:4c:d2:41:7b:bf:2a:bd:00:d1:3c:2d:92:cb:6e:00:
         8a:c0:9d:56:58:d9:ae:b6:cf:fb:82:78:d8:4a:f2:cb:9a:e4:
         59:89:16:c7:32:0f:b1:14:82:c7:68:40:f8:c8:f6:d6:19:aa:
         b0:fd:3d:53:b2:44:1f:24:84:91:be:b5:1a:06:9d:73:a9:e4:
         d9:4d:2f:e2:4c:71:dd:48:4a:50:e5:81:21:0b:c2:8c:5e:3f:
         87:3a:27:4f:67:e2:8f:9e:83:60:8d:21:c8:c4:34:28:86:e5:
         1f:36:f6:e3:bf:6a:a5:fe:5c:bb:f5:a6:5d:0b:5c:e8:16:ad:
         51:cb:5c:e7:7e:8a:1f:02:07:04:56:ad:26:54:67:aa:b2:6a:
         ac:ff:92:0d:65:56:fd:75:3f:3a:7f:39:33:de:30:b3:63:ff:
         4d:8f:58:e1:29:8c:2f:c1:62:ed:99:f8:63:c0:aa:d4:26:09:
         de:22:90:69:b0:12:9b:e4:55:2a:ea:72:8b:1b:66:5a:79:bd:
         cd:ce:c8:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:30:30 2026 by rpki-client