Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
File:                     Vi6OBQ04RQLreX9elEkxpm_dVVo.mft (raw, json)
Hash identifier:          WhBGBAKjNT39G18+Phk4881ZMXleE4LGOo4tyTiOYdo=
Subject key identifier:   5A:66:DE:19:4E:9F:C3:6D:CE:D4:99:5A:54:3F:1C:EE:46:19:A3:F5
Authority key identifier: 56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A
Certificate issuer:       /CN=562e8e050d384502eb797f5e944931a66fdd555a
Certificate serial:       019FAAF632378648D5504025006D4A0D9F3D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
Manifest number:          0725
Signing time:             Tue 28 Jul 2026 23:01:29 +0000
Manifest this update:     Tue 28 Jul 2026 23:01:29 +0000
Manifest next update:     Wed 29 Jul 2026 23:01:29 +0000
Files and hashes:         1: PTGFtop819nPl01gzng3ViiDuyQ.roa (hash: MsdxqZiMITKpL1yel8PLmuFTlbpZRDQiLbP60VZOUKg=)
                          2: Vi6OBQ04RQLreX9elEkxpm_dVVo.crl (hash: 1SHEsq4Ouxel6bqu0qIPHfImauPpimIe5LJORtguh9w=)
                          3: uOBfT9dJzAeP5L062tP2bPLjN00.roa (hash: YXcsdR0InWSwo1kicGcvoiEoVtpo1uOcvHTUXcUr4mo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:f6:32:37:86:48:d5:50:40:25:00:6d:4a:0d:9f:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=562e8e050d384502eb797f5e944931a66fdd555a
        Validity
            Not Before: Jul 28 23:01:29 2026 GMT
            Not After : Jul 29 23:01:29 2026 GMT
        Subject: CN=5a66de194e9fc36dced4995a543f1cee4619a3f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:85:bd:94:49:d0:60:d3:52:a0:ae:1a:f2:
                    11:15:71:d4:c7:af:ca:d7:e1:cc:f3:bb:c2:94:e7:
                    9c:c6:6c:5a:8e:2d:1a:b7:23:b9:54:1e:d0:e9:f6:
                    d9:dd:01:a8:8e:02:b6:5c:0d:20:d8:6c:20:58:d5:
                    86:93:e9:1c:67:76:c2:67:08:dc:d9:81:01:d5:60:
                    d5:16:3b:4c:66:16:12:b2:1b:b3:1b:8b:33:e0:4a:
                    4f:6c:3e:42:b8:6b:63:89:a4:a6:d0:8a:9f:74:ef:
                    ab:91:de:0c:da:54:eb:d8:c1:31:5c:8f:5c:74:78:
                    39:bd:b9:50:46:33:be:85:e7:2c:3e:67:3c:68:17:
                    0e:7e:51:53:31:07:7b:fe:05:00:88:04:91:c0:8d:
                    4f:54:c1:3c:a2:7f:ed:25:35:9a:42:9a:22:b8:49:
                    2b:67:72:65:78:ce:82:4c:69:2e:11:a6:23:a0:93:
                    f1:aa:a2:fd:a3:46:97:7f:23:b4:f9:7d:80:01:d6:
                    37:a2:34:b5:0c:fc:83:95:82:67:1d:d4:42:af:3d:
                    8d:3a:17:bc:40:11:5e:0b:7d:60:cd:d0:8e:92:d2:
                    5c:7c:20:94:5c:17:b8:fa:eb:31:e3:5d:8a:2b:33:
                    eb:56:8d:82:14:72:a8:7b:eb:56:d7:d1:f6:c9:0a:
                    e3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:66:DE:19:4E:9F:C3:6D:CE:D4:99:5A:54:3F:1C:EE:46:19:A3:F5
            X509v3 Authority Key Identifier:
                keyid:56:2E:8E:05:0D:38:45:02:EB:79:7F:5E:94:49:31:A6:6F:DD:55:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vi6OBQ04RQLreX9elEkxpm_dVVo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/c2f182-bb67-43d8-8ea5-95c5001bfc70/1/Vi6OBQ04RQLreX9elEkxpm_dVVo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:27:95:20:63:82:ab:b2:76:3e:c1:d9:1b:bc:91:92:e6:ef:
         11:74:13:c9:1d:72:48:e2:8b:b5:1e:16:66:90:b4:15:4f:fc:
         c3:f7:38:4c:f3:e4:13:c5:64:8f:d1:c3:69:3c:31:8a:89:0d:
         55:00:d4:fb:db:be:27:aa:ea:a3:a9:91:12:60:87:06:e0:75:
         ea:dc:0c:a4:a7:29:f3:58:56:61:70:12:0d:16:a3:5e:3a:3c:
         05:d9:ed:e2:e5:7a:77:33:0a:37:d9:d3:e4:c0:76:74:10:99:
         0c:bf:3c:9e:1d:1d:87:13:95:e8:3e:02:d0:e1:28:93:93:63:
         f5:2a:ec:bd:67:f5:44:c2:ac:cd:78:ae:3d:c3:86:0e:6e:cf:
         58:e4:20:91:c5:85:87:05:19:17:22:94:65:39:a5:8e:ff:44:
         6c:6a:ec:ec:d7:f3:c3:97:e0:30:82:62:ce:53:80:5c:48:a7:
         3e:db:b0:f2:07:4a:6d:20:5c:9b:db:34:ba:e6:74:2a:22:3c:
         bf:de:5a:33:bd:1d:3a:b6:a5:4e:85:16:bd:eb:1b:6f:67:b4:
         eb:38:f7:43:25:9a:a9:cb:6a:43:9a:2e:45:85:63:8b:0c:55:
         1c:6f:f2:36:59:58:37:b1:a3:b3:40:e2:62:54:e7:68:82:57:
         d5:9f:9e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+q9jI3hkjVUEAlAG1KDZ89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MmU4ZTA1MGQzODQ1MDJlYjc5N2Y1ZTk0NDkzMWE2NmZk
ZDU1NWEwHhcNMjYwNzI4MjMwMTI5WhcNMjYwNzI5MjMwMTI5WjAzMTEwLwYDVQQD
Eyg1YTY2ZGUxOTRlOWZjMzZkY2VkNDk5NWE1NDNmMWNlZTQ2MTlhM2Y1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqseFvZRJ0GDTUqCuGvIRFXHUx6/K
1+HM87vClOecxmxaji0atyO5VB7Q6fbZ3QGojgK2XA0g2GwgWNWGk+kcZ3bCZwjc
2YEB1WDVFjtMZhYSshuzG4sz4EpPbD5CuGtjiaSm0IqfdO+rkd4M2lTr2MExXI9c
dHg5vblQRjO+hecsPmc8aBcOflFTMQd7/gUAiASRwI1PVME8on/tJTWaQpoiuEkr
Z3JleM6CTGkuEaYjoJPxqqL9o0aXfyO0+X2AAdY3ojS1DPyDlYJnHdRCrz2NOhe8
QBFeC31gzdCOktJcfCCUXBe4+usx412KKzPrVo2CFHKoe+tW19H2yQrjTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpm3hlOn8NtztSZWlQ/HO5GGaP1MB8GA1UdIwQY
MBaAFFYujgUNOEUC63l/XpRJMaZv3VVaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUt
OTVjNTAwMWJmYzcwLzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9jMmYxODItYmI2Ny00M2Q4LThlYTUtOTVjNTAwMWJmYzcw
LzEvVmk2T0JRMDRSUUxyZVg5ZWxFa3hwbV9kVlZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHSeVIGOC
q7J2PsHZG7yRkubvEXQTyR1ySOKLtR4WZpC0FU/8w/c4TPPkE8Vkj9HDaTwxiokN
VQDU+9u+J6rqo6mREmCHBuB16twMpKcp81hWYXASDRajXjo8Bdnt4uV6dzMKN9nT
5MB2dBCZDL88nh0dhxOV6D4C0OEok5Nj9SrsvWf1RMKszXiuPcOGDm7PWOQgkcWF
hwUZFyKUZTmljv9EbGrs7Nfzw5fgMIJizlOAXEinPtuw8gdKbSBcm9s0uuZ0KiI8
v95aM70dOralToUWvesbb2e06zj3QyWaqctqQ5ouRYVjiwxVHG/yNllYN7Gjs0Di
YlTnaIJX1Z+ekQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:46:36 2026 by rpki-client