Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File:                     vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier:          nR80GYqM0CP4cpDTs1Yx/aADWQTuK+xTWMO1cdAXOcQ=
Subject key identifier:   B0:FF:48:0C:1C:15:1B:35:BD:C5:7C:B5:65:50:15:87:19:4E:C8:1F
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer:       /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial:       019FAA19F44E9CA27F6C3FF94BFEA4594884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number:          19CF
Signing time:             Tue 28 Jul 2026 19:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:55 +0000
Files and hashes:         1: Q2LlNZpjm7QSfpQ8SxDMKPen6fs.roa (hash: +LvudqksRpkI5ThHyJo6o0SESZrwUB4lFuLcKBfvGGo=)
                          2: lb9dWd03BfnM72HsEUOqMfSXM5c.roa (hash: RJsPG6DuVrowjWLhY1jcZaBG3s9HD98PpDetQPQtNn0=)
                          3: n8D_NKCQjks2jeuzf-VmDEGhJy0.roa (hash: BxlSKmYiJSjve5WPsQ9b002bw4r8+dfXErMK1Yu3iW0=)
                          4: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: SSumH3f6K1OoTQxZWDYaRUZyUoe+KqT2VdBLn1KfSqA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:f4:4e:9c:a2:7f:6c:3f:f9:4b:fe:a4:59:48:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
        Validity
            Not Before: Jul 28 19:00:55 2026 GMT
            Not After : Jul 29 19:00:55 2026 GMT
        Subject: CN=b0ff480c1c151b35bdc57cb565501587194ec81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:a7:ff:21:f9:d1:19:fb:4b:19:82:32:11:c5:
                    1b:f6:ea:ac:ff:d4:fd:60:36:f2:8e:f4:d3:a3:c8:
                    e8:35:37:17:28:62:f9:bc:74:9f:66:fe:4e:37:a5:
                    6e:b0:0f:07:eb:b3:6d:84:1a:86:e8:af:46:2e:e3:
                    7e:91:10:90:6e:46:3f:e0:db:94:44:cf:d3:9f:b1:
                    68:17:7a:4f:9d:15:1c:aa:35:97:c1:3a:4e:7f:81:
                    df:58:f9:6b:a2:96:4c:0a:89:75:b7:b2:62:24:42:
                    f1:38:2a:bc:e4:d2:97:c6:19:6d:e2:e2:cb:16:9b:
                    43:88:a7:8d:36:9b:f9:49:66:86:7c:06:4a:1e:b3:
                    27:39:2e:e0:30:f8:8c:a1:9e:ed:ac:0d:61:ab:db:
                    2f:a4:60:22:47:bf:50:b4:a4:68:e3:f2:67:6a:dc:
                    2b:3f:78:8b:32:47:2a:d3:49:f9:b4:e8:13:09:81:
                    9b:c5:db:8e:b6:fd:6e:c0:54:75:9b:08:aa:ef:d7:
                    42:75:11:d8:4e:42:6f:45:67:80:fd:db:3d:6e:43:
                    3f:16:32:62:81:3b:dc:53:78:80:2e:47:9f:cc:48:
                    5b:08:e1:a9:57:29:7a:e9:27:cc:8f:e7:01:e3:fe:
                    04:12:e7:e1:94:c0:97:64:9f:6d:03:11:de:c8:35:
                    0f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:FF:48:0C:1C:15:1B:35:BD:C5:7C:B5:65:50:15:87:19:4E:C8:1F
            X509v3 Authority Key Identifier:
                keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:d4:27:f6:30:4b:6c:e7:88:c4:29:47:20:0a:f1:9d:9c:
         24:e5:26:8f:50:b4:cf:ae:fb:48:10:89:4e:7e:45:74:29:5d:
         61:ff:52:83:5b:8c:e4:0c:ea:71:98:33:02:d7:f6:aa:83:8c:
         05:f4:e8:b4:6b:44:22:0f:f6:89:3a:b6:a1:ca:2e:92:36:9c:
         8e:fc:b9:db:48:d0:90:06:c8:53:3a:ea:ec:88:ab:f0:82:ee:
         e9:55:5a:dc:30:1c:31:09:56:1b:c8:19:fe:90:57:e3:6c:d2:
         37:7d:4a:37:b9:cb:72:c5:76:b3:00:d2:6c:71:b4:4b:61:5b:
         18:d6:d7:84:8d:10:30:53:1f:0c:de:3f:4a:e5:d9:d0:b9:6b:
         19:49:25:a7:00:35:db:88:32:30:fa:12:ab:bc:12:7f:4c:ad:
         15:29:d7:55:24:53:04:9f:7b:97:e3:2a:15:81:2c:82:5d:7c:
         cc:99:ad:e3:c9:76:f0:f5:0b:9f:b9:2c:8a:14:a6:40:5b:8b:
         93:a1:0b:8a:b3:0a:49:06:a8:4e:58:02:da:ea:d0:63:8a:08:
         33:20:ea:5f:62:6d:68:27:e2:72:88:2c:9f:d3:db:cb:f4:57:
         b4:ae:e1:bd:92:43:b4:0d:8d:82:2d:94:5b:00:f7:a8:77:a4:
         92:4e:c3:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:44:42 2026 by rpki-client