Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
File:                     vlULjv-QzM7p-NMTS2Q4mWt9J80.mft (raw, json)
Hash identifier:          XXH8WWXwUkwWibWiHrz53/aogFO3XPz/3rjYhr1wGIY=
Subject key identifier:   DE:19:F4:58:57:FD:EA:49:BC:04:20:2C:51:29:7F:BB:17:80:5A:AE
Authority key identifier: BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD
Certificate issuer:       /CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
Certificate serial:       019FA9E2E85FF65987AD92A3B5E6C185D386
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
Manifest number:          171A
Signing time:             Tue 28 Jul 2026 18:00:47 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:47 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:47 +0000
Files and hashes:         1: PD8_vExYu3KUb8isykPPtNCFhgs.roa (hash: UcYqm/JU5CkglEED1zRFsnuJkQ9M5OPzFIAxmHS6sX8=)
                          2: txsQwV5nWIDxV7UxfBhka_l-5tE.roa (hash: 9KN/hXODRchfuBvujxl5Gu781hmuuIf/qjbAUFRAYqI=)
                          3: vlULjv-QzM7p-NMTS2Q4mWt9J80.crl (hash: uL7o5A8mlqbN7ansbTeap8pU5paK3YOlTvCUKUPUO5A=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:e8:5f:f6:59:87:ad:92:a3:b5:e6:c1:85:d3:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be550b8eff90cccee9f8d3134b6438996b7d27cd
        Validity
            Not Before: Jul 28 18:00:47 2026 GMT
            Not After : Jul 29 18:00:47 2026 GMT
        Subject: CN=de19f45857fdea49bc04202c51297fbb17805aae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6a:c4:29:e7:5a:79:2e:ea:7b:eb:06:81:97:
                    77:06:7c:5a:bb:62:7e:62:ff:17:00:85:c0:7e:26:
                    c6:ca:ce:e3:6a:88:5d:c6:a8:c2:a7:f4:b5:f3:10:
                    f8:59:5d:cc:29:95:8d:2b:5a:b3:84:ab:54:0b:5f:
                    c6:cc:2b:da:ef:fd:88:1b:18:37:1c:e8:0c:5c:12:
                    18:e1:c0:55:f5:ee:84:d8:36:38:24:b5:95:ad:df:
                    97:9f:f6:65:00:f2:2b:54:47:a4:44:2c:74:5f:08:
                    67:df:0f:f9:16:84:a9:e6:9b:3b:91:df:4c:ca:95:
                    3e:94:e9:72:e4:54:7b:89:db:18:55:a2:73:dc:48:
                    ca:93:b1:61:d6:aa:76:c8:bb:2d:b0:49:72:70:a3:
                    00:4d:4d:11:26:41:b3:82:a8:e6:97:47:93:bf:dc:
                    20:05:e1:3d:4f:a7:0b:17:c5:50:7d:96:09:78:00:
                    70:5b:b5:38:56:e9:19:b4:6e:ea:e3:a9:90:3c:ba:
                    ce:0c:79:18:86:ad:7c:17:56:c7:f6:94:d5:65:c5:
                    9b:e8:c8:71:b1:31:8c:52:ae:9d:27:2b:59:8d:69:
                    2f:dc:e9:f7:85:0e:25:91:ed:0b:55:6c:da:ec:2f:
                    54:c9:23:18:55:62:7a:08:86:cc:61:a0:bf:ce:ca:
                    a7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:19:F4:58:57:FD:EA:49:BC:04:20:2C:51:29:7F:BB:17:80:5A:AE
            X509v3 Authority Key Identifier:
                keyid:BE:55:0B:8E:FF:90:CC:CE:E9:F8:D3:13:4B:64:38:99:6B:7D:27:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlULjv-QzM7p-NMTS2Q4mWt9J80.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/32/340dcd-3aee-4012-9233-c15532baff7d/1/vlULjv-QzM7p-NMTS2Q4mWt9J80.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:30:8c:45:14:66:45:1d:47:72:93:31:83:f5:fa:a0:82:8f:
         e9:05:05:a0:6b:64:04:30:a8:01:30:04:51:d9:54:97:d0:5c:
         e9:bd:35:05:64:63:4f:4d:ae:15:84:91:90:1c:b3:05:47:71:
         46:dd:5e:11:05:ea:19:bf:58:b8:bf:b6:6d:c4:cf:36:93:d0:
         33:48:fb:d2:38:e6:27:0b:70:12:62:f1:b9:b4:f8:d5:ff:e9:
         c0:43:15:de:d8:f1:98:00:ea:19:1b:cb:81:1c:5a:9b:a4:0d:
         a7:af:92:21:07:d3:7e:4e:2b:54:90:bf:3a:a5:28:a2:ac:a3:
         bf:a7:ce:1b:8b:c0:50:76:ec:62:6b:73:fb:54:42:6c:92:6d:
         a5:96:e6:5f:d2:d2:14:6d:c9:d2:1c:be:c0:02:93:f4:ad:93:
         91:ac:e4:bb:dc:8d:3f:63:88:43:9c:0b:0b:f1:b4:16:0f:85:
         19:bb:41:38:58:01:54:07:f3:67:45:d9:6b:7f:06:fe:7f:07:
         77:75:35:98:08:30:88:32:9c:b7:2b:d8:53:30:49:b5:0b:d8:
         7e:34:64:eb:00:a7:63:b6:14:6c:ef:27:69:b7:71:d5:9b:d0:
         f0:2d:a2:87:04:a0:a0:e9:f6:4d:eb:79:04:07:1e:53:11:62:
         53:5f:df:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 23:08:35 2026 by rpki-client