Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
File:                     vptUWMI322WEjLKsvsbblCP8s6Y.mft (raw, json)
Hash identifier:          e3Qp4kcFBvT48ZUff9mqMr/8FztJtRXvOvkeJQgGuhk=
Subject key identifier:   BF:4F:5C:9C:7E:F5:93:32:7E:CF:C2:A2:04:E6:BC:90:D2:4E:72:16
Authority key identifier: BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6
Certificate issuer:       /CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
Certificate serial:       019FAC3F670A1337B1AE25FA8BB235312F04
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
Manifest number:          156F
Signing time:             Wed 29 Jul 2026 05:01:04 +0000
Manifest this update:     Wed 29 Jul 2026 05:01:04 +0000
Manifest next update:     Thu 30 Jul 2026 05:01:04 +0000
Files and hashes:         1: kq-hWSmz-MFl73s5gbREYrag4Mo.roa (hash: F1nBzA9PPwvdvb6M3PbhCg7MtCLOKfzqRqmw7zMeMt0=)
                          2: vptUWMI322WEjLKsvsbblCP8s6Y.crl (hash: QKEhqkqa3D+wEQ2CNafB29s+SKsD6x2++dwZ4e2m2MA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3f:67:0a:13:37:b1:ae:25:fa:8b:b2:35:31:2f:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9b5458c237db65848cb2acbec6db9423fcb3a6
        Validity
            Not Before: Jul 29 05:01:04 2026 GMT
            Not After : Jul 30 05:01:04 2026 GMT
        Subject: CN=bf4f5c9c7ef593327ecfc2a204e6bc90d24e7216
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:95:30:8c:7f:7d:95:48:f7:7b:1e:94:62:94:
                    13:b2:7c:da:91:dc:5e:8a:29:fb:3d:47:89:b9:71:
                    a8:e4:3c:80:9c:4d:2b:ca:81:a7:81:cf:d3:7f:9d:
                    19:d6:0a:3c:be:f2:85:3f:15:ff:42:b0:aa:b0:09:
                    30:37:4f:d3:ac:11:b0:2a:4d:ee:27:d2:06:17:24:
                    74:16:4a:f2:92:58:da:7d:92:a7:41:1c:77:1d:a9:
                    fc:ec:6a:ab:56:66:0d:1a:a1:8a:4f:b9:b2:9a:67:
                    d5:b7:86:e6:67:49:55:2f:41:6b:53:49:e5:3d:d6:
                    1a:88:56:6a:9f:a5:6a:0a:41:94:10:6d:cb:15:bc:
                    ee:ed:13:c6:6a:ad:77:00:65:10:2d:ef:07:b8:bd:
                    6c:ff:11:49:41:7d:91:8d:01:c4:bd:58:d6:04:63:
                    05:67:79:1d:d0:bf:ef:5f:7f:5a:b0:61:20:a8:f4:
                    35:60:b7:44:83:59:2c:77:e8:83:bc:75:18:1c:7e:
                    51:1e:29:b2:fc:59:a7:83:0f:75:0f:31:68:ef:06:
                    be:0e:57:8f:d5:90:67:3c:01:96:6f:6a:7b:a2:cf:
                    fd:12:7d:49:a2:84:af:88:dc:8e:77:8e:30:72:48:
                    c7:cf:6b:6f:61:9d:fa:e1:ad:58:37:cc:35:42:a6:
                    8c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4F:5C:9C:7E:F5:93:32:7E:CF:C2:A2:04:E6:BC:90:D2:4E:72:16
            X509v3 Authority Key Identifier:
                keyid:BE:9B:54:58:C2:37:DB:65:84:8C:B2:AC:BE:C6:DB:94:23:FC:B3:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vptUWMI322WEjLKsvsbblCP8s6Y.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/cd1db3-2877-4f32-83c5-370b82e9f90b/1/vptUWMI322WEjLKsvsbblCP8s6Y.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:3a:ac:17:00:65:64:00:3e:1e:e0:3e:49:ce:fa:67:b2:
         0d:ff:b2:ab:fc:65:57:b1:c0:21:1c:9b:ff:e6:28:40:4e:67:
         c3:66:85:cf:79:1c:33:55:c2:7c:25:e6:d7:cf:1e:20:ad:93:
         dc:1f:4f:98:9d:95:31:85:24:64:93:90:f5:70:45:3f:53:67:
         91:47:dd:40:9f:50:23:83:14:38:71:66:91:3b:08:f8:4d:08:
         ca:2b:78:22:92:24:3e:7a:4b:e8:11:48:36:2c:98:17:02:52:
         24:2f:b2:a6:39:3f:1c:13:53:15:63:d1:e7:a3:1f:53:82:e7:
         bd:11:f3:5e:d1:87:91:7c:16:4f:74:51:23:52:85:74:c3:e9:
         c2:3c:51:10:af:63:40:77:44:86:dc:1d:2a:4c:29:c7:9a:b9:
         e4:2d:bc:04:7b:e1:88:30:34:50:59:4a:1e:67:47:2e:93:42:
         00:01:62:59:d2:b1:39:9a:c7:f6:c2:e1:cd:e6:05:52:c4:f1:
         d8:4a:cf:79:6f:17:34:1b:e4:b6:24:4a:b9:29:5f:ec:85:79:
         b6:a9:25:40:33:d4:29:70:3f:e0:cd:7f:ef:0c:86:5d:d6:d6:
         01:93:f6:c8:e6:7b:36:88:f3:62:e1:15:0b:0b:9f:5f:c9:8b:
         75:fd:61:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 15:21:46 2026 by rpki-client