Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
File:                     VIS1PsBp4wJiNZb7OqefXXgsCfk.mft (raw, json)
Hash identifier:          ndB9p3e8J2I/ieSVKMiMUgrA2w2c7zEqCWezMwrszbI=
Subject key identifier:   5C:F3:AF:2A:46:57:BF:8E:85:D9:24:65:A8:7B:C8:9D:87:12:F9:F5
Authority key identifier: 54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9
Certificate issuer:       /CN=5484b53ec069e302623596fb3aa79f5d782c09f9
Certificate serial:       019FAC7715D51BA8B3D3AE34E30387B61971
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
Manifest number:          19D8
Signing time:             Wed 29 Jul 2026 06:01:53 +0000
Manifest this update:     Wed 29 Jul 2026 06:01:53 +0000
Manifest next update:     Thu 30 Jul 2026 06:01:53 +0000
Files and hashes:         1: 0DAR2RR_cEGvc-FRtkmZdZD0bB8.roa (hash: /HvFt9zC5hQxuKNJ2ImOGVZ/AEK8wykLij6mmaEwUto=)
                          2: VIS1PsBp4wJiNZb7OqefXXgsCfk.crl (hash: ai0ba14z0H+BF0gx3sjWRpYnn0Llgp8/3+XDIAD5p/w=)
                          3: _IilOXVosSGn0xT4w9l86PSQHSg.roa (hash: kkKZn8vGZjJeRq+m66DVHW162ognkKyL1mjJjwY8qJs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 06:01:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:77:15:d5:1b:a8:b3:d3:ae:34:e3:03:87:b6:19:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5484b53ec069e302623596fb3aa79f5d782c09f9
        Validity
            Not Before: Jul 29 06:01:53 2026 GMT
            Not After : Jul 30 06:01:53 2026 GMT
        Subject: CN=5cf3af2a4657bf8e85d92465a87bc89d8712f9f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e7:83:54:e6:a9:5d:87:57:6e:e1:37:d3:dd:
                    21:8b:98:f6:6d:41:28:45:2f:79:7f:a3:97:82:31:
                    e5:1d:01:60:91:8b:52:a4:69:1a:bb:9a:f6:d1:f3:
                    f8:0f:ca:b4:d5:03:9f:6e:89:74:85:a6:b6:03:bc:
                    ec:94:7e:4b:ff:92:ad:68:4b:65:1c:cc:83:14:11:
                    04:57:f8:fd:32:e1:96:8a:84:05:41:8a:a3:34:93:
                    7d:45:04:5c:f4:2a:ce:4f:98:69:a4:0d:ed:ba:69:
                    3d:8a:c2:49:a3:e3:58:de:fd:25:48:c2:4f:ef:17:
                    2e:40:ea:f2:74:a4:74:14:ae:f2:04:e3:b2:7e:6d:
                    5b:56:df:f0:fc:97:c4:76:84:98:4b:24:02:17:ca:
                    34:0a:9a:1f:17:3f:70:4a:d5:df:57:c9:20:f2:7b:
                    89:a5:70:3f:9e:a6:14:42:fd:fd:a0:74:d7:4d:39:
                    67:68:3b:8a:be:dc:17:20:e7:dc:aa:ec:bd:f3:cd:
                    d6:35:c5:c7:ef:a1:04:14:00:c1:1f:23:98:51:10:
                    24:02:ae:13:f1:7d:78:d6:d1:b4:3b:2f:c3:64:86:
                    ff:98:58:c8:35:73:24:60:5b:b6:cf:7c:95:45:6a:
                    dd:99:1c:cb:20:1b:71:53:a3:45:45:9b:32:15:15:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:F3:AF:2A:46:57:BF:8E:85:D9:24:65:A8:7B:C8:9D:87:12:F9:F5
            X509v3 Authority Key Identifier:
                keyid:54:84:B5:3E:C0:69:E3:02:62:35:96:FB:3A:A7:9F:5D:78:2C:09:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIS1PsBp4wJiNZb7OqefXXgsCfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/ca618c-35ce-4d31-bb89-ce8dd6898b27/1/VIS1PsBp4wJiNZb7OqefXXgsCfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:be:45:27:aa:4f:b4:59:cc:da:4e:b4:23:4f:16:ac:e2:7d:
         e4:ec:5d:f5:16:5e:46:25:2f:65:b9:49:26:21:89:d7:81:86:
         de:f0:a0:fb:cd:9a:8a:61:fe:c0:10:18:7f:b4:b4:64:42:f4:
         48:d2:61:b3:bd:2d:e1:5b:b6:22:40:d8:c5:76:df:8e:ce:43:
         a0:0c:92:03:1e:b6:60:37:5f:5a:1e:00:86:0f:d4:56:34:1a:
         58:90:e5:4f:fe:ca:be:51:e1:c3:8a:18:b9:bf:b3:63:b6:9e:
         57:6f:4c:f6:cb:09:3b:d3:58:5e:38:23:fa:9e:2b:37:2b:8f:
         24:9b:e9:86:01:72:ad:b2:66:3f:26:3a:77:e8:8e:b9:f2:e9:
         3b:fe:39:81:ff:46:72:41:e0:f8:b4:8a:e2:ea:73:f2:1a:92:
         16:45:9f:4c:3b:7e:c0:a9:79:fe:9e:10:ad:c3:7f:63:dc:0b:
         0a:e2:df:8b:b4:8b:c0:3f:69:10:3f:c9:47:55:9b:16:b3:5c:
         2a:ed:c0:e7:a2:86:39:b7:3e:0f:6c:eb:4e:52:4d:80:f8:20:
         d1:09:cd:1d:e5:13:6a:b2:d7:84:bd:32:3b:43:76:96:4f:e8:
         ba:fb:81:4c:2e:34:1e:86:11:69:9e:96:07:cd:17:3f:86:a1:
         aa:5a:57:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 10:10:46 2026 by rpki-client