Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          FZ/AHmMvg3vD6AWa7YLjZMw5ZSJFVbEfOVJ48Bv+weY=
Subject key identifier:   9C:21:89:AE:85:13:B3:F9:76:DF:33:A9:5C:D7:22:E9:09:D0:51:6B
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019FABD1404F02D6E203050B071A51BDA3EB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          1623
Signing time:             Wed 29 Jul 2026 03:00:44 +0000
Manifest this update:     Wed 29 Jul 2026 03:00:44 +0000
Manifest next update:     Thu 30 Jul 2026 03:00:44 +0000
Files and hashes:         1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: P5rHgF6EKJCeWG4dnbJWf3sAc7QNOxoDUXBY82uQJTM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 03:00:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ab:d1:40:4f:02:d6:e2:03:05:0b:07:1a:51:bd:a3:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Jul 29 03:00:44 2026 GMT
            Not After : Jul 30 03:00:44 2026 GMT
        Subject: CN=9c2189ae8513b3f976df33a95cd722e909d0516b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c4:2f:84:62:c4:ab:89:15:3b:a1:28:ae:ec:
                    ce:a0:68:d8:06:c3:24:95:10:40:67:c9:47:77:25:
                    eb:61:d0:70:c4:3f:1c:d8:c8:61:97:9f:97:9c:9d:
                    e1:b8:69:21:49:a4:c3:53:b2:fc:93:05:4d:25:a0:
                    8f:ec:95:36:3c:5b:57:de:25:d3:3a:cd:fb:d0:66:
                    2f:73:d1:47:5e:6e:2e:57:92:ea:f1:4c:0c:da:7d:
                    26:c5:ab:65:b5:ef:98:ce:09:e9:dc:66:8a:18:01:
                    87:74:07:40:33:30:51:10:f3:1e:93:24:9e:e6:91:
                    54:f0:ac:d5:aa:24:40:e4:e2:9a:2d:b1:61:7b:ae:
                    1c:1e:4a:51:ac:1d:a2:fe:9a:c8:c3:96:e3:84:69:
                    1f:f3:32:9e:5e:9e:09:e0:3e:8d:0d:59:84:08:14:
                    aa:29:15:65:11:f3:a0:7f:ea:52:e0:f9:15:5f:f7:
                    f0:79:7b:39:2e:c1:5a:0f:1d:e5:36:7e:fa:03:ab:
                    8c:23:e0:23:8d:3f:fe:e0:c4:27:c2:e2:a1:0a:4a:
                    6d:da:14:5d:a5:39:8d:a1:bf:b8:0c:82:c6:62:52:
                    07:26:96:54:44:89:e7:e0:c1:1f:27:14:bc:d1:5f:
                    2e:65:2d:7f:20:4f:2c:f8:56:6e:b8:9a:06:f4:a6:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:21:89:AE:85:13:B3:F9:76:DF:33:A9:5C:D7:22:E9:09:D0:51:6B
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:2a:0e:f8:c3:d5:10:24:de:3d:7e:e0:d7:94:a4:a8:d9:1d:
         ad:32:5c:09:d0:3f:e1:3a:d8:fc:2b:3b:d0:3f:3d:ec:85:22:
         71:e3:c3:da:96:66:a3:19:6e:f3:71:39:40:b0:b3:f9:2a:85:
         7e:aa:63:22:5f:f7:15:16:b1:60:18:cf:95:ef:fb:06:cd:f5:
         e6:5e:d7:a0:a3:2e:9f:fc:35:bc:f8:2c:d8:35:f8:05:54:78:
         8f:db:00:bd:a3:a1:85:e5:65:43:8b:de:6d:d7:07:ce:5e:0a:
         e7:10:7e:c1:75:3e:bb:88:c2:a5:a7:23:bc:45:a3:54:e6:8f:
         51:ef:0f:fa:06:e1:25:9c:b8:e9:0f:48:8e:26:0a:35:64:0f:
         7b:66:21:51:ad:67:04:df:c5:98:ba:e6:ac:8e:77:0b:d6:6b:
         ff:0e:71:0e:92:14:72:89:7d:f2:48:01:f1:4c:a7:00:2a:61:
         a2:00:94:2e:2e:0e:50:7e:48:ed:e8:45:66:37:68:0f:d0:7b:
         b9:c8:7d:1f:8b:4b:98:ae:99:b4:b5:43:11:cc:de:12:43:f7:
         2c:ff:0c:e8:8f:e2:7f:43:0d:1b:34:5e:ff:02:7c:7e:bd:bd:
         0b:97:35:5b:9b:59:7b:35:5d:cd:b7:cf:04:9f:37:ae:53:6a:
         84:61:e4:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:45:19 2026 by rpki-client