Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File:                     vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier:          wz3oG3rM/fNB8WejUsJ8JUT55KUup6dYKhwX9AGAaIk=
Subject key identifier:   E1:7B:53:FC:35:E4:67:2C:B9:E6:B2:16:FD:58:F8:CF:D2:C7:90:D1
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer:       /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial:       019FAABE736E7D5D665E4D2C894D166938AE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number:          19D8
Signing time:             Tue 28 Jul 2026 22:00:35 +0000
Manifest this update:     Tue 28 Jul 2026 22:00:35 +0000
Manifest next update:     Wed 29 Jul 2026 22:00:35 +0000
Files and hashes:         1: ElvcpU3TMsmMMwxmUDpBI9j8a-U.asa (hash: pMbfMn8GoeeG6ylSUjS62TeRwsoRtXBNLz07ylZ0fpc=)
                          2: o3neLyji5IioxyX3Ca35svHR-7M.roa (hash: hvV86OxH4a8ZTKhcyjTKk6ffNETXTnUcBs1BRqExbys=)
                          3: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: phHjxY2+8iQFrPNdGSno7LBCA3B9qPJbgjTXbNol2kM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 22:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:be:73:6e:7d:5d:66:5e:4d:2c:89:4d:16:69:38:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
        Validity
            Not Before: Jul 28 22:00:35 2026 GMT
            Not After : Jul 29 22:00:35 2026 GMT
        Subject: CN=e17b53fc35e4672cb9e6b216fd58f8cfd2c790d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6f:46:ab:31:1b:e1:4a:06:7b:72:0a:23:29:
                    72:74:0c:d3:64:2d:01:a8:5d:15:d0:d7:09:82:76:
                    b4:ae:68:cc:64:db:b3:fd:63:73:70:65:ae:64:e2:
                    2e:b9:82:4f:5d:d3:51:77:82:06:60:86:af:06:2b:
                    0f:d7:c1:83:c8:d2:1a:dc:e6:ba:a1:99:85:70:f7:
                    07:5a:82:a5:27:2c:98:f6:62:f2:91:c5:cf:00:7b:
                    1d:eb:36:be:77:68:8d:9a:fc:9a:63:70:3c:c6:01:
                    88:3c:ea:3e:6a:d1:c1:92:e7:ff:80:dc:8d:40:d5:
                    af:3f:53:63:ae:58:22:4c:c7:08:7c:06:29:44:4a:
                    a7:55:57:14:1f:2b:51:44:84:0d:2b:c0:cb:21:8d:
                    4c:85:74:b1:d9:3d:7a:f8:e4:fd:27:ea:32:1d:1c:
                    65:80:86:10:94:95:1f:a9:79:65:39:ec:bf:15:96:
                    21:a4:39:6a:8c:18:f2:d1:92:cb:ce:b3:8c:f8:b5:
                    4d:47:15:62:70:b5:ae:44:a8:e9:52:64:eb:04:b1:
                    b8:0a:d2:36:a2:68:03:8c:f4:53:bc:d9:c2:7c:e9:
                    02:64:2d:bb:6f:0f:81:1e:9f:fa:96:79:9c:eb:55:
                    10:c4:56:36:ba:40:1f:dd:ef:9b:63:ad:ab:91:d0:
                    58:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7B:53:FC:35:E4:67:2C:B9:E6:B2:16:FD:58:F8:CF:D2:C7:90:D1
            X509v3 Authority Key Identifier:
                keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:c0:f8:4e:15:d4:7d:05:6b:63:fd:63:ad:b5:b3:1d:e4:20:
         eb:30:93:dc:8a:38:0a:3c:64:08:f6:3b:b9:74:93:91:82:22:
         59:27:b0:89:dc:de:b7:06:8c:2b:d2:4a:89:ed:2e:de:1a:ee:
         6b:6a:2b:dd:5a:6a:11:81:55:9b:e1:fb:70:02:89:00:69:f1:
         ba:95:b7:b0:3e:3a:ef:b6:15:3e:23:62:93:a9:5a:5e:2f:de:
         93:04:17:41:e2:53:3f:b9:69:00:ed:7b:9c:02:15:5e:db:a3:
         3f:60:6e:68:31:59:ae:6c:29:91:86:c9:fa:83:ad:ac:36:23:
         5d:d5:6a:90:a7:c2:9b:fc:11:88:1f:74:9d:7e:df:85:1a:5f:
         32:22:51:09:ae:ec:c9:8c:3e:3b:92:a3:1b:db:be:82:d2:00:
         94:c8:8e:d7:60:e6:df:83:93:56:b9:2d:65:52:75:ac:e4:3f:
         cb:cd:5f:41:52:7b:3d:5e:48:de:98:cc:e4:64:07:87:ff:33:
         b1:af:4b:e1:41:82:12:12:ca:94:e1:27:de:e7:a5:44:6e:3e:
         01:30:9f:bf:01:84:2b:c9:67:28:26:65:88:c1:a4:e5:0a:63:
         c0:14:ed:73:98:b4:19:73:b7:0f:48:ad:ac:f6:46:30:e5:e3:
         9f:3c:b3:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 02:41:39 2026 by rpki-client