Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
File:                     VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft (raw, json)
Hash identifier:          cpDQyX9IFn8Gp/OiQqwM1gJuIPOKZmkyQhZHhmTz7LU=
Subject key identifier:   6D:A1:5E:4A:01:DD:88:1A:79:ED:EF:10:87:C1:DA:40:66:B6:84:C1
Authority key identifier: 54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59
Certificate issuer:       /CN=5420cc313d6913848e00e1ff5782e394c1f60159
Certificate serial:       019FA9E284A3CAC02E758D366BFEBAD7FA2A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
Manifest number:          01D9
Signing time:             Tue 28 Jul 2026 18:00:22 +0000
Manifest this update:     Tue 28 Jul 2026 18:00:22 +0000
Manifest next update:     Wed 29 Jul 2026 18:00:22 +0000
Files and hashes:         1: FEZcGILq0RJkqpR3v0nAOFFCrfU.roa (hash: E1Ip63mxX4LJOavcsggcPzPHjg1eKYsarcFaMSWGofA=)
                          2: VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl (hash: hdzEIFFPb37n9qnTx8zdFcAjBoDcnZx7D29Yj8Soq7I=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:e2:84:a3:ca:c0:2e:75:8d:36:6b:fe:ba:d7:fa:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5420cc313d6913848e00e1ff5782e394c1f60159
        Validity
            Not Before: Jul 28 18:00:22 2026 GMT
            Not After : Jul 29 18:00:22 2026 GMT
        Subject: CN=6da15e4a01dd881a79edef1087c1da4066b684c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:12:33:64:7b:2b:b1:1e:c6:d8:af:ad:5c:3e:
                    44:94:75:93:f0:72:42:61:5b:53:4c:d0:d2:39:21:
                    a4:01:f3:8b:66:a7:c0:88:7e:81:e4:1b:9e:61:29:
                    9a:a8:ff:aa:b4:fe:27:ac:f3:a6:8a:f8:1a:dd:8a:
                    11:08:0f:8a:88:d7:d9:0c:a9:2f:e4:4f:ef:73:46:
                    8d:5f:49:96:3b:9e:a6:ab:ee:cc:04:96:1b:a4:85:
                    b4:99:84:c8:b1:16:ed:3f:6e:0d:29:3c:0f:0c:0e:
                    90:83:76:89:ee:77:cf:ec:a7:f5:11:8c:0f:a1:bc:
                    8e:ba:52:d5:8f:dc:7b:72:ea:69:f3:10:b7:bb:72:
                    ed:c5:e8:e7:36:9c:cb:8d:41:c4:86:ab:76:60:88:
                    ab:5b:52:05:83:f9:ce:42:5c:81:58:b5:ac:90:ad:
                    b9:0a:52:05:89:c5:a9:40:d0:16:07:29:15:af:e8:
                    c3:9e:d7:a5:b3:53:da:de:8b:cb:b5:d3:6c:3d:58:
                    e7:83:3c:58:ca:1f:6c:bc:19:10:8c:21:d0:12:cb:
                    c0:03:b5:85:65:21:86:1a:0a:93:1a:c3:3a:2d:21:
                    18:39:8a:d4:b1:b5:3b:aa:cb:d5:c8:ea:33:07:e9:
                    66:51:9a:8c:c9:89:0c:c3:61:77:ec:9d:16:e0:0a:
                    a3:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:A1:5E:4A:01:DD:88:1A:79:ED:EF:10:87:C1:DA:40:66:B6:84:C1
            X509v3 Authority Key Identifier:
                keyid:54:20:CC:31:3D:69:13:84:8E:00:E1:FF:57:82:E3:94:C1:F6:01:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCDMMT1pE4SOAOH_V4LjlMH2AVk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/c3c246-b87e-40e0-9246-f0d5a9be7c2b/1/VCDMMT1pE4SOAOH_V4LjlMH2AVk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:6e:d7:a8:cd:bf:85:9e:d9:1e:2f:56:12:c6:2d:d3:05:f0:
         aa:79:b0:00:d6:0a:66:ec:15:67:0e:21:83:f4:8f:fb:22:6b:
         23:96:19:c3:ad:06:e7:d6:53:5e:37:b6:de:62:fa:83:b8:9d:
         9e:60:e3:85:de:f3:3e:b7:24:29:34:d7:72:0d:24:88:7f:7c:
         3a:39:2d:59:5f:c2:8b:a7:3d:d4:35:ee:57:50:72:f4:90:95:
         af:65:6e:8c:e9:c4:d6:9f:b4:0b:fe:c8:36:ab:44:bd:18:88:
         cd:4c:b1:b6:91:86:05:9f:8d:c8:4e:26:74:ab:47:b0:4d:42:
         a9:eb:80:99:01:ca:91:04:f8:18:f3:68:b3:83:e1:c8:40:4c:
         a4:77:aa:fa:db:c6:7c:89:45:25:e6:be:c4:0d:b9:5c:a8:19:
         e9:48:5e:00:11:61:6b:46:ef:d3:18:02:dd:74:f8:31:43:14:
         e5:a1:22:46:a3:54:3b:5a:99:96:c6:a1:9f:3c:53:4d:03:26:
         08:9c:a5:3a:78:b2:7a:5f:8b:ad:32:e3:fd:8a:7a:a3:f4:20:
         e3:3c:36:a6:c2:f4:86:77:56:3d:92:bd:62:a8:f0:48:d6:1a:
         4d:9a:6a:a8:a9:d1:85:d4:fc:2a:66:db:34:ba:57:a4:11:9f:
         04:f4:1c:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:24:14 2026 by rpki-client