Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          /yQ/IAkMNjFS7RSs4Pb5zoelz9s0ut5tjzqYUeyDtmg=
Subject key identifier:   A6:E2:D4:64:65:C0:66:C7:BB:5B:E7:45:20:0E:A0:91:BC:B2:54:E3
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       019FAA50860D441560722D23F5524C49B8CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          088C
Signing time:             Tue 28 Jul 2026 20:00:31 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:31 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:31 +0000
Files and hashes:         1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: F0tO+fq6BR5jfjVe5E8WP12l7u3Hr6yzaRMLT1uK9O4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:86:0d:44:15:60:72:2d:23:f5:52:4c:49:b8:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Jul 28 20:00:31 2026 GMT
            Not After : Jul 29 20:00:31 2026 GMT
        Subject: CN=a6e2d46465c066c7bb5be745200ea091bcb254e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:18:a4:73:d0:05:91:88:95:fe:f3:7f:47:88:
                    6a:62:77:31:bc:d7:7f:11:f8:f5:09:ab:72:21:ab:
                    96:72:01:1d:5a:8c:66:c6:10:f1:a1:03:18:82:78:
                    05:d5:3b:b4:b5:ba:25:c2:2c:c5:03:01:03:f0:64:
                    5e:82:a4:b5:99:71:75:c7:60:53:f6:84:2b:75:03:
                    06:6d:11:66:64:45:29:d8:39:00:2f:a9:28:8b:81:
                    3b:0c:fa:c4:82:d8:f2:34:31:f9:e2:66:2b:ec:f7:
                    84:d7:11:16:35:08:ad:ed:ca:6b:c4:59:6e:d2:bb:
                    75:12:1a:5e:af:22:15:24:ae:6d:b3:cb:2a:35:27:
                    e4:7b:12:01:71:ae:84:5e:3b:83:1e:a8:6d:05:1d:
                    47:71:14:2d:c9:81:c8:6a:b3:dd:97:66:9c:f9:9f:
                    22:b0:cc:71:8d:79:72:d1:9f:9b:d1:a8:34:65:78:
                    ba:c5:53:fc:9c:c7:fd:62:48:6f:82:f7:d9:96:47:
                    ac:3e:45:01:44:a4:8f:64:c8:fd:6a:33:5e:91:c5:
                    29:41:6f:0f:71:65:34:2f:7f:18:aa:f9:89:f5:f7:
                    dd:bb:30:e1:60:86:28:b1:a9:0b:53:fc:f9:38:37:
                    ac:c4:6f:0f:37:22:2a:b3:d8:d6:a4:a5:71:94:6b:
                    fa:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E2:D4:64:65:C0:66:C7:BB:5B:E7:45:20:0E:A0:91:BC:B2:54:E3
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:79:4d:52:ff:59:1d:45:37:12:73:1e:3e:3e:bd:1b:b6:e6:
         59:8f:c4:0d:d7:ac:1d:5b:e3:ea:57:00:af:0c:d0:64:b1:5c:
         3a:09:50:f9:47:fc:7d:97:70:ab:0b:5c:fe:33:51:db:53:5f:
         0a:64:a3:3f:a7:53:a7:36:70:c3:40:a4:79:f2:15:56:af:39:
         2d:28:63:3d:8b:4d:39:08:35:dd:17:e7:4b:5d:bf:ce:b2:d7:
         23:c3:6a:ec:c2:6a:ac:ab:e6:32:c9:c3:a5:bc:b4:e7:5b:6e:
         bc:81:df:7e:77:62:35:a7:46:ef:54:5e:0e:f5:c0:9f:c3:a2:
         95:cc:28:01:df:3e:06:ba:07:30:cc:e0:3d:0c:86:3e:a6:61:
         74:7d:cd:da:b1:ab:98:9b:1c:48:d5:b0:7e:d3:75:de:48:05:
         7a:be:e3:83:5b:d7:07:65:e7:6d:49:10:9f:2c:f4:12:37:e7:
         30:90:16:b2:5c:49:3f:6a:cd:a6:bf:21:81:fe:55:d7:b6:11:
         f4:60:2b:02:1b:68:09:ee:36:65:cc:cf:3c:20:8d:27:f4:27:
         09:c7:99:63:2b:2a:5e:fa:56:c2:38:37:57:00:ae:dc:f4:02:
         83:1b:60:97:f5:aa:2b:82:e2:62:42:ab:38:4b:59:ae:1b:9d:
         a4:7c:df:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUIYNRBVgci0j9VJMSbjMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NDJiNzY2ZWY1N2Q2OWNmNGZiZGU0YmNiNmYwYWYwNmEz
YjIyMDYwHhcNMjYwNzI4MjAwMDMxWhcNMjYwNzI5MjAwMDMxWjAzMTEwLwYDVQQD
EyhhNmUyZDQ2NDY1YzA2NmM3YmI1YmU3NDUyMDBlYTA5MWJjYjI1NGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhikc9AFkYiV/vN/R4hqYncxvNd/
Efj1CatyIauWcgEdWoxmxhDxoQMYgngF1Tu0tbolwizFAwED8GRegqS1mXF1x2BT
9oQrdQMGbRFmZEUp2DkAL6koi4E7DPrEgtjyNDH54mYr7PeE1xEWNQit7cprxFlu
0rt1EhperyIVJK5ts8sqNSfkexIBca6EXjuDHqhtBR1HcRQtyYHIarPdl2ac+Z8i
sMxxjXly0Z+b0ag0ZXi6xVP8nMf9YkhvgvfZlkesPkUBRKSPZMj9ajNekcUpQW8P
cWU0L38YqvmJ9ffduzDhYIYosakLU/z5ODesxG8PNyIqs9jWpKVxlGv6xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbi1GRlwGbHu1vnRSAOoJG8slTjMB8GA1UdIwQY
MBaAFFVCt2bvV9ac9PveS8tvCvBqOyIGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMt
NzgzMDhiMmY1MjM0LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS80NDZlYmEtOWMwZC00NzY1LWIzZGMtNzgzMDhiMmY1MjM0
LzEvVlVLM1p1OVgxcHowLTk1THkyOEs4R283SWdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh3lNUv9Z
HUU3EnMePj69G7bmWY/EDdesHVvj6lcArwzQZLFcOglQ+Uf8fZdwqwtc/jNR21Nf
CmSjP6dTpzZww0CkefIVVq85LShjPYtNOQg13RfnS12/zrLXI8Nq7MJqrKvmMsnD
pby051tuvIHffndiNadG71ReDvXAn8OilcwoAd8+BroHMMzgPQyGPqZhdH3N2rGr
mJscSNWwftN13kgFer7jg1vXB2XnbUkQnyz0EjfnMJAWslxJP2rNpr8hgf5V17YR
9GArAhtoCe42ZczPPCCNJ/QnCceZYysqXvpWwjg3VwCu3PQCgxtgl/WqK4LiYkKr
OEtZrhudpHzfGQ==
-----END CERTIFICATE-----
Generated at Wed Jul 29 04:57:35 2026 by rpki-client