Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
File:                     VWEKWd3_vSTuSymemySxvwNvjkM.mft (raw, json)
Hash identifier:          hwtdkEKiQhg+GzJ1lKMy3zdG/Y+Nhyu+HOuFlNbkeeY=
Subject key identifier:   81:0B:9E:A7:09:EA:99:36:C8:76:37:D6:A0:1C:50:EB:77:34:82:3B
Authority key identifier: 55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43
Certificate issuer:       /CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
Certificate serial:       019FAC3EBDFBB0D44CDE36F8CB9EA5694107
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
Manifest number:          0CB7
Signing time:             Wed 29 Jul 2026 05:00:20 +0000
Manifest this update:     Wed 29 Jul 2026 05:00:20 +0000
Manifest next update:     Thu 30 Jul 2026 05:00:20 +0000
Files and hashes:         1: CzItBfhQLOr19TXshG8xIrAepZo.roa (hash: ZsL/eMEoqm5jb00MeORDPPBuXgnALTUh1B2vg5ljlWY=)
                          2: VWEKWd3_vSTuSymemySxvwNvjkM.crl (hash: gJFUVVO1V57Shn9qhvN7Y1fJuhuH941/cq5wctdBkc0=)
                          3: WXvsTnxMt47LTjXSgDyfYfbpykk.roa (hash: u83fQhVuD38r45zKJ9wB4bVcPJz4aOcg9/qnwLnAsDw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 05:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ac:3e:bd:fb:b0:d4:4c:de:36:f8:cb:9e:a5:69:41:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55610a59ddffbd24ee4b299e9b24b1bf036f8e43
        Validity
            Not Before: Jul 29 05:00:20 2026 GMT
            Not After : Jul 30 05:00:20 2026 GMT
        Subject: CN=810b9ea709ea9936c87637d6a01c50eb7734823b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:9e:87:17:3a:e2:77:a0:1e:84:52:1f:d4:ee:
                    57:6f:54:06:a6:a7:d2:39:24:38:3d:6e:b9:d8:34:
                    14:99:8f:46:e4:72:95:56:75:2b:9d:16:ab:b4:c3:
                    e6:bb:ed:d4:34:c7:2e:61:32:2c:66:ec:45:25:85:
                    8a:c4:c8:fb:cc:70:a3:97:40:57:48:3b:62:7b:53:
                    5b:cb:bc:fd:cb:f1:f5:65:03:ec:c5:79:f5:fb:6d:
                    34:4c:ad:e4:cf:f0:21:84:88:33:70:97:08:ce:b4:
                    59:7f:70:a1:f2:97:ae:aa:6f:79:dc:14:68:d4:bf:
                    77:bc:02:81:f6:40:df:9e:9a:7a:f1:fb:82:45:d8:
                    53:37:11:50:84:0b:0b:97:8f:1e:68:8d:aa:27:4a:
                    06:03:29:4a:cc:5b:68:c8:76:ca:df:7e:ba:7c:ce:
                    e7:c8:07:ca:b1:11:d1:dc:15:ac:29:e1:d7:34:df:
                    b4:11:6a:b5:9f:83:ec:f6:07:e8:2f:13:6c:a0:75:
                    31:cb:de:21:3c:6d:0a:69:52:54:1f:8f:5b:dd:86:
                    83:06:60:b0:4a:51:6f:44:96:4e:1e:35:49:d4:1f:
                    89:fd:b4:01:4c:38:bb:32:f5:a1:44:42:69:c5:99:
                    bb:77:d2:fa:fd:60:0d:66:d8:70:92:a1:50:aa:dd:
                    2b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:0B:9E:A7:09:EA:99:36:C8:76:37:D6:A0:1C:50:EB:77:34:82:3B
            X509v3 Authority Key Identifier:
                keyid:55:61:0A:59:DD:FF:BD:24:EE:4B:29:9E:9B:24:B1:BF:03:6F:8E:43

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWEKWd3_vSTuSymemySxvwNvjkM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/17a3bd-754a-4593-b51e-9fb415b09b5e/1/VWEKWd3_vSTuSymemySxvwNvjkM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:c0:ad:54:be:80:ce:fa:6c:92:1f:0e:54:64:07:57:1b:39:
         21:ef:e7:d0:a2:31:fc:2a:d2:d6:92:be:26:14:86:99:44:6e:
         d2:e2:86:47:81:e3:f6:0a:4d:9b:21:60:b9:6d:8b:5b:4d:d8:
         08:e5:47:45:ff:9f:1e:dd:fa:ba:c0:7b:49:ae:4b:2c:9c:e7:
         53:56:cb:14:71:41:0e:19:8b:02:7d:3a:fa:63:a2:a3:9a:cd:
         ee:b0:96:1d:d3:81:3a:d1:f0:b7:c0:51:72:55:ee:4c:03:20:
         1f:1b:c2:57:e7:c5:98:83:51:c3:cf:8e:c8:f1:17:65:89:f6:
         36:ea:0e:8b:ce:20:ce:0c:dd:71:6b:2d:4f:79:4c:81:f8:d3:
         0a:29:b8:f3:85:60:84:71:0b:fd:b0:76:72:d5:c8:80:29:76:
         6b:a1:aa:c6:75:5e:f6:9e:e5:09:5e:c2:d2:ce:eb:dc:0e:2c:
         5f:10:1d:35:bf:25:c1:ab:41:b8:56:eb:21:80:94:31:00:a6:
         5d:ae:38:85:49:67:6e:a2:d0:5c:72:ca:ba:ad:22:b0:78:bb:
         af:6a:12:86:00:36:98:f4:8b:8d:48:d1:da:55:84:13:3a:76:
         3c:b1:78:75:68:fd:08:4b:bd:d3:29:7f:23:4f:82:dd:28:da:
         b7:b5:c2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:06 2026 by rpki-client