Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
File:                     Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json)
Hash identifier:          4z3heyA3xPdVthlybuuNBEl2W5nR/EPW4zG8v6t14PU=
Subject key identifier:   84:13:A7:6C:C1:BD:82:42:68:C0:88:D6:46:05:3F:1C:DB:2E:48:45
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Certificate issuer:       /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial:       019FA93DB76CA6845E51AF303E284548DD1F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
Manifest number:          14B0
Signing time:             Tue 28 Jul 2026 15:00:21 +0000
Manifest this update:     Tue 28 Jul 2026 15:00:21 +0000
Manifest next update:     Wed 29 Jul 2026 15:00:21 +0000
Files and hashes:         1: 5GxvHZCMMVes7bAUdIaYsXEtdX4.roa (hash: x5pIX8HDxeQPjQseodSp8HJv0Ul8z850CXMOjeGpMb0=)
                          2: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=)
                          3: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: l4iXYjTXwHndj/HODNsx61kxCwmnYrzvKFk5VM00wCQ=)
                          4: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=)
                          5: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=)
                          6: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=)
                          7: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=)
                          8: yy3ErXKmr6Qn4WgACvsw20nm5S8.roa (hash: DKcCvhCN4GA+COV/FEmRxnzmPEXHs3VCjt/1etPZWSQ=)
                          9: zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa (hash: ZkfO9/jzoHTqMuf/g6245EMxohpj+UHCz0pRarj0WJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:3d:b7:6c:a6:84:5e:51:af:30:3e:28:45:48:dd:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Jul 28 15:00:21 2026 GMT
            Not After : Jul 29 15:00:21 2026 GMT
        Subject: CN=8413a76cc1bd824268c088d646053f1cdb2e4845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:9e:26:a1:7e:a2:28:c4:fb:b9:2a:f1:e9:7a:
                    a7:c7:bb:20:00:2d:d0:ec:00:dd:fa:2c:64:99:8f:
                    b7:0c:3f:6c:2a:c5:11:80:27:7d:1d:b8:d1:0a:00:
                    ce:bb:9e:fd:0b:1a:9e:c0:3b:96:d9:88:f5:20:95:
                    fb:43:3a:aa:4d:30:a6:58:26:47:ed:1e:54:6d:05:
                    41:fc:d1:d0:f9:11:e1:61:52:9b:b6:84:4a:e1:a3:
                    6c:23:25:05:16:89:6f:dc:40:fa:f0:f7:ad:5a:f2:
                    88:59:8c:aa:51:06:f5:e1:82:d6:2b:50:30:74:04:
                    c7:2d:c6:4f:88:e4:a6:bd:92:9f:d5:95:5f:a3:fc:
                    c1:bd:2b:b5:fb:b8:6a:cd:da:a0:5c:5f:de:e6:d8:
                    2f:b6:5d:82:f2:d8:05:82:c0:ab:07:9c:11:1e:c5:
                    3d:a1:05:3f:16:40:63:f6:37:72:27:95:34:5d:04:
                    55:05:57:82:ca:4e:e3:10:32:7b:51:ce:50:c2:bd:
                    8b:35:09:fe:9d:07:40:44:f9:91:67:5c:19:93:ce:
                    68:32:a5:50:a1:07:42:4b:ad:11:29:08:94:a5:ed:
                    30:aa:58:81:d1:12:3f:70:7e:14:72:06:74:f2:a8:
                    62:e9:99:43:50:93:12:e3:d8:20:c6:be:32:b8:59:
                    fd:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:13:A7:6C:C1:BD:82:42:68:C0:88:D6:46:05:3F:1C:DB:2E:48:45
            X509v3 Authority Key Identifier:
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:3c:fd:6e:b4:7b:c6:a6:a8:5d:59:b4:30:30:08:cf:ec:c3:
         e3:96:4e:2e:e4:7c:18:31:60:2b:f5:e7:be:2d:1b:51:96:d4:
         43:47:a5:c8:61:b2:3c:3d:d4:c4:c2:fd:39:4e:01:e8:f6:11:
         75:43:b6:3f:db:3c:91:7e:e6:f0:1c:19:ff:70:98:37:4c:80:
         7d:ed:a6:84:90:4d:c7:c8:52:b9:08:bc:a8:00:63:a5:b8:b4:
         ba:74:ba:03:a4:c4:17:be:9a:8e:16:ca:c2:2b:6d:00:a2:06:
         a6:53:90:83:7a:36:f0:48:58:43:78:9a:1a:9d:32:1e:56:d6:
         f3:1b:a2:b3:c1:89:56:c0:f0:06:41:01:9c:37:0e:cf:a3:d6:
         96:ac:23:8d:61:f8:a4:d8:11:da:f5:20:7f:21:56:25:6d:35:
         69:49:74:27:91:45:1f:f7:02:4b:65:91:4a:2d:46:82:6f:48:
         6e:7a:8f:53:3f:ec:d7:b3:da:a1:97:68:61:d4:0d:58:ef:e1:
         e4:3c:af:84:30:fb:a7:1b:84:50:fe:c0:86:66:49:63:dd:bb:
         51:c7:29:d1:6f:a8:ff:a8:a4:a7:a9:aa:66:22:3f:33:f4:9d:
         98:6c:29:ab:85:1f:70:15:e2:d4:d8:8b:90:8d:61:d1:6a:21:
         8d:fe:a8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:19:47 2026 by rpki-client