Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
File:                     VC9jP3bo2Krqoytazhaj2zlD2Aw.mft (raw, json)
Hash identifier:          OIfCnARrtkgp4QF4c02feEsgi1Jm37R4qDH6mN0L18E=
Subject key identifier:   48:8F:48:DB:1A:13:02:16:63:7F:96:CD:94:F3:BD:81:9A:87:EF:52
Authority key identifier: 54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C
Certificate issuer:       /CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
Certificate serial:       019FAA5058B3FC907AB1A4F3DB04F182771A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
Manifest number:          19F0
Signing time:             Tue 28 Jul 2026 20:00:20 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:20 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:20 +0000
Files and hashes:         1: 35RKWFaAWG0FZ0_sumSRQjo-ZTk.roa (hash: ZVFWp4+g/AarEhCpcB89stJLNFioN0GCQ4WE7V4D3XE=)
                          2: 3e1aB77stWTp_pcWReBzNO2IJyQ.roa (hash: y600ju7YKSbJWZwn4QGcu4eyhB4Kn+pcLohTFXP1j3U=)
                          3: VC9jP3bo2Krqoytazhaj2zlD2Aw.crl (hash: eOIcNO7OX/JztkT/ewVDvjIqggHZ5ncsGfh8l2KcJ3w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:58:b3:fc:90:7a:b1:a4:f3:db:04:f1:82:77:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=542f633f76e8d8aaeaa32b5ace16a3db3943d80c
        Validity
            Not Before: Jul 28 20:00:20 2026 GMT
            Not After : Jul 29 20:00:20 2026 GMT
        Subject: CN=488f48db1a130216637f96cd94f3bd819a87ef52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:6a:5a:20:ab:b1:38:1a:fa:39:3b:83:9b:
                    66:1e:3a:bf:74:e0:e5:1a:dd:4a:06:56:77:39:9e:
                    52:46:ff:da:05:71:df:64:33:88:b4:0f:72:53:b0:
                    67:c8:62:23:31:2f:9b:24:e7:cf:51:13:bb:d8:bf:
                    6f:4c:f3:0e:a1:1d:77:68:81:3d:8c:71:f0:fe:22:
                    ab:45:ff:6c:0e:63:3f:e0:bd:7f:6c:fe:e5:5a:e7:
                    10:95:ae:03:a1:d5:81:f1:ab:9d:c5:2e:e9:b8:82:
                    a4:2c:4c:a2:0a:b7:80:2a:0a:0d:d1:ba:3d:aa:5f:
                    c2:09:4c:a9:b9:dc:e4:1c:e9:94:f2:4d:3a:2b:e2:
                    b9:f4:f2:57:09:b6:1f:ed:be:ba:76:38:6b:bd:51:
                    f9:9e:e6:a7:6f:d3:65:fc:71:34:a4:68:e5:3e:e1:
                    09:5e:bf:7b:cd:ea:5c:5e:f5:5c:6a:6b:f7:56:df:
                    0c:7a:76:95:da:5d:04:89:57:da:f7:b0:d1:e9:31:
                    5c:db:1e:15:f7:3e:5b:49:13:c0:5a:62:30:3c:eb:
                    dc:49:20:85:09:02:89:a2:d1:fd:7a:7c:f1:a2:5b:
                    8c:a1:a4:03:19:a1:6f:00:80:62:07:ba:78:4c:c2:
                    ba:64:2e:20:0c:17:c2:bb:e8:aa:8a:54:6c:4d:fc:
                    8a:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:8F:48:DB:1A:13:02:16:63:7F:96:CD:94:F3:BD:81:9A:87:EF:52
            X509v3 Authority Key Identifier:
                keyid:54:2F:63:3F:76:E8:D8:AA:EA:A3:2B:5A:CE:16:A3:DB:39:43:D8:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC9jP3bo2Krqoytazhaj2zlD2Aw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/d6b874-aea8-4b7e-b0d2-69b953c9d5aa/1/VC9jP3bo2Krqoytazhaj2zlD2Aw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:99:f0:8b:96:01:ac:0c:89:ca:50:f8:f1:bc:fd:a5:51:9e:
         59:13:ef:73:3e:2b:2f:ca:29:15:1e:0b:73:14:0a:40:40:10:
         4d:f9:9b:58:35:9c:bb:36:d0:46:58:54:bb:6f:f7:09:12:c3:
         67:fd:e0:c3:6b:d6:37:2c:d4:97:0d:01:fb:4d:08:5e:28:3b:
         84:c9:24:72:e4:00:06:90:c6:1b:9c:d7:8c:fb:87:54:5e:10:
         dd:e0:5f:92:b4:0e:1c:39:14:1a:0f:77:93:42:de:1f:17:29:
         e6:c9:77:65:64:ce:f2:c4:9d:d0:65:eb:ab:0c:b4:83:29:c2:
         1b:d2:4c:9c:b1:b9:1e:fa:49:b5:8e:e7:08:bd:fd:6b:9d:4b:
         87:d6:c0:06:6d:bf:77:56:1d:8c:90:b1:95:d1:9a:7d:16:34:
         18:c4:8d:2b:cc:f7:fa:ed:ce:ec:e4:f3:93:9a:82:53:d0:6b:
         c0:7b:f5:db:e2:7c:96:a3:a5:02:92:70:83:3f:a3:e4:91:66:
         08:ad:43:78:9b:ef:50:1e:10:db:67:68:a9:4e:5a:07:57:80:
         84:28:5f:be:38:87:70:cd:49:ab:1e:8f:9d:8c:07:32:c1:32:
         c3:d6:72:97:42:7c:7f:e2:8d:65:06:3b:cd:f3:b8:53:97:85:
         ab:6d:e2:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+qUFiz/JB6saTz2wTxgncaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmY2MzNmNzZlOGQ4YWFlYWEzMmI1YWNlMTZhM2RiMzk0
M2Q4MGMwHhcNMjYwNzI4MjAwMDIwWhcNMjYwNzI5MjAwMDIwWjAzMTEwLwYDVQQD
Eyg0ODhmNDhkYjFhMTMwMjE2NjM3Zjk2Y2Q5NGYzYmQ4MTlhODdlZjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnC5qWiCrsTga+jk7g5tmHjq/dODl
Gt1KBlZ3OZ5SRv/aBXHfZDOItA9yU7BnyGIjMS+bJOfPURO72L9vTPMOoR13aIE9
jHHw/iKrRf9sDmM/4L1/bP7lWucQla4DodWB8audxS7puIKkLEyiCreAKgoN0bo9
ql/CCUypudzkHOmU8k06K+K59PJXCbYf7b66djhrvVH5nuanb9Nl/HE0pGjlPuEJ
Xr97zepcXvVcamv3Vt8MenaV2l0EiVfa97DR6TFc2x4V9z5bSRPAWmIwPOvcSSCF
CQKJotH9enzxoluMoaQDGaFvAIBiB7p4TMK6ZC4gDBfCu+iqilRsTfyKSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiPSNsaEwIWY3+WzZTzvYGah+9SMB8GA1UdIwQY
MBaAFFQvYz926Niq6qMrWs4Wo9s5Q9gMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDIt
NjliOTUzYzlkNWFhLzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9kNmI4NzQtYWVhOC00YjdlLWIwZDItNjliOTUzYzlkNWFh
LzEvVkM5alAzYm8yS3Jxb3l0YXpoYWoyemxEMkF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApZnwi5YB
rAyJylD48bz9pVGeWRPvcz4rL8opFR4LcxQKQEAQTfmbWDWcuzbQRlhUu2/3CRLD
Z/3gw2vWNyzUlw0B+00IXig7hMkkcuQABpDGG5zXjPuHVF4Q3eBfkrQOHDkUGg93
k0LeHxcp5sl3ZWTO8sSd0GXrqwy0gynCG9JMnLG5HvpJtY7nCL39a51Lh9bABm2/
d1YdjJCxldGafRY0GMSNK8z3+u3O7OTzk5qCU9BrwHv12+J8lqOlApJwgz+j5JFm
CK1DeJvvUB4Q22doqU5aB1eAhChfvjiHcM1Jqx6PnYwHMsEyw9Zyl0J8f+KNZQY7
zfO4U5eFq23inQ==
-----END CERTIFICATE-----
Generated at Tue Jul 28 22:50:23 2026 by rpki-client