Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File:                     vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier:          YJjnpy3r+2WWiI3shXZAczSr7AkrFyk0mPUZcTzAa4M=
Subject key identifier:   B6:4C:BB:83:0B:09:E0:A4:7F:BF:44:DE:4A:13:A0:A0:08:DC:64:13
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer:       /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial:       019FA7BD5A96E6121EB1156D87B1FA713B6D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number:          080A
Signing time:             Tue 28 Jul 2026 08:00:32 +0000
Manifest this update:     Tue 28 Jul 2026 08:00:32 +0000
Manifest next update:     Wed 29 Jul 2026 08:00:32 +0000
Files and hashes:         1: GT0PYiVVY3q6SeoDEfKllMURPBc.asa (hash: x2GX5ozeDt1BFv1DNzzejD+SxlUQop4Zw+hYAhXdly4=)
                          2: HvPuzupiO3Z449T8DejhvcuWJI8.roa (hash: d/KHbVCd1y2BI+CW/A2kCa+tSbu/RU5vseQ+Nk58moM=)
                          3: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=)
                          4: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: tHA7coAjhtYddBNXhEaUtzuVNJYFmObHs0NCPx3xNvI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 08:00:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a7:bd:5a:96:e6:12:1e:b1:15:6d:87:b1:fa:71:3b:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
        Validity
            Not Before: Jul 28 08:00:32 2026 GMT
            Not After : Jul 29 08:00:32 2026 GMT
        Subject: CN=b64cbb830b09e0a47fbf44de4a13a0a008dc6413
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:13:04:63:7a:fc:30:ee:67:df:92:51:ec:2d:
                    b9:e3:10:2c:61:e0:66:70:25:2c:8e:ca:b7:ad:cb:
                    0b:3c:6b:13:84:49:84:6b:8f:d1:77:56:a9:d2:78:
                    09:bd:4a:5b:e5:39:4f:bc:37:fb:92:33:34:89:74:
                    64:44:ad:e0:86:56:f1:78:ed:47:0d:ae:7e:0f:42:
                    0b:0a:21:a2:70:0c:0f:e8:8b:68:53:51:c1:7e:08:
                    15:5a:05:75:7a:8f:57:c6:f1:5e:c5:fb:98:7b:58:
                    47:0e:3e:bd:47:51:30:64:f1:c7:ea:40:79:3a:36:
                    e8:08:01:de:bb:65:2f:e9:31:71:0d:ff:7f:6b:bb:
                    fa:e8:95:c0:12:b1:22:b8:e2:a2:18:56:7c:13:96:
                    af:33:70:f3:b5:c0:91:55:29:90:ad:46:d1:08:be:
                    9f:26:23:fc:14:5e:f4:fe:77:c6:0f:d8:be:d8:44:
                    aa:84:85:39:37:ee:95:43:f4:ea:96:9e:08:a1:bb:
                    d7:d5:ef:41:51:ff:99:6b:4f:e2:db:15:58:e0:0b:
                    d2:9f:55:76:21:b4:23:f8:dc:10:a2:9d:fc:fb:b4:
                    9e:a5:ac:1d:fd:1d:3d:8e:c4:39:d5:49:ba:83:89:
                    f9:00:7a:a9:2a:79:e8:ec:5b:2c:c5:62:79:83:a2:
                    44:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:4C:BB:83:0B:09:E0:A4:7F:BF:44:DE:4A:13:A0:A0:08:DC:64:13
            X509v3 Authority Key Identifier:
                keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:ff:b0:dc:bb:e3:ec:f8:8d:7e:63:c0:36:55:c4:b3:2f:8d:
         93:af:8b:48:1a:ae:67:96:bd:59:9c:39:5c:75:e9:d3:65:6f:
         7c:e3:f4:03:fe:9e:c9:c9:30:6d:ac:b0:aa:a6:a0:28:b4:61:
         b4:f5:fa:80:51:18:d8:6a:30:90:d6:dc:ea:7f:2a:93:d9:54:
         b7:7a:a5:a1:00:27:cf:9d:ba:48:07:32:f7:5c:74:3a:83:08:
         c6:e9:63:5a:71:95:78:1d:1a:30:71:68:63:46:46:68:7d:e9:
         63:9c:cd:86:f0:77:18:fa:57:b9:54:d3:72:e8:2c:dc:54:d7:
         1a:ab:77:86:6a:e8:03:5f:c3:b8:25:69:42:04:67:69:98:66:
         00:e0:44:b7:94:3e:3c:4a:19:0d:4f:67:c1:e6:c8:9c:4b:7b:
         69:b5:a1:61:3f:e5:60:a9:d4:69:98:28:fc:ec:4b:9c:7f:57:
         12:8b:e4:6a:ff:e8:f1:d3:85:0e:71:19:1f:d6:75:0d:15:bf:
         90:2a:5d:de:f3:91:60:48:07:0e:d4:71:8c:bf:d5:13:42:14:
         f0:b0:b7:3e:e6:8c:57:2c:c2:c1:af:02:b0:dc:22:8b:b8:b1:
         96:f2:20:d5:72:af:07:48:4d:80:d6:55:15:c5:e0:4e:7d:c4:
         8b:27:7a:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 17:20:25 2026 by rpki-client