Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
File:                     vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft (raw, json)
Hash identifier:          QPk0wA4ORaOB4PnIdPolUc1WMgWDPuNCWpObUCfbU/0=
Subject key identifier:   44:8E:EB:FC:E2:2C:A9:41:D3:9E:77:55:44:A7:94:88:83:B9:18:53
Authority key identifier: BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B
Certificate issuer:       /CN=beb12ce6a91030e27d5abad146df27bc2880652b
Certificate serial:       019FAA19F3B977C663A0FBAB6EF0310A4D9B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
Manifest number:          19DB
Signing time:             Tue 28 Jul 2026 19:00:55 +0000
Manifest this update:     Tue 28 Jul 2026 19:00:55 +0000
Manifest next update:     Wed 29 Jul 2026 19:00:55 +0000
Files and hashes:         1: 2Vs8KUJ3ARsfzl5aenkyGCSy_lo.roa (hash: 8dxvcB3TSqVgvjogy5IQYglbYDvwwLxpsQ+qsiWMSlQ=)
                          2: 8YICkcy5MxdkFP4Ulv27x-Ip2YA.roa (hash: FjVwt2RS+W3bJxzVk95vARiv6Ttn05j7+22iJ3Ku7Y8=)
                          3: rGOh0aBSaJUcTjStlHDAvBi9GYw.roa (hash: 8mVUWl2qPU5MUsEWDFtGCEbrM6SO1p6D449zgLNKtAU=)
                          4: vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl (hash: lO+xXAXs9tL7oLCdbXNi82A18kNRq8ZCnc3fDWH4kbk=)
                          5: wC3BpEB8qdaKpa6CpGZXp4T9slk.roa (hash: IXG8fhcHEZ3Xyts0Msy3p2RYoLeCdjHeJU1oF2Pw3VU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 19:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:19:f3:b9:77:c6:63:a0:fb:ab:6e:f0:31:0a:4d:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beb12ce6a91030e27d5abad146df27bc2880652b
        Validity
            Not Before: Jul 28 19:00:55 2026 GMT
            Not After : Jul 29 19:00:55 2026 GMT
        Subject: CN=448eebfce22ca941d39e775544a7948883b91853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8a:cf:0a:38:e9:f7:c5:9d:81:0f:bb:ab:ae:
                    f7:34:e4:10:ba:f0:bf:12:8f:89:1c:01:04:a2:d5:
                    75:d0:bb:be:d9:33:4e:b2:87:ef:d7:6e:fe:93:14:
                    13:ae:5b:17:2c:b3:a8:1d:be:07:cd:ba:43:6f:28:
                    7e:57:80:d9:28:79:18:41:71:75:ff:2c:10:ed:09:
                    e1:f9:59:0c:c7:3b:47:9d:c8:a0:f3:dd:25:a2:8c:
                    65:87:08:92:fb:1e:82:da:66:15:5e:9c:7a:d8:e5:
                    42:4b:e4:1d:fb:b3:17:42:d0:8a:c5:fc:0b:a7:d8:
                    b7:b4:bb:19:d6:98:86:a7:d7:f6:a2:4b:79:e2:cf:
                    28:58:17:a2:fc:df:a5:0f:7d:2f:37:29:3e:15:99:
                    94:b7:86:c7:9b:3c:d5:30:17:f0:0d:8b:48:67:f4:
                    1b:62:26:92:cb:f9:bc:cb:29:a5:bc:61:28:9a:52:
                    74:c8:ac:f9:01:1f:36:d5:58:e6:f8:d9:ba:90:5d:
                    72:ce:35:7a:a8:12:bb:60:93:69:f5:4d:00:a9:6c:
                    bd:d2:a8:a5:37:9b:b3:22:a8:8c:4b:cf:7a:1d:17:
                    64:b0:6f:86:5f:19:13:5b:74:54:12:04:a8:a4:17:
                    57:ef:37:83:b7:91:f3:f2:c9:49:e1:13:2d:63:b1:
                    89:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:8E:EB:FC:E2:2C:A9:41:D3:9E:77:55:44:A7:94:88:83:B9:18:53
            X509v3 Authority Key Identifier:
                keyid:BE:B1:2C:E6:A9:10:30:E2:7D:5A:BA:D1:46:DF:27:BC:28:80:65:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/74940a-d9fa-4552-be5c-a7ade434d451/1/vrEs5qkQMOJ9WrrRRt8nvCiAZSs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:2b:c5:1c:10:f1:bf:5e:8e:da:dd:55:8a:64:98:33:a2:93:
         5b:c9:72:fa:76:7f:f9:db:6a:6a:d2:e8:84:51:3d:35:b3:87:
         7d:46:6d:de:7c:ae:fb:5a:9e:c7:dd:0b:cb:bf:27:53:ac:e6:
         a6:32:d7:73:d2:1d:8d:59:a4:6e:af:43:14:11:1d:57:72:c0:
         0c:c9:ff:3e:62:e1:99:13:73:15:91:24:51:ec:e7:c7:4b:d6:
         ad:a0:d8:62:c3:82:1a:d7:94:3f:62:68:b9:bb:43:e9:8c:d8:
         7c:14:ff:22:83:30:28:96:96:f6:24:80:df:ab:a8:5d:7a:03:
         ae:27:a3:05:37:f1:e2:09:88:ae:1e:cb:31:3f:10:ca:c9:56:
         9a:07:27:4c:f8:ba:dd:f1:8c:69:1c:8b:06:1b:b9:46:4b:64:
         5d:1b:24:1e:79:09:8a:92:f7:6a:60:d7:f5:6b:31:f5:cb:b2:
         42:e4:9e:fe:d6:42:f9:97:b4:3c:8d:94:b7:9d:79:71:12:78:
         ce:a9:21:91:b0:e1:1c:9d:7f:91:91:2e:e8:f4:ed:5d:e6:35:
         42:81:f4:d5:9c:1f:5a:30:e7:b1:b8:c1:d3:23:16:2c:05:b1:
         01:3d:01:7a:d5:1d:bd:f5:d4:d3:59:f5:01:1a:85:ed:f0:70:
         13:eb:86:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:58:37 2026 by rpki-client