Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File:                     viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier:          oziMWooUO2b8KrJhDSRD2e1EMzeyK3p/xD7KS875OGU=
Subject key identifier:   0B:0B:9E:5A:D1:E5:49:53:15:42:7E:26:8C:A2:1C:39:52:AE:A6:FC
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer:       /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial:       019FA9756DE5411F1E39277860593E5AC727
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number:          051E
Signing time:             Tue 28 Jul 2026 16:01:13 +0000
Manifest this update:     Tue 28 Jul 2026 16:01:13 +0000
Manifest next update:     Wed 29 Jul 2026 16:01:13 +0000
Files and hashes:         1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
                          2: viphXepqVOryff6ZwH483I13X74.crl (hash: NFfexV1QT92Ftm84DD0JYdncxCZkgioBkUks80pQ+Js=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 14:18:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:75:6d:e5:41:1f:1e:39:27:78:60:59:3e:5a:c7:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
        Validity
            Not Before: Jul 28 16:01:13 2026 GMT
            Not After : Jul 29 16:01:13 2026 GMT
        Subject: CN=0b0b9e5ad1e5495315427e268ca21c3952aea6fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:b8:b3:76:ff:f8:1f:2f:ae:2a:72:6a:d4:77:
                    dc:7a:79:25:dc:0d:8e:2a:7b:a8:f8:a7:27:62:c4:
                    fc:9f:92:61:ae:85:fa:42:17:73:93:27:9e:a5:12:
                    a2:69:b5:94:5b:4f:1f:31:6f:bb:57:be:a6:0f:17:
                    7a:eb:cd:e8:95:fb:55:e3:e6:b9:5e:07:bc:86:f0:
                    80:af:3a:bf:8f:68:49:f5:92:23:2e:75:fc:5e:18:
                    14:db:68:ab:8f:24:09:3d:9e:51:e0:91:1f:6b:ea:
                    55:7c:a0:05:45:f0:83:12:53:c5:49:d9:30:6b:cd:
                    39:cf:d2:06:63:7b:01:c8:6f:ed:9a:f1:07:1b:e0:
                    55:ae:5d:7f:36:b4:09:d6:4e:d1:47:24:84:44:2a:
                    ee:77:7c:2d:00:34:b3:ab:46:12:07:8c:ca:c1:9b:
                    a4:dc:1d:6f:2f:76:6e:cd:d5:65:df:96:1c:37:08:
                    e5:0e:dd:ae:2e:07:98:9f:6f:b7:8c:48:27:4c:2c:
                    6c:47:3a:72:39:e2:dd:ca:61:0a:1c:f1:1e:1e:56:
                    ee:0b:14:dc:2f:a3:30:5b:65:48:90:e1:23:68:b1:
                    5f:29:81:67:ea:f2:1b:46:bd:9f:93:26:57:31:48:
                    46:a2:89:51:35:c4:5a:40:74:ed:cf:ff:02:22:6b:
                    3e:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:0B:9E:5A:D1:E5:49:53:15:42:7E:26:8C:A2:1C:39:52:AE:A6:FC
            X509v3 Authority Key Identifier:
                keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:eb:60:1c:93:8f:63:4c:eb:1d:5a:ca:0a:2f:e0:89:45:aa:
         d7:7d:50:7f:05:2c:33:b4:9a:cc:8b:38:19:dd:c8:00:e0:db:
         40:54:be:84:dc:9d:0b:ea:2f:8f:cb:12:14:2e:76:38:24:94:
         be:8c:67:8f:e1:c7:88:6a:b8:39:52:59:a6:82:0f:ac:bf:f1:
         fe:a7:fd:38:83:00:93:39:e3:2f:b7:d1:76:b6:86:7a:10:a2:
         e3:70:c5:dd:cd:30:29:21:88:21:c6:e3:54:4b:18:20:23:9f:
         38:81:c4:92:77:e6:83:d2:68:d0:74:7b:30:c4:cf:5d:e9:d3:
         30:3b:32:d9:ce:ee:de:9c:eb:00:39:77:68:1a:03:53:e1:61:
         0d:96:3d:b8:83:40:75:8d:5c:01:a1:0f:c9:34:f2:67:0b:fb:
         fa:32:8f:b5:b7:03:43:1c:e4:b2:6d:fd:ef:12:9d:d0:7e:7e:
         e9:48:9c:f7:11:f7:bd:30:cb:75:a8:2c:93:e0:98:c5:1f:8a:
         8b:ba:30:c6:3d:a6:8d:7e:46:79:54:05:db:45:b5:f9:a7:7d:
         a9:49:be:63:4c:de:11:e0:ae:8b:91:7e:bb:c5:55:ed:89:5e:
         3c:24:d5:7d:39:38:50:13:f5:ff:78:03:ea:9e:bc:e1:6b:2d:
         6f:84:ce:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:32:24 2026 by rpki-client