Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
File:                     vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft (raw, json)
Hash identifier:          dAUzfX8SBShzs2dA7HhqUQwp5kkwHEO27JJq7+E3y6Y=
Subject key identifier:   91:20:92:E2:9D:8E:9C:2E:50:1C:42:47:CF:E8:32:7B:07:B7:14:03
Authority key identifier: BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52
Certificate issuer:       /CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
Certificate serial:       019FAA888F3C7968E1EE051169648A4D6923
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
Manifest number:          0140
Signing time:             Tue 28 Jul 2026 21:01:44 +0000
Manifest this update:     Tue 28 Jul 2026 21:01:44 +0000
Manifest next update:     Wed 29 Jul 2026 21:01:44 +0000
Files and hashes:         1: JhZMzH9twl8wNkeYev4LG3VPv2I.roa (hash: jdBJTvheHN0jaLshgZDbXGrYMtZxQytteuaj6IybSug=)
                          2: VjQjZjd8u0m638f09ekHhQd_-mM.roa (hash: zTHtgnTnSF7YEYTr+ZUE/h/cmSAdI4ibLvD59NKOvq4=)
                          3: aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa (hash: EB5XZLXbZe8cIE5ruaV3Aim0QvJLKlyaJyoooR5aR3Y=)
                          4: vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl (hash: eh7Mw1wZ+/2lq4dRYz2qXB8V+Puwvs/O7PEHDnBObAE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 21:01:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:88:8f:3c:79:68:e1:ee:05:11:69:64:8a:4d:69:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
        Validity
            Not Before: Jul 28 21:01:44 2026 GMT
            Not After : Jul 29 21:01:44 2026 GMT
        Subject: CN=912092e29d8e9c2e501c4247cfe8327b07b71403
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:97:fc:1e:24:bc:0d:55:7f:c5:14:89:79:
                    e2:33:00:5d:29:54:37:b2:69:09:ad:34:bd:f6:83:
                    7e:74:23:f2:2a:d1:af:8b:25:5f:8b:b2:21:6e:eb:
                    36:d9:9b:8e:b6:46:52:6b:f9:12:84:22:5a:9a:48:
                    0e:97:6d:26:22:10:1e:33:a0:58:9a:6f:6b:a4:f6:
                    c0:89:12:e3:88:fd:c6:f3:7f:80:f2:7a:00:4e:c7:
                    d0:7e:07:0c:07:15:c0:cf:70:5d:1d:8b:20:5f:38:
                    55:1c:ed:5c:6b:9a:65:c9:58:d7:b1:6c:22:a3:23:
                    e6:d0:43:ca:ea:68:e2:63:dc:d6:b0:01:db:d7:b5:
                    18:03:12:4c:ac:1a:ed:17:93:08:78:4c:fb:93:53:
                    86:a0:b6:5b:05:dc:14:f3:a4:d2:40:94:ca:af:95:
                    19:35:4f:e5:65:7e:75:e6:f4:40:aa:93:1f:7f:77:
                    af:57:f4:02:c2:06:5b:18:e3:98:d9:3c:8c:21:fb:
                    20:06:67:09:22:24:6c:cb:8c:9d:c1:39:a5:60:9e:
                    97:a0:4b:18:d3:e1:60:42:7e:54:af:c1:11:c0:7e:
                    f8:8b:b2:07:b1:c3:f0:7c:f4:21:f2:28:a1:05:1b:
                    38:39:9a:94:40:90:c3:17:e8:e5:1a:aa:26:ae:4c:
                    b9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:20:92:E2:9D:8E:9C:2E:50:1C:42:47:CF:E8:32:7B:07:B7:14:03
            X509v3 Authority Key Identifier:
                keyid:BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:d1:12:d2:3b:27:a7:54:2b:d4:28:60:b1:ff:3f:26:94:38:
         62:57:59:1c:50:a8:69:e7:fc:c4:43:eb:ec:29:37:c9:df:da:
         2b:47:9f:c8:e5:95:4a:2a:3f:b8:4a:b5:4c:c3:af:62:db:59:
         88:d9:d1:f9:ce:54:da:d0:00:1b:63:46:31:42:0f:4d:48:14:
         83:f3:fd:0c:7b:b9:18:f8:d9:98:fb:4b:da:d1:cf:af:a7:36:
         fa:cf:9d:10:35:bc:79:d5:5c:9e:43:75:be:0d:eb:e7:8b:4b:
         0c:e4:5b:84:b1:47:b4:b5:68:a2:21:d8:55:da:e6:73:74:77:
         59:18:b4:e2:d4:2f:7d:2c:a6:0d:52:5f:9b:f4:29:8a:d3:d2:
         46:1b:e7:34:43:ba:9e:ae:99:aa:ff:14:c7:67:e2:33:1c:68:
         40:93:2a:36:52:02:58:20:4f:bc:b5:7b:5a:83:0a:44:0a:b9:
         73:e5:16:64:f1:d1:fc:64:16:22:8f:2a:c1:72:99:bd:a2:e3:
         38:b3:e2:f8:65:77:58:28:d7:d0:c0:3e:a8:68:f6:6f:27:e2:
         2f:56:13:97:3b:c2:d6:13:d6:09:0b:75:5e:af:31:f3:54:00:
         9b:2e:54:a3:1c:11:c8:32:43:5e:bc:84:c9:2f:ec:fe:3b:99:
         e2:f7:a9:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:05:11 2026 by rpki-client