Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
File:                     tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft (raw, json)
Hash identifier:          QBV0n9nlPO4XvDhaqDVrjV6Ez1Sm12t6tKe7DC3lyk4=
Subject key identifier:   96:38:2D:D6:9D:36:18:45:BE:32:9F:1F:4D:A4:E3:A6:86:CF:BA:2C
Authority key identifier: B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC
Certificate issuer:       /CN=b55800300fa4017f970c95d767d812fd10d0dcbc
Certificate serial:       019FAA50707B709F609DCEA69D3C7BFD32C8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
Manifest number:          19D4
Signing time:             Tue 28 Jul 2026 20:00:26 +0000
Manifest this update:     Tue 28 Jul 2026 20:00:26 +0000
Manifest next update:     Wed 29 Jul 2026 20:00:26 +0000
Files and hashes:         1: 9ZxAC10NuAqnXMcED-lsCy84WUc.roa (hash: 2Vs0nLDkGXSJoDb56Vxw17AmovqxUT3lVuAZuNKdDYU=)
                          2: JWBtzeLFUDlhmERoUCTbc_uAex0.roa (hash: kxreH6y2E+SNRj6sI1npU33Oy4JXyeQw/3NaAYiK4Gk=)
                          3: hbbJ0MKd5AI8GzkfAZt3l1L7uR8.roa (hash: qiesRgMfoPlRIvGxB5feazmMjwpZhmvrVOznCajAxhM=)
                          4: p-BxC3UVD_nEROYM_iUQsrzD9Gw.roa (hash: OH559fj6Vr/ZVBWmRgyMZY/pv/BDJUIdzOx8psGNE+4=)
                          5: tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl (hash: wC+cVm8exKf6J0YDS7QoddqD8vTVeM8068ljmSdT2+k=)
                          6: v7DRMSksGTlDfhs744praVhJlnw.roa (hash: whajyGy/1UYHTBKdIHCPuA5IumZDHCjke/Rcxhk8gpY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 20:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:aa:50:70:7b:70:9f:60:9d:ce:a6:9d:3c:7b:fd:32:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b55800300fa4017f970c95d767d812fd10d0dcbc
        Validity
            Not Before: Jul 28 20:00:26 2026 GMT
            Not After : Jul 29 20:00:26 2026 GMT
        Subject: CN=96382dd69d361845be329f1f4da4e3a686cfba2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bc:61:73:05:4d:e8:8c:13:18:89:b6:91:58:
                    ae:d2:c7:66:a4:c5:c8:78:ec:f9:7e:e1:be:29:d3:
                    f0:d9:ee:d5:5c:d4:66:df:3d:df:05:3f:48:59:ee:
                    9a:ca:f1:d1:69:6b:0a:d2:c8:69:1b:e9:b0:bf:90:
                    ac:28:4b:e4:9a:d9:db:85:9b:c3:23:aa:c0:b4:8e:
                    a5:27:db:0f:22:e2:b8:24:33:14:8e:81:c5:f6:86:
                    69:a3:cb:a1:36:53:ca:30:fe:24:33:77:87:b1:ba:
                    5c:cb:81:a4:ab:9c:ae:ee:0b:09:dc:5f:ff:06:b8:
                    63:3a:fe:23:27:9e:f3:bf:90:f0:29:7e:fe:c9:7b:
                    c8:f0:63:cb:45:fa:8f:bf:06:b0:d1:51:67:6f:91:
                    5c:10:04:aa:9d:ea:49:ac:1c:5c:7d:81:e5:bd:a3:
                    23:9f:ae:38:95:86:3c:49:b2:71:b7:21:c5:26:33:
                    b1:e9:ab:0b:d5:c8:83:9b:89:5c:a8:78:fd:aa:e7:
                    9d:05:1b:6d:12:ab:ae:89:b1:a3:7b:b3:ba:10:65:
                    2a:e9:91:30:e4:df:1c:62:cc:c9:2a:52:b3:76:b0:
                    cf:04:85:b7:db:da:83:61:ba:35:6e:e2:f5:43:90:
                    ab:3e:34:a3:f3:f0:e4:f9:95:f9:80:b1:ba:85:6c:
                    a3:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:38:2D:D6:9D:36:18:45:BE:32:9F:1F:4D:A4:E3:A6:86:CF:BA:2C
            X509v3 Authority Key Identifier:
                keyid:B5:58:00:30:0F:A4:01:7F:97:0C:95:D7:67:D8:12:FD:10:D0:DC:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/8a8487-931a-42fb-b664-c52df4aa521d/1/tVgAMA-kAX-XDJXXZ9gS_RDQ3Lw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:7d:ac:55:5b:8c:5a:27:d8:ac:00:c9:20:c1:5c:bc:9d:56:
         20:10:e7:12:8f:30:8b:e2:83:32:b7:62:05:88:6a:45:73:4b:
         91:64:b9:82:72:cc:5f:72:76:dd:2c:e0:4e:e9:39:ca:48:93:
         b8:43:8c:39:a2:18:eb:94:96:e3:de:4b:b1:51:ad:47:09:94:
         40:45:8e:7d:99:14:3e:f8:c9:28:06:35:7e:41:13:39:a4:d3:
         1e:f7:e1:0d:96:98:ef:79:b4:c5:9f:7a:b9:89:82:22:5d:bc:
         af:36:a3:48:4f:d5:c4:0c:d6:11:1a:b9:44:21:b0:5a:25:56:
         f2:16:ae:7e:31:41:32:9b:d3:05:05:84:7a:f2:96:f4:f4:65:
         76:cf:cb:d2:af:0c:7d:96:49:46:39:45:6c:c0:93:5c:23:e1:
         24:a5:95:75:a8:c5:02:36:2b:8a:bf:fa:b1:cd:35:4c:15:a1:
         92:cc:d2:d1:3e:b5:d8:9d:2c:20:50:80:2c:f2:44:c9:dd:b5:
         85:67:e6:a6:c3:71:d4:fb:68:ee:51:5c:5c:0f:81:5b:57:74:
         62:18:7d:19:28:a4:aa:19:15:78:56:60:5c:bc:aa:15:b7:83:
         69:1e:cb:17:d4:45:f9:94:e5:7b:4c:96:2d:dc:f6:40:91:38:
         2a:90:87:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 00:52:01 2026 by rpki-client