Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
File:                     vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft (raw, json)
Hash identifier:          B0q/UAnnsE7zfMkgR1FQhzOvu5G2E450h6IFCb1ST1U=
Subject key identifier:   B4:84:0E:CC:38:C1:EF:E9:B1:40:C4:DD:59:8A:84:5A:3F:C8:D9:64
Authority key identifier: BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A
Certificate issuer:       /CN=bd19d4535c7e62b921e859e6557b821f278e716a
Certificate serial:       019F92115513D54DF21A852C926429144AAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
Manifest number:          0FDD
Signing time:             Fri 24 Jul 2026 03:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:37 +0000
Files and hashes:         1: VvLDxcl32RkX6o9cAk2ZhuKfm2s.roa (hash: GVngVUnES7V1tiNdjBZcMzfC0juakBJRqkf8oHdzHXc=)
                          2: YXyKSQA62yKkb7oIprfQWpNYq5k.roa (hash: 2S/w+1qpceETf27eC9DVFe1O3Yuo2aVT1QqWaFNm3nw=)
                          3: fR8Sj7qPvSsegrc5cvXE_3c58VA.roa (hash: valE9KfmP8wJDIQ+h1QKYZFv8JH48MGyAU5h4M83KlM=)
                          4: h2fFhltE1j4W1TzV3SImbYKEr0o.roa (hash: X5kjZcwd4ieoyDROQzqJxZ1Df7FtqvD2AkJ0544uHm8=)
                          5: hLYAlv4Lh0bY3QSzIaEKpidUNhc.roa (hash: 86deeND43J6o/LVaKUcKau2VOr6OHvLSqsJsfXpJwdk=)
                          6: vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl (hash: //Zn7g1OM8rSBeVLZ97WCk1XNZWuU9Nz/QKxUETU5rU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:55:13:d5:4d:f2:1a:85:2c:92:64:29:14:4a:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd19d4535c7e62b921e859e6557b821f278e716a
        Validity
            Not Before: Jul 24 03:00:37 2026 GMT
            Not After : Jul 25 03:00:37 2026 GMT
        Subject: CN=b4840ecc38c1efe9b140c4dd598a845a3fc8d964
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:e0:85:72:79:73:b1:52:36:e9:e0:57:aa:e2:
                    20:24:5f:c0:e2:c2:1b:78:65:b5:6c:1a:a6:9c:10:
                    33:2f:0a:54:d4:1a:3f:2e:fa:bc:2c:8e:ec:cc:c4:
                    d9:55:35:d5:02:b5:a4:91:f9:4e:ce:02:37:6b:26:
                    a8:54:13:3a:e4:3e:b0:7a:1e:a9:16:7a:e5:c3:17:
                    ff:d7:2d:cc:ab:46:5a:e4:5c:12:54:b1:7b:c4:c7:
                    70:ba:d7:d7:a0:32:b6:83:ca:61:dc:52:9e:75:71:
                    83:17:60:d1:69:ea:80:f7:18:00:8e:25:97:11:3a:
                    e4:9d:f5:1c:da:1a:08:f9:b2:d3:d2:2f:55:77:4d:
                    d7:e1:37:99:c9:b3:7d:a8:eb:39:c3:76:bb:29:93:
                    b0:37:48:79:01:41:6b:c3:f5:ad:84:92:bc:78:d0:
                    48:bc:42:72:c3:5e:d2:61:cb:63:7a:f4:7d:94:0d:
                    25:cb:57:01:c8:ab:74:ea:fa:f8:7c:8e:e5:27:bf:
                    4e:02:39:26:ce:95:04:bf:97:08:58:ff:fa:cf:c0:
                    7b:cb:eb:c2:53:0a:60:c2:3d:2a:46:9b:9c:9f:5d:
                    fa:be:10:6b:44:d9:26:79:59:a4:a4:31:95:35:2b:
                    0d:d0:4f:7b:81:c1:eb:9d:82:4f:37:59:a1:55:9a:
                    ea:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:84:0E:CC:38:C1:EF:E9:B1:40:C4:DD:59:8A:84:5A:3F:C8:D9:64
            X509v3 Authority Key Identifier:
                keyid:BD:19:D4:53:5C:7E:62:B9:21:E8:59:E6:55:7B:82:1F:27:8E:71:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/2599f9-6f76-4db6-bca7-c1331f49fc09/1/vRnUU1x-Yrkh6FnmVXuCHyeOcWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:d6:ec:38:be:f2:bf:7a:8c:bf:9e:9f:2c:54:80:a4:89:02:
         93:ad:fa:bc:6d:bf:90:a0:1f:ca:94:0c:9f:3a:a7:6a:6a:cd:
         7c:ae:13:3c:38:78:be:75:33:9d:db:86:82:7e:36:2a:14:3f:
         61:46:93:27:66:9b:24:17:e4:5d:bc:fc:30:a7:a1:60:e3:cc:
         04:06:44:23:39:5c:27:01:ea:d3:02:25:49:78:66:18:56:93:
         5f:51:09:46:03:8e:54:e3:ba:57:78:2e:ea:3a:ab:f1:2f:8e:
         74:8e:17:45:e0:49:38:c6:7f:d9:9b:c3:ce:6e:ed:90:b9:ea:
         18:1c:bb:90:31:22:14:ed:a2:d3:86:9c:8b:0c:7e:8e:b0:e1:
         80:67:ae:36:57:07:85:c9:b5:be:71:29:dc:66:7c:c9:3f:a4:
         08:e3:97:d2:29:44:7b:48:13:27:58:3e:e6:33:a0:8c:25:18:
         a2:fb:af:9f:69:67:42:d2:cd:5a:19:02:cd:e5:d8:60:d5:cf:
         b4:b5:7d:cc:57:65:3b:45:9e:0e:23:26:2f:6a:9a:56:84:01:
         01:ab:b5:5f:ca:14:14:17:5c:e4:88:78:b6:2d:b5:a1:04:6b:
         d1:ce:ed:fb:36:90:1e:0e:a4:7f:3e:d0:5e:be:64:5b:70:e7:
         0e:07:41:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEVUT1U3yGoUskmQpFEquMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMTlkNDUzNWM3ZTYyYjkyMWU4NTllNjU1N2I4MjFmMjc4
ZTcxNmEwHhcNMjYwNzI0MDMwMDM3WhcNMjYwNzI1MDMwMDM3WjAzMTEwLwYDVQQD
EyhiNDg0MGVjYzM4YzFlZmU5YjE0MGM0ZGQ1OThhODQ1YTNmYzhkOTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+CFcnlzsVI26eBXquIgJF/A4sIb
eGW1bBqmnBAzLwpU1Bo/Lvq8LI7szMTZVTXVArWkkflOzgI3ayaoVBM65D6weh6p
Fnrlwxf/1y3Mq0Za5FwSVLF7xMdwutfXoDK2g8ph3FKedXGDF2DRaeqA9xgAjiWX
ETrknfUc2hoI+bLT0i9Vd03X4TeZybN9qOs5w3a7KZOwN0h5AUFrw/WthJK8eNBI
vEJyw17SYctjevR9lA0ly1cByKt06vr4fI7lJ79OAjkmzpUEv5cIWP/6z8B7y+vC
Uwpgwj0qRpucn136vhBrRNkmeVmkpDGVNSsN0E97gcHrnYJPN1mhVZrqIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLSEDsw4we/psUDE3VmKhFo/yNlkMB8GA1UdIwQY
MBaAFL0Z1FNcfmK5IehZ5lV7gh8njnFqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTct
YzEzMzFmNDlmYzA5LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy8yNTk5ZjktNmY3Ni00ZGI2LWJjYTctYzEzMzFmNDlmYzA5
LzEvdlJuVVUxeC1ZcmtoNkZubVZYdUNIeWVPY1dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH9bsOL7y
v3qMv56fLFSApIkCk636vG2/kKAfypQMnzqnamrNfK4TPDh4vnUznduGgn42KhQ/
YUaTJ2abJBfkXbz8MKehYOPMBAZEIzlcJwHq0wIlSXhmGFaTX1EJRgOOVOO6V3gu
6jqr8S+OdI4XReBJOMZ/2ZvDzm7tkLnqGBy7kDEiFO2i04aciwx+jrDhgGeuNlcH
hcm1vnEp3GZ8yT+kCOOX0ilEe0gTJ1g+5jOgjCUYovuvn2lnQtLNWhkCzeXYYNXP
tLV9zFdlO0WeDiMmL2qaVoQBAau1X8oUFBdc5Ih4ti21oQRr0c7t+zaQHg6kfz7Q
Xr5kW3DnDgdB2w==
-----END CERTIFICATE-----
Generated at Fri Jul 24 06:36:51 2026 by rpki-client