Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
File:                     vSX3G6QTFIO7m4I92IZR06_UTns.mft (raw, json)
Hash identifier:          6XiMYZO+JibXDq526NKMylifTOlUTydUbe/2Ju6GGaA=
Subject key identifier:   9C:78:7D:EF:A8:B8:CD:27:C9:14:36:E9:DC:96:2B:D6:8B:FC:31:2C
Authority key identifier: BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B
Certificate issuer:       /CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
Certificate serial:       019F91DAF8109C11E5B7ECA4DB8F7C9CE1FC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
Manifest number:          1699
Signing time:             Fri 24 Jul 2026 02:01:14 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:14 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:14 +0000
Files and hashes:         1: PD1WySNjlq_IY2uBIMnATsjVoRM.roa (hash: SZgZePDON35ElVyphahHJc8sNER6FBgFl6oM5awboYo=)
                          2: k8w0NUXD9JayBBvKF9ncDALdg78.roa (hash: lUbCLxx0DXi3nyWOu3iruTVHC0Q/jhFLMzT5toYmB6I=)
                          3: vSX3G6QTFIO7m4I92IZR06_UTns.crl (hash: U8gpytzQfLEnJpEbvEgMqlaMVTNDpbfMN5XS2q+XN/Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:f8:10:9c:11:e5:b7:ec:a4:db:8f:7c:9c:e1:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd25f71ba4131483bb9b823dd88651d3afd44e7b
        Validity
            Not Before: Jul 24 02:01:14 2026 GMT
            Not After : Jul 25 02:01:14 2026 GMT
        Subject: CN=9c787defa8b8cd27c91436e9dc962bd68bfc312c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:2b:ce:aa:85:43:43:ce:ca:30:25:0a:ce:45:
                    65:9a:04:7a:47:89:38:16:75:9f:0f:0a:2a:a3:26:
                    d5:eb:cb:a6:97:81:e3:39:e1:22:26:76:32:4f:25:
                    0b:71:c2:c4:6d:2a:94:f4:9e:f0:0a:49:1a:04:46:
                    a3:b0:c8:e0:43:5c:a3:df:2d:87:d5:c7:6b:bb:3d:
                    c7:bd:fa:51:32:39:58:1c:b0:02:cd:64:33:24:d3:
                    bb:dd:9c:eb:8b:8a:97:2b:a4:c1:2a:8d:80:60:7b:
                    62:c9:af:f3:8f:29:33:40:f2:ca:e4:65:70:25:5d:
                    de:4b:a3:08:3b:10:54:78:0d:e8:c0:54:f5:29:16:
                    de:7a:09:5f:25:80:7a:e8:bc:c7:b1:02:35:09:30:
                    71:39:09:b2:da:f1:41:37:2b:f3:f4:c2:4a:67:b7:
                    53:81:0c:ad:af:31:b6:8e:01:d9:ad:b9:d8:92:e3:
                    e3:1d:5e:15:ea:a5:85:65:25:9c:75:bf:3c:10:08:
                    50:9a:b4:3d:1d:52:74:c1:7c:e9:f4:74:3c:d2:28:
                    66:42:b8:0f:a5:d2:27:87:0f:4d:83:06:39:e1:12:
                    64:9b:85:62:6e:91:11:6b:65:01:bc:75:05:c2:ce:
                    93:e6:5f:7d:f6:08:74:bd:75:e6:2d:d4:2f:26:7e:
                    6d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:78:7D:EF:A8:B8:CD:27:C9:14:36:E9:DC:96:2B:D6:8B:FC:31:2C
            X509v3 Authority Key Identifier:
                keyid:BD:25:F7:1B:A4:13:14:83:BB:9B:82:3D:D8:86:51:D3:AF:D4:4E:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSX3G6QTFIO7m4I92IZR06_UTns.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/200366-d881-4030-8280-b5e0e4c3315c/1/vSX3G6QTFIO7m4I92IZR06_UTns.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:b8:a1:20:69:13:8b:37:8e:d1:2d:7a:12:fa:4a:2b:53:01:
         6c:91:ee:3b:a8:89:b8:58:a3:14:e2:d0:c0:7f:4d:5b:56:d3:
         0e:c0:a4:af:ac:07:5f:34:29:63:5e:2c:b0:5d:ec:53:0c:a5:
         fa:da:e3:30:d7:77:7b:36:2a:90:ee:53:fa:01:0c:62:7b:29:
         1c:e1:a3:83:15:db:47:a6:85:3c:b8:71:61:ba:0b:25:7d:d4:
         5d:1f:13:2e:1e:4c:cf:9a:f7:3c:be:71:54:1f:63:f6:da:44:
         5c:b8:18:64:14:35:6b:72:71:b8:66:35:d8:e6:44:36:2b:40:
         fc:4c:f9:b1:06:cb:2d:69:d5:78:5a:b5:43:e5:6b:43:3a:8d:
         d7:5f:98:df:f8:5f:69:23:c2:97:62:72:f9:b4:5f:45:9d:6e:
         9a:74:7c:e5:45:9e:36:b4:fc:3f:df:89:35:36:64:1f:53:d1:
         3a:89:5f:69:d9:cf:08:ef:57:86:ae:7b:01:74:10:2f:9e:d8:
         81:dc:98:10:73:18:99:ad:d2:89:9c:84:54:35:f6:b0:45:9e:
         bf:d9:37:69:90:2f:3f:89:50:b0:aa:ea:9a:18:66:3f:c3:f7:
         42:6e:27:03:4c:34:92:9d:8b:75:af:7a:2a:c3:12:b5:e7:ad:
         df:db:ca:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:55:59 2026 by rpki-client