Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File:                     vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier:          8x2BpJBVuiJGIfnzl28teqYBfpaneSBlDk6RiRkPcYI=
Subject key identifier:   20:75:1D:B0:3A:F6:4A:E8:DF:C5:20:8B:F8:B8:37:75:36:62:31:6C
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer:       /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial:       019F91360730951F5B0AFDA667C36B44D88D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number:          19C8
Signing time:             Thu 23 Jul 2026 23:01:04 +0000
Manifest this update:     Thu 23 Jul 2026 23:01:04 +0000
Manifest next update:     Fri 24 Jul 2026 23:01:04 +0000
Files and hashes:         1: Y4GsPYL5IzvewFFwkZIhdfeJfyA.roa (hash: eD8cUm6eR2m4jrtu7qYzfbk2kaBxMh/aGCqnzhmpaDY=)
                          2: g5jXkTpT8rS4RDrTaaqiauLNaBc.roa (hash: isrTkqL/KrQh1HHr0NL5DuWGUHsje/NyVaTqgUAy9vE=)
                          3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: BgyEhapYMri7FI8+c0z05meuSZZAGMnPBheqIMScXw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 16:54:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:36:07:30:95:1f:5b:0a:fd:a6:67:c3:6b:44:d8:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
        Validity
            Not Before: Jul 23 23:01:04 2026 GMT
            Not After : Jul 24 23:01:04 2026 GMT
        Subject: CN=20751db03af64ae8dfc5208bf8b837753662316c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:29:79:34:b2:c6:be:1b:52:85:6d:cf:e8:43:
                    e1:4f:eb:58:60:52:64:62:f6:e7:6f:7f:b4:b9:a6:
                    e8:fc:94:d2:49:81:9c:63:67:e1:40:8f:6e:03:4e:
                    ac:8a:0e:83:c8:f7:6c:4a:28:1a:c8:89:d9:1b:ce:
                    b0:d1:7d:69:8c:41:b5:ce:bf:33:7b:5a:4f:eb:93:
                    24:c0:d8:44:87:85:af:bb:13:3c:46:ee:61:f3:65:
                    20:6b:5e:ca:eb:ad:af:03:35:1d:6a:f9:97:c0:fa:
                    eb:6d:3e:78:a4:6e:fc:f7:ee:96:6f:10:b1:5d:95:
                    bc:a4:7b:d6:89:7f:43:a5:d2:af:87:12:06:07:59:
                    cc:a5:15:9a:ff:89:a3:00:b9:98:67:3e:b8:17:12:
                    91:86:78:cd:c4:f5:bb:1e:5e:9f:9c:b7:41:65:59:
                    2d:0c:a9:1d:c6:55:79:47:0b:e8:2d:ac:43:03:90:
                    67:2f:a5:19:90:10:92:ae:1e:9a:1a:b9:6f:2b:9e:
                    b8:d6:65:99:0e:d3:81:c3:07:59:d5:f1:c8:d5:f7:
                    8a:a3:8b:58:6c:aa:f7:ae:21:2c:ae:d6:e7:7d:d1:
                    c0:62:7e:d9:e9:9d:b3:10:63:47:3d:05:db:e1:17:
                    60:b6:b5:fd:1b:9e:75:1e:79:ab:89:68:2b:b7:95:
                    7c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:75:1D:B0:3A:F6:4A:E8:DF:C5:20:8B:F8:B8:37:75:36:62:31:6C
            X509v3 Authority Key Identifier:
                keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:55:34:8f:6f:a2:47:fc:48:ce:fb:af:6a:f4:33:5b:b5:13:
         21:29:74:32:c0:9c:aa:da:09:1f:93:d8:90:9b:d4:a0:38:64:
         21:df:38:99:bb:88:2a:62:60:9e:6d:5e:be:04:f4:89:31:50:
         e4:c9:48:16:aa:36:19:2a:16:6d:16:c3:f1:39:11:96:d9:58:
         78:95:2d:ce:e8:40:9c:fc:a9:a3:51:43:36:10:52:ae:c0:d8:
         76:d6:67:78:8d:77:29:dc:c5:0c:bd:aa:d5:60:a6:2f:1e:f6:
         0e:48:a7:4e:bc:48:f0:91:39:9a:4a:f6:a5:c4:7b:1f:aa:36:
         3e:5d:a2:57:47:c2:8a:6e:92:14:7b:ab:1d:9f:2e:d9:92:66:
         31:f0:e2:be:77:81:59:5b:2b:6b:62:0c:da:e8:a7:f5:38:ec:
         f7:6e:22:09:14:39:40:7e:39:7f:d4:99:62:cd:6b:25:f8:25:
         35:77:9a:f9:23:e5:f7:fc:5f:fd:18:02:6c:96:00:bd:6f:cb:
         78:cf:27:db:e1:3d:c3:c4:d6:7f:55:40:ea:dc:2a:d0:6b:da:
         72:88:3b:45:fc:58:03:1d:1c:32:c4:e0:a3:4c:81:c2:cc:f8:
         9b:97:8c:51:b0:44:85:d4:cb:8e:f9:04:cd:46:84:4a:80:65:
         bf:65:4d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 01:54:07 2026 by rpki-client