Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
File:                     V-iYv0IJJPl2ta5FEQi55qAfx9w.mft (raw, json)
Hash identifier:          zMAX3v0eijSi2PECgwY10Z1buuJHSV6uDeM9NIs77EE=
Subject key identifier:   85:C2:FB:EA:B2:28:15:05:31:99:FF:35:72:BA:1D:FF:6F:3E:5A:F5
Authority key identifier: 57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC
Certificate issuer:       /CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
Certificate serial:       019F93C8FD461E507AD51CC1FE8142AF40E8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
Manifest number:          19CD
Signing time:             Fri 24 Jul 2026 11:00:50 +0000
Manifest this update:     Fri 24 Jul 2026 11:00:50 +0000
Manifest next update:     Sat 25 Jul 2026 11:00:50 +0000
Files and hashes:         1: KOCxXy92oo_VGD1EEbZKaXLLk3Y.roa (hash: uOK+bljSOMX3VyHLaGCq6xj1yuZNQ68NS92rqmrWHYk=)
                          2: MXMQAZBcZXOT6UrfozY1__Ux6go.roa (hash: n4BuxRXKieJpGXIfMattFoqCGgwB9zh0vNAEkZ3ClK8=)
                          3: V-iYv0IJJPl2ta5FEQi55qAfx9w.crl (hash: hyvdJ9mU189fKGooWSbgOTUCI9m4Q6SQH6uGWu9sRPM=)
                          4: V_Ey4EFMly29CFJ0YsUSkgM4B4Y.roa (hash: xtvpREiVdZWuwO2sCzRKcDsqGmiaZ5yRdUpP4zq8aa0=)
                          5: rla9nfquRDNkBA9a7aTOXInR3kY.roa (hash: h1nZyOG+2GkCNjljv4pIretBeB05AhrlFnBuYz+Q++o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:c8:fd:46:1e:50:7a:d5:1c:c1:fe:81:42:af:40:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57e898bf420924f976b5ae451108b9e6a01fc7dc
        Validity
            Not Before: Jul 24 11:00:50 2026 GMT
            Not After : Jul 25 11:00:50 2026 GMT
        Subject: CN=85c2fbeab22815053199ff3572ba1dff6f3e5af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:59:e7:44:19:7d:c2:13:62:6c:07:cc:b9:8e:
                    a9:43:d2:4f:8a:76:94:7e:3a:25:37:ad:72:84:aa:
                    26:56:31:56:52:2d:5f:dc:4a:66:99:2e:4b:d6:e6:
                    5d:b3:3d:16:ba:4b:5a:65:89:b0:f1:ac:3f:dd:3a:
                    74:cf:b0:80:f1:14:52:b6:b9:5a:5f:02:e6:4c:55:
                    20:c0:91:95:64:d2:3c:9d:1e:17:65:5e:5e:8f:07:
                    21:c7:b9:26:94:82:b4:46:50:ae:01:8d:c4:4e:5d:
                    e9:2e:85:ea:ae:48:41:92:41:70:59:68:c2:6e:02:
                    c7:79:62:fd:84:1b:7a:f6:99:03:d7:26:35:a7:67:
                    ac:fa:4a:90:ca:43:78:dc:6a:35:d5:64:5f:49:74:
                    e8:f5:e4:93:14:80:61:fa:76:9d:ac:7d:3a:64:93:
                    fd:3f:a0:b0:f9:d3:b7:8d:7f:35:bc:39:3d:9f:6c:
                    a9:20:98:31:86:3c:a2:b9:d0:5a:09:e8:fa:ce:64:
                    40:f9:6e:c1:fe:cd:17:1a:65:1f:9e:9d:d8:c7:d0:
                    e9:08:ba:86:e1:f7:2d:99:98:6e:25:c6:a0:28:1b:
                    e7:41:cd:c7:d0:50:53:eb:e4:28:bb:cc:a1:db:09:
                    55:fd:bf:b1:7f:a6:04:f4:63:a7:8d:1c:fe:c0:52:
                    11:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:C2:FB:EA:B2:28:15:05:31:99:FF:35:72:BA:1D:FF:6F:3E:5A:F5
            X509v3 Authority Key Identifier:
                keyid:57:E8:98:BF:42:09:24:F9:76:B5:AE:45:11:08:B9:E6:A0:1F:C7:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V-iYv0IJJPl2ta5FEQi55qAfx9w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/15/c514cd-7954-44ce-bd7f-713b41688706/1/V-iYv0IJJPl2ta5FEQi55qAfx9w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:3d:5e:27:85:c0:7d:fe:63:b9:f7:16:2c:3f:9d:04:f0:cb:
         9f:5b:6b:45:32:52:71:36:b2:a2:a1:05:57:09:7c:d7:07:8a:
         34:ed:70:99:7d:d6:24:5b:25:b8:ea:bd:d3:5e:ea:f2:30:b1:
         75:07:ef:c8:bf:03:e0:8d:ff:51:99:aa:9a:ba:82:18:64:e1:
         24:85:11:99:d3:7f:98:31:67:e7:ec:43:8b:8e:48:30:c4:44:
         5d:cf:30:ac:d9:99:1f:a1:0f:26:b1:41:2f:ce:9e:9f:cf:ef:
         32:52:c3:24:50:8a:d8:c4:90:85:ec:9a:35:89:7f:9a:d6:1a:
         03:47:ff:e0:23:1f:6f:c6:45:83:57:95:b9:3c:d0:d3:b8:d2:
         ea:ec:a2:c1:1a:2c:76:e2:41:4a:d3:58:03:81:39:d1:ec:06:
         0f:36:25:69:f6:5c:ef:7a:e7:66:96:4d:ed:03:3e:22:06:61:
         17:6a:c1:f1:bc:a4:1f:a1:48:fe:3d:57:ba:6f:52:31:eb:d6:
         e0:8b:a5:1e:2f:07:f5:30:eb:a5:9f:09:6c:61:a5:c9:6e:f4:
         4b:3f:b0:44:f1:23:79:0a:3b:57:3b:9b:29:31:22:8b:c2:20:
         fa:78:b2:d9:cb:a4:17:cb:30:4c:39:cc:f2:1e:02:8e:03:d5:
         b9:4a:15:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:56 2026 by rpki-client