Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
File:                     vl_ipkltKkOapPeyHWmWu_u_CzU.mft (raw, json)
Hash identifier:          1P/m4Bt4ccQCH14L3yTaQtdlp6KgbxV8d2Y4G2wvGZQ=
Subject key identifier:   8C:AD:FA:61:B1:B1:05:0E:48:D5:17:C8:89:D1:65:80:EA:84:95:9B
Authority key identifier: BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35
Certificate issuer:       /CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
Certificate serial:       019F91A3800CDD4E2130CB5E8C9B4C80ADEF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
Manifest number:          41
Signing time:             Fri 24 Jul 2026 01:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 01:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 01:00:39 +0000
Files and hashes:         1: 1GIHSznDsxXrw3jKQkIzicOXuk0.roa (hash: 9Pl5E1KhSoDAyA5hgG5eNFyWYdKksOI+dFWiKoJazjY=)
                          2: NpS_oD6fm-O5UOaMpkZigJh2nTc.roa (hash: qIFJnleVwqTPPwrUhkvyWblZMC0jHP9X/BrE9rsE/eA=)
                          3: bcljfazgeEM-f4h7Gdy40mNg7JE.roa (hash: FNnWgsOBtX934LwXU89et8KvVLloyc53/NmDw9dHK28=)
                          4: ed7EOvZg65QmRmt1-BkEvlnGau4.roa (hash: bpzO/Ag5ncJtDq6+7zItEJx0lInkJT8CDmo8O5o/180=)
                          5: vl_ipkltKkOapPeyHWmWu_u_CzU.crl (hash: RiTBLuwmqGbqdnlRaVAo9xmuJVEIeivhbpgBC0N2NPs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 01:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:a3:80:0c:dd:4e:21:30:cb:5e:8c:9b:4c:80:ad:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5fe2a6496d2a439aa4f7b21d6996bbfbbf0b35
        Validity
            Not Before: Jul 24 01:00:39 2026 GMT
            Not After : Jul 25 01:00:39 2026 GMT
        Subject: CN=8cadfa61b1b1050e48d517c889d16580ea84959b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8b:5e:50:aa:a7:68:7a:33:86:4d:7c:35:9f:
                    82:98:79:f7:64:a5:ac:b1:a5:90:19:c5:32:2e:a6:
                    63:5f:4b:10:6e:30:b1:01:e3:62:a0:22:eb:c4:f8:
                    ec:04:1f:21:2a:7f:1a:7b:21:a7:70:97:60:39:92:
                    7d:86:6b:25:5d:13:23:95:b7:dc:a1:da:42:af:bc:
                    f6:72:a9:94:9d:7e:34:5a:90:7e:f1:d2:5e:b3:ed:
                    ad:36:63:0e:53:a6:00:81:5d:c2:36:1b:0a:85:bb:
                    5c:f3:02:63:a7:dd:67:e0:d5:5a:eb:15:57:f0:5a:
                    eb:2f:7a:76:3b:6b:ca:19:61:87:4e:79:24:59:16:
                    f0:e7:99:1a:0f:16:09:b7:c9:3c:c0:58:1e:b5:7e:
                    25:48:89:2f:db:48:e8:21:08:90:84:f2:c7:b7:8c:
                    61:55:15:3e:d3:01:b4:bf:41:46:36:a4:28:53:34:
                    47:21:71:f8:e9:3d:f9:78:2b:9f:0b:97:77:43:03:
                    60:41:47:26:7c:aa:69:7a:04:8c:e2:fc:0e:96:4f:
                    dc:56:4d:fa:a3:30:cf:a5:29:bf:45:77:cc:59:d2:
                    68:fa:d7:f6:c7:85:96:91:d5:fb:e1:35:29:df:c6:
                    cc:49:74:6e:22:02:a1:b6:38:1d:75:c8:6c:70:08:
                    98:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AD:FA:61:B1:B1:05:0E:48:D5:17:C8:89:D1:65:80:EA:84:95:9B
            X509v3 Authority Key Identifier:
                keyid:BE:5F:E2:A6:49:6D:2A:43:9A:A4:F7:B2:1D:69:96:BB:FB:BF:0B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vl_ipkltKkOapPeyHWmWu_u_CzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/b1393d-cca8-4a97-81aa-643a4159ab46/1/vl_ipkltKkOapPeyHWmWu_u_CzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         97:ef:38:43:2f:99:af:52:90:60:03:28:d8:14:98:a7:37:ff:
         10:80:6e:fd:ca:f7:f4:75:b3:ec:59:ae:89:56:f8:33:ae:a7:
         90:eb:e3:49:7b:07:29:b0:f0:2d:10:49:40:23:78:a6:92:e4:
         6e:47:c4:80:18:2e:e7:71:23:3a:1b:68:19:b9:99:2e:04:0c:
         e2:2d:b0:4b:72:5f:b8:4d:6d:56:37:c8:37:df:1e:2d:1b:01:
         f3:f8:65:43:ae:69:d6:ef:8f:a1:0b:59:d5:dc:cd:79:13:ac:
         fd:15:37:c5:19:59:a1:fb:f3:02:92:9d:f0:46:53:08:aa:95:
         54:f0:ce:ae:81:bc:45:de:a0:cb:05:10:b9:96:70:fe:8d:a9:
         f3:17:e1:b8:7b:9d:50:70:75:bd:4f:5b:86:8d:aa:f3:38:a5:
         6e:7d:a7:86:78:95:a4:b4:f7:07:9b:c3:b3:35:88:77:91:6d:
         60:a1:aa:84:a2:7f:cc:59:45:34:6f:c5:a6:cc:53:52:3b:c2:
         d0:57:7d:08:14:21:90:53:bd:0c:44:86:0a:45:28:1f:d8:be:
         9c:ca:e1:3a:5b:7e:4b:2d:5d:30:9b:bf:97:b7:d0:6d:90:2d:
         6f:b1:5e:d2:57:f9:30:c0:79:c3:e6:20:1f:61:86:7e:56:c3:
         a0:ed:7c:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:25:04 2026 by rpki-client