Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File:                     VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier:          wSZr0CXyqMTdFu6f/CMkdK5RojPi+H1ReMy1VSSX+FY=
Subject key identifier:   A8:43:81:3B:1A:7F:0C:91:C7:67:A9:4F:10:CB:D6:A5:44:B3:80:18
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer:       /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial:       019F905A7A17423CC3C9C1462A3C51263236
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number:          0807
Signing time:             Thu 23 Jul 2026 19:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 19:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 19:01:16 +0000
Files and hashes:         1: Eu41_P7LziP7tbN3y79d5Zld-yA.roa (hash: AfrnyrK9VXdcG7fWfl7gD7MMFiGqvdrIsV969hWJlbc=)
                          2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: jiK3c3/p6Xa9dl+rDwbKwOr76HhIeo7KpHNpOB4A4dg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 19:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:5a:7a:17:42:3c:c3:c9:c1:46:2a:3c:51:26:32:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
        Validity
            Not Before: Jul 23 19:01:16 2026 GMT
            Not After : Jul 24 19:01:16 2026 GMT
        Subject: CN=a843813b1a7f0c91c767a94f10cbd6a544b38018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3b:97:3a:fa:7a:7c:8d:21:2f:7b:c1:e8:6a:
                    e9:9d:2d:f7:14:79:d5:47:9a:6d:0a:5c:5a:6a:a7:
                    97:31:18:90:88:7a:e0:2c:8f:40:d0:2e:8c:31:a3:
                    10:88:37:f9:24:b0:4f:91:7a:85:b5:1d:2e:a3:e4:
                    7b:c4:c5:fc:3a:e5:32:cd:ee:19:76:46:20:2f:75:
                    5b:ab:ac:96:78:d3:f9:e7:57:9c:bd:04:c0:bb:ad:
                    01:f5:b4:a3:38:3b:72:c9:f3:ba:5e:dd:a7:8b:e2:
                    1c:7a:c7:c5:96:37:5d:2d:3d:90:08:23:ff:28:bb:
                    e4:70:ff:af:29:fa:fe:d5:ed:9d:ae:92:d5:e1:44:
                    30:dd:03:7a:46:5f:d3:84:c7:90:a0:d4:83:df:4a:
                    1a:a5:b5:59:e6:96:29:15:9e:aa:c3:fa:b4:5f:42:
                    ba:a3:56:cf:85:65:ec:ca:3e:b5:71:e5:5f:bf:63:
                    7e:a5:be:4a:83:ee:b5:12:90:af:1f:43:3d:45:71:
                    98:fc:8b:60:76:08:b6:bf:1b:24:74:5b:c1:17:f3:
                    b6:8c:f5:71:4e:25:a4:64:d3:b1:6d:0d:6c:9f:c6:
                    07:09:a7:7d:36:df:90:37:18:39:4e:99:9a:02:d8:
                    23:7d:37:5a:1c:c2:9e:0a:16:81:10:9d:a6:15:57:
                    b1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:43:81:3B:1A:7F:0C:91:C7:67:A9:4F:10:CB:D6:A5:44:B3:80:18
            X509v3 Authority Key Identifier:
                keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:b1:bb:e5:d9:b2:6a:ee:89:57:13:fa:a4:5d:e1:0d:29:de:
         a7:ef:8c:19:fa:06:61:fc:80:42:9f:aa:e0:df:3f:54:b2:fb:
         02:53:93:c6:e4:4d:cd:99:5e:1b:fe:bb:45:c6:ab:60:56:fa:
         79:63:81:e7:c8:8e:fb:37:c7:df:ca:45:13:8d:2d:7a:99:1f:
         93:57:ce:c6:ff:0b:41:d9:83:eb:c8:00:2f:6f:ad:ec:18:b3:
         d4:a8:91:dd:3e:69:af:ab:7a:30:17:0d:aa:66:56:86:88:d2:
         39:d9:2f:a0:f1:49:be:29:54:95:7b:0b:8d:b4:e3:ca:0b:13:
         50:a6:47:a9:5a:5b:e2:89:f5:e6:72:00:51:f6:12:d7:ff:8c:
         60:4e:01:57:94:46:aa:45:3e:f6:fb:97:72:cd:52:a2:f5:83:
         96:2e:c4:3b:f5:cc:36:88:72:75:81:d6:a3:2c:3a:cf:e5:aa:
         bb:d5:4a:c4:44:f0:ff:f5:9e:11:30:cc:fc:92:3f:79:f1:78:
         a3:52:48:a5:3f:2f:bd:72:0b:37:78:c4:87:92:39:43:4a:7b:
         cd:74:64:b2:dc:d7:38:12:8a:d4:cc:d7:cc:7f:25:d7:98:5a:
         e4:46:58:70:41:b1:f0:d0:59:d5:98:7e:0b:5f:37:44:15:1f:
         53:2e:ec:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:39:07 2026 by rpki-client