Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
File:                     vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft (raw, json)
Hash identifier:          OM/+XNZVUOrhSzZIzVmESsTuTFpx0yztR2GH0Id8fhU=
Subject key identifier:   30:BE:84:F6:0B:09:9F:33:F7:D0:09:40:81:00:12:9F:FF:1A:3B:50
Authority key identifier: BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF
Certificate issuer:       /CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
Certificate serial:       019F91DAC80855962EBB159DE222B436A8AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
Manifest number:          108F
Signing time:             Fri 24 Jul 2026 02:01:02 +0000
Manifest this update:     Fri 24 Jul 2026 02:01:02 +0000
Manifest next update:     Sat 25 Jul 2026 02:01:02 +0000
Files and hashes:         1: FZljvcxVC3KvOuVQwDjBOz6vLKQ.roa (hash: kpnpQoylGbXqrj/XYTN9KcgWeq6V6Ko8315VlpltUrA=)
                          2: vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl (hash: DBmH1jpUp8CpHEAgvd2wO8W6EE/LQyH7RN5/VkWnxJA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:01:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:c8:08:55:96:2e:bb:15:9d:e2:22:b4:36:a8:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc903403c20a6cdb22366cc7acf48e9f99be34ff
        Validity
            Not Before: Jul 24 02:01:02 2026 GMT
            Not After : Jul 25 02:01:02 2026 GMT
        Subject: CN=30be84f60b099f33f7d009408100129fff1a3b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:e6:ef:e6:a5:0a:00:fc:21:66:ec:51:78:
                    d5:4a:19:cd:a2:f2:19:e1:ad:8f:d0:84:f4:2d:af:
                    64:39:88:67:94:83:4d:55:75:48:79:1a:f6:df:60:
                    9a:d9:34:24:a6:16:ca:54:69:5a:2e:47:63:0b:9a:
                    cb:1e:34:13:ae:19:9e:63:95:c4:38:0a:5f:fb:8c:
                    28:89:41:9a:92:0f:f0:85:83:12:1c:35:a3:dd:b7:
                    ed:3c:bc:f1:48:4c:f8:53:e2:cb:d2:ac:cd:11:20:
                    8a:69:c2:9a:b5:60:d8:de:18:75:5c:2e:5a:77:da:
                    cc:a5:b4:11:22:b1:10:99:23:59:a1:d2:b4:3a:bc:
                    25:c2:2c:32:33:75:54:a0:ca:fb:09:2d:5b:4f:aa:
                    c1:2e:45:1f:cd:e7:ca:91:6d:cb:07:81:8f:55:8c:
                    d1:04:51:c9:19:06:d6:08:b3:b8:a3:6e:f7:05:f2:
                    0f:20:66:4d:e0:1d:62:3e:22:a9:99:ff:d3:c3:c8:
                    a3:99:08:14:d7:52:73:82:1b:b6:75:89:40:bd:61:
                    57:d0:90:d6:72:94:d0:c1:f7:62:96:2e:fe:a5:0a:
                    c8:80:fc:ef:b7:37:bc:20:e1:32:86:d9:ff:ff:31:
                    70:0b:b5:df:cd:e4:33:a2:d5:2b:10:be:6b:20:7b:
                    43:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:BE:84:F6:0B:09:9F:33:F7:D0:09:40:81:00:12:9F:FF:1A:3B:50
            X509v3 Authority Key Identifier:
                keyid:BC:90:34:03:C2:0A:6C:DB:22:36:6C:C7:AC:F4:8E:9F:99:BE:34:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJA0A8IKbNsiNmzHrPSOn5m-NP8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/d5e5cb-5b27-47f6-8acb-0350787225c8/1/vJA0A8IKbNsiNmzHrPSOn5m-NP8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:3d:95:da:7c:15:1f:43:88:18:5a:7e:05:f3:78:02:2b:80:
         e4:37:33:a7:88:51:e7:f0:6a:88:1f:d2:7c:fc:ec:4e:97:07:
         e4:31:63:d7:5a:b6:fe:2d:37:97:08:bb:c8:7a:1f:65:0f:bf:
         5a:28:84:35:50:78:47:5d:e6:8d:ed:a2:c8:3e:09:e5:97:a8:
         b6:72:b3:c8:a8:8f:f3:4c:12:73:88:77:20:d1:35:a3:28:be:
         57:71:be:32:33:42:85:c4:3b:49:98:7e:07:52:d1:c2:48:fd:
         2c:27:1f:e0:b3:f3:c4:f0:49:99:e5:99:25:d0:ca:7e:9e:a0:
         bc:2c:3f:40:ba:2f:1b:f2:14:86:be:fc:e7:6c:f1:f8:1f:29:
         a9:7b:67:0d:5e:60:a1:13:8b:3b:62:07:71:a0:80:e3:aa:93:
         12:30:1d:0d:8e:77:3a:16:78:05:03:f1:f9:57:b7:86:8b:ae:
         5d:b9:8a:13:a0:5a:42:48:d8:c5:a9:0c:1c:50:2a:24:e2:64:
         6f:36:f4:be:c7:04:79:9c:ff:f8:46:82:ce:ce:14:6e:62:2e:
         4b:d7:8a:9c:a5:a2:f8:22:68:de:58:26:c8:9d:65:85:58:33:
         5b:2f:dc:3b:4f:1d:3a:2c:f7:a7:6c:b3:02:5d:f1:84:b0:ef:
         4a:40:22:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:09:23 2026 by rpki-client