Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
File:                     vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft (raw, json)
Hash identifier:          dXPM11qPOYKs1MIu4QQrNwrEKaEznrQ0fvKoWWyeqVM=
Subject key identifier:   0E:F1:E6:A1:02:C2:BC:D7:D6:25:89:42:BE:CD:43:28:7C:D8:5D:24
Authority key identifier: BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB
Certificate issuer:       /CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
Certificate serial:       019F93246CDBF5885BAA670BD3CC6EA74345
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
Manifest number:          1958
Signing time:             Fri 24 Jul 2026 08:01:05 +0000
Manifest this update:     Fri 24 Jul 2026 08:01:05 +0000
Manifest next update:     Sat 25 Jul 2026 08:01:05 +0000
Files and hashes:         1: 5DvFWn8hN7piazN1T8HIXkNFc8w.roa (hash: XsihtnWpKZygkLBke+BN9JF5neJLF/Mp9MsWC2DKCb8=)
                          2: vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl (hash: r5o8WaXF1xEQiNvVW4XQWiuGjEfe4VXOhhPUL2XtXcA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:24:6c:db:f5:88:5b:aa:67:0b:d3:cc:6e:a7:43:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd68c1dad91a4101c7153c0f6d0156238ad746bb
        Validity
            Not Before: Jul 24 08:01:05 2026 GMT
            Not After : Jul 25 08:01:05 2026 GMT
        Subject: CN=0ef1e6a102c2bcd7d6258942becd43287cd85d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:9d:83:09:8b:7e:db:38:9a:05:cc:6f:7f:
                    4a:e1:ab:dc:fc:41:2a:5d:35:2c:06:69:13:fc:fd:
                    e0:ae:53:06:37:6a:43:72:f6:64:a2:15:35:ae:28:
                    b0:32:19:b4:27:bc:be:60:4f:fe:5f:1d:f5:6d:f7:
                    83:35:00:ed:8f:3a:f1:a4:7e:cc:c1:14:d0:31:19:
                    d9:7b:0d:50:45:1e:0d:63:2e:c5:f7:ff:37:73:67:
                    d5:cc:18:42:be:ad:90:d4:c6:2d:69:1e:31:51:e5:
                    ed:e4:e5:af:03:bd:49:fc:df:ee:a9:96:48:35:d9:
                    55:ac:37:ab:1f:38:8a:5a:af:67:c9:ea:24:ae:8f:
                    66:b5:07:17:22:90:40:62:09:1b:4d:9b:ba:ab:60:
                    25:40:68:85:e0:1d:ef:d7:25:c0:dc:5e:78:15:c1:
                    25:90:00:56:b7:54:dc:7c:b5:ad:f5:8a:3e:9a:b4:
                    8e:ce:2e:c5:a3:a6:05:08:ce:3d:2e:e4:ea:37:80:
                    c1:72:f2:ca:2b:51:32:15:d7:78:57:9e:d9:be:69:
                    c8:b4:63:38:4c:94:6a:32:ec:7f:5d:a7:a4:0f:be:
                    b7:f5:50:00:a1:25:6e:74:4a:6a:37:e4:76:3a:e1:
                    b1:86:cd:bd:a9:ec:a8:0e:39:e5:d7:d2:65:55:e8:
                    fe:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:F1:E6:A1:02:C2:BC:D7:D6:25:89:42:BE:CD:43:28:7C:D8:5D:24
            X509v3 Authority Key Identifier:
                keyid:BD:68:C1:DA:D9:1A:41:01:C7:15:3C:0F:6D:01:56:23:8A:D7:46:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWjB2tkaQQHHFTwPbQFWI4rXRrs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/4f4eff-af54-4db0-91cd-1369cef7a4ca/1/vWjB2tkaQQHHFTwPbQFWI4rXRrs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:c7:4c:e4:a4:3b:f4:3d:b8:99:f8:fd:ac:a5:ac:d4:a6:95:
         83:91:89:57:44:6e:f5:11:a3:9a:f3:08:56:6c:a8:74:47:21:
         cb:17:f1:f3:89:dc:85:30:a4:53:f0:b4:a0:78:24:d7:3f:d8:
         52:69:09:05:23:69:34:47:78:d2:d7:24:3d:91:80:39:30:85:
         92:d6:9f:9e:57:a5:53:c0:f6:d4:c8:cf:76:2a:00:95:53:8a:
         33:56:0b:c5:c6:02:6c:f9:f6:00:2d:20:ab:6b:5d:14:03:d3:
         67:c0:63:ab:54:85:5d:5b:5b:96:a8:13:2b:cf:36:4a:be:e3:
         45:24:ad:3f:0d:b1:d9:a7:08:8a:bf:d1:eb:05:8e:69:79:49:
         56:b8:98:b6:fc:6b:55:d7:44:04:bf:cb:3d:f3:b8:b9:a5:26:
         a8:9a:8b:db:bc:e0:0e:5c:e1:52:ad:42:a0:63:b0:f5:05:52:
         19:fc:54:70:a5:b2:a9:cc:70:54:8c:5e:b5:a3:92:0b:37:78:
         92:ce:14:3b:92:cf:a8:c9:ee:ca:b5:16:12:0d:02:08:90:96:
         4c:c8:8a:f5:f2:cf:ab:b2:ab:4a:48:92:75:30:3a:bc:65:a4:
         ef:55:36:5d:36:d5:f4:c0:a7:67:11:2b:c0:ad:af:19:ff:69:
         dc:49:4a:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+TJGzb9YhbqmcL08xup0NFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNjhjMWRhZDkxYTQxMDFjNzE1M2MwZjZkMDE1NjIzOGFk
NzQ2YmIwHhcNMjYwNzI0MDgwMTA1WhcNMjYwNzI1MDgwMTA1WjAzMTEwLwYDVQQD
EygwZWYxZTZhMTAyYzJiY2Q3ZDYyNTg5NDJiZWNkNDMyODdjZDg1ZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPOdgwmLfts4mgXMb39K4avc/EEq
XTUsBmkT/P3grlMGN2pDcvZkohU1riiwMhm0J7y+YE/+Xx31bfeDNQDtjzrxpH7M
wRTQMRnZew1QRR4NYy7F9/83c2fVzBhCvq2Q1MYtaR4xUeXt5OWvA71J/N/uqZZI
NdlVrDerHziKWq9nyeokro9mtQcXIpBAYgkbTZu6q2AlQGiF4B3v1yXA3F54FcEl
kABWt1TcfLWt9Yo+mrSOzi7Fo6YFCM49LuTqN4DBcvLKK1EyFdd4V57ZvmnItGM4
TJRqMux/XaekD7639VAAoSVudEpqN+R2OuGxhs29qeyoDjnl19JlVej+/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7x5qECwrzX1iWJQr7NQyh82F0kMB8GA1UdIwQY
MBaAFL1owdrZGkEBxxU8D20BViOK10a7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2Qt
MTM2OWNlZjdhNGNhLzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi80ZjRlZmYtYWY1NC00ZGIwLTkxY2QtMTM2OWNlZjdhNGNh
LzEvdldqQjJ0a2FRUUhIRlR3UGJRRldJNHJYUnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALsdM5KQ7
9D24mfj9rKWs1KaVg5GJV0Ru9RGjmvMIVmyodEchyxfx84nchTCkU/C0oHgk1z/Y
UmkJBSNpNEd40tckPZGAOTCFktafnlelU8D21MjPdioAlVOKM1YLxcYCbPn2AC0g
q2tdFAPTZ8Bjq1SFXVtblqgTK882Sr7jRSStPw2x2acIir/R6wWOaXlJVriYtvxr
VddEBL/LPfO4uaUmqJqL27zgDlzhUq1CoGOw9QVSGfxUcKWyqcxwVIxetaOSCzd4
ks4UO5LPqMnuyrUWEg0CCJCWTMiK9fLPq7KrSkiSdTA6vGWk71U2XTbV9MCnZxEr
wK2vGf9p3ElKZA==
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:52:16 2026 by rpki-client