Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
File:                     dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft (raw, json)
Hash identifier:          ShlVfh5F7iyFjcwYnv8mLdeMH3R2vdACEMdiupmAq34=
Subject key identifier:   94:24:49:39:7D:C3:25:15:D4:75:0C:1D:7B:AA:39:95:09:16:71:CB
Authority key identifier: 75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03
Certificate issuer:       /CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
Certificate serial:       019F95B7255FFB75F778849FD4EA9891316A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 20:00:35 +0000
Manifest this update:     Fri 24 Jul 2026 20:00:35 +0000
Manifest next update:     Sat 25 Jul 2026 20:00:35 +0000
Files and hashes:         1: dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl (hash: SGwr5K0fVDfJJ1Vaop/b3QYm6AdzosYidrVuzSsE71w=)
                          2: hPEOUrTaqxkP0HraBv5tFWum52o.roa (hash: a68ZRNdry4Fa8CMUTj7dyBiReCufFH2K20dWi6+LdmE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:b7:25:5f:fb:75:f7:78:84:9f:d4:ea:98:91:31:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7551b02d55d3505fb9f9719fbd0b52316ff6c103
        Validity
            Not Before: Jul 24 20:00:35 2026 GMT
            Not After : Jul 25 20:00:35 2026 GMT
        Subject: CN=942449397dc32515d4750c1d7baa3995091671cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:2c:a0:6c:83:94:ea:e8:3e:44:c1:92:72:fc:
                    09:c1:e3:ba:77:51:d1:1c:f6:76:54:9a:9f:b7:b4:
                    14:9d:bd:51:c4:48:c3:8c:be:db:5d:5b:7f:3b:c3:
                    0f:91:f2:2c:a9:0f:1b:51:6b:59:32:49:40:ca:66:
                    d7:cd:82:fc:27:4f:4a:37:5b:c6:57:eb:c7:2a:0b:
                    25:f0:80:a7:9c:4d:2c:c1:f0:d0:10:c5:ae:52:03:
                    25:c0:2e:c3:c1:d0:a3:29:e1:bc:67:2f:44:d7:a1:
                    de:bd:a7:e3:8e:e0:02:b8:0f:2b:be:9e:bb:38:c5:
                    dc:c5:1f:50:96:02:02:77:59:bb:60:80:08:4b:9d:
                    e0:5c:ae:95:10:7b:ae:d9:e2:a7:10:a2:97:06:ef:
                    fd:16:e0:81:c9:f9:5f:f7:23:17:89:6f:25:18:bd:
                    19:dd:f4:da:71:21:4f:22:aa:61:8f:eb:7e:57:05:
                    60:8a:56:a7:1c:f9:c2:0b:cf:cc:a1:8e:8c:88:2c:
                    47:1b:48:ee:0f:5e:4c:21:ab:82:b3:32:ad:df:6f:
                    0c:f0:6f:13:25:7a:fd:16:a9:a2:70:a0:ae:fd:bf:
                    36:f2:dd:b7:0c:47:db:74:10:7a:86:0b:bb:e8:45:
                    f3:9a:06:27:d7:24:bc:7c:68:8f:c0:fd:89:fa:a4:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:24:49:39:7D:C3:25:15:D4:75:0C:1D:7B:AA:39:95:09:16:71:CB
            X509v3 Authority Key Identifier:
                keyid:75:51:B0:2D:55:D3:50:5F:B9:F9:71:9F:BD:0B:52:31:6F:F6:C1:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dVGwLVXTUF-5-XGfvQtSMW_2wQM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/34/136b43-3b76-4b17-a366-84b7f688ba30/1/dVGwLVXTUF-5-XGfvQtSMW_2wQM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:60:8b:3f:93:4a:67:2e:0d:77:8d:96:b1:4a:1f:ed:a3:17:
         24:d9:4e:f0:07:f5:ff:76:4a:eb:0f:62:0a:8d:c5:9c:6a:dc:
         71:be:77:59:94:26:4a:2e:81:6f:1e:d9:cf:77:ec:31:c6:cc:
         4f:9e:f7:61:87:f6:db:2d:a9:e6:6b:85:00:a2:a0:8c:66:ca:
         fa:9a:58:1c:04:af:75:b7:b7:00:d8:3e:e8:eb:f6:a9:78:91:
         57:c2:fa:c7:d4:44:ba:5d:b3:fc:0f:7d:c1:6e:ab:32:28:f4:
         d4:8c:3a:d5:de:30:05:78:27:06:f8:3f:c4:8b:0e:32:72:d3:
         66:8f:6f:7d:f7:2f:94:4e:f6:f0:4f:5d:f5:46:1c:46:84:dc:
         c7:1a:12:ac:b0:a0:74:91:74:4d:16:36:66:76:94:4b:17:3a:
         08:97:f5:63:98:09:54:1e:30:c5:c1:b0:82:b4:6e:51:04:1c:
         ad:a7:ae:11:69:01:1a:62:ec:04:cc:82:39:04:8c:a4:27:6d:
         7e:3f:7b:73:cb:71:fc:e8:5a:db:47:c4:78:d6:cb:41:ef:e3:
         c0:cd:b2:81:f0:cb:77:4e:c7:be:b2:9f:91:1a:94:0e:cd:1c:
         ff:91:dc:e2:9a:85:89:7c:c2:89:57:5f:59:0f:d8:b9:e6:7d:
         06:fc:4e:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:15:02 2026 by rpki-client