Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
File:                     vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft (raw, json)
Hash identifier:          z9Sgxi8JbX9sC+3JcO0/5QQM5svBWaoWpr/jQZ2kaNA=
Subject key identifier:   31:45:FD:C7:A2:63:BD:7D:3C:8B:08:0F:39:30:1C:B8:59:15:4C:5B
Authority key identifier: BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4
Certificate issuer:       /CN=bc3033a102b3b7912a366320f4435c53fb9773f4
Certificate serial:       019F94A44A3163FB6477F8652F8F7F1EBAD8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 15:00:22 +0000
Manifest this update:     Fri 24 Jul 2026 15:00:22 +0000
Manifest next update:     Sat 25 Jul 2026 15:00:22 +0000
Files and hashes:         1: E-AZAYW2qhUsuxgQihaSy4RhoY0.roa (hash: l+7T0JWdCWQ5tKjG5dZn2DS4OH6HFvOG8YRDG8ncZNg=)
                          2: vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl (hash: J9PL9ZCyznLKfSu89Rm0IeQr5I8Jcxrffed1LwjfrTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:94:a4:4a:31:63:fb:64:77:f8:65:2f:8f:7f:1e:ba:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc3033a102b3b7912a366320f4435c53fb9773f4
        Validity
            Not Before: Jul 24 15:00:22 2026 GMT
            Not After : Jul 25 15:00:22 2026 GMT
        Subject: CN=3145fdc7a263bd7d3c8b080f39301cb859154c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c4:5f:16:bb:40:42:6d:1a:b9:0d:9a:ef:2e:
                    4f:4c:b9:b0:9d:0f:44:c2:36:a2:c5:dc:63:88:af:
                    ed:91:9c:b9:b6:46:ff:83:d2:8b:56:82:08:02:e4:
                    ee:a0:b4:3d:82:a4:0e:1a:d3:bf:8c:9b:26:04:3b:
                    97:5d:b2:0f:56:57:2d:62:52:0f:18:04:7c:23:c4:
                    0c:3a:ee:87:bb:2a:0a:ff:99:4c:7e:96:ef:75:55:
                    22:47:50:b0:c0:ce:9d:27:c8:19:9a:10:c4:4e:b0:
                    ed:b6:11:7b:5d:52:78:0f:29:92:3d:cc:c8:4f:0d:
                    fe:17:42:b1:20:50:53:4c:a2:79:c0:9e:75:de:11:
                    61:75:ba:d4:cb:8e:aa:53:e5:ad:39:9a:8f:fc:ca:
                    11:d2:d3:44:f6:d6:bb:04:b7:6a:d8:86:45:3f:52:
                    26:23:fd:1e:2a:a1:f6:9b:ce:d6:e6:36:f9:d8:ec:
                    cc:29:f8:1c:aa:1a:ef:2c:7a:db:31:72:4b:89:ed:
                    a4:86:24:db:97:85:ed:e3:16:72:25:d5:b8:38:0f:
                    51:35:fa:0b:01:fa:a6:00:ed:39:fa:38:67:0a:b5:
                    3f:de:45:42:20:22:79:78:21:cf:53:d3:03:9a:40:
                    43:ec:dc:87:03:df:f8:04:61:fa:c3:62:a1:34:54:
                    0d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:45:FD:C7:A2:63:BD:7D:3C:8B:08:0F:39:30:1C:B8:59:15:4C:5B
            X509v3 Authority Key Identifier:
                keyid:BC:30:33:A1:02:B3:B7:91:2A:36:63:20:F4:43:5C:53:FB:97:73:F4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/30cf07-3fa8-44a6-935b-f9a7acd91bcc/1/vDAzoQKzt5EqNmMg9ENcU_uXc_Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:bb:12:f8:2f:e9:ec:f9:ae:7d:44:cb:f9:32:0b:ef:66:52:
         3e:3a:ec:fa:65:27:44:c8:32:c5:f6:88:83:c0:03:ea:e8:f0:
         1f:18:36:d3:dd:ba:02:d6:33:09:ec:74:21:7c:00:ad:e9:b9:
         70:80:92:b1:e0:ce:14:33:22:03:94:0e:24:bb:19:d1:6b:e5:
         aa:d6:9c:7d:1f:c9:6c:08:ae:a7:c4:75:e8:6f:45:bc:f8:33:
         4c:8b:a9:85:1f:8b:d8:19:1e:a4:03:77:6d:22:68:02:28:52:
         c7:35:d9:ed:98:17:c4:01:0a:8d:41:33:14:1c:50:7d:d0:69:
         73:5e:a2:11:04:08:a4:b5:58:90:3d:7e:22:fc:5b:51:95:02:
         c5:a0:cb:dd:c2:bb:51:fb:4c:89:1b:32:7c:62:15:1d:7c:d7:
         2e:b1:1a:79:79:de:ac:b7:d7:3e:04:f9:b4:14:37:7c:33:67:
         b1:3c:f0:b8:e9:98:26:c0:f9:ba:39:49:53:07:82:77:55:ff:
         3e:b9:e9:00:c9:65:d0:ad:ec:e5:b8:f4:26:b8:d0:61:75:74:
         36:27:c8:7d:f8:6a:1c:b4:c0:76:9c:23:b6:7d:3a:79:e4:45:
         ac:89:49:d9:9b:8b:01:f4:1b:9b:b7:00:2e:f3:c9:c6:51:b9:
         8a:48:70:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 19:07:22 2026 by rpki-client