Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
File:                     vjxU0e3KaS9Eydo4NALCT95yNQc.mft (raw, json)
Hash identifier:          RXCXPpAM9Uhw0J2dRGbYcxcSxda1vLnX5R4DV32sjJ4=
Subject key identifier:   E3:41:A8:76:BC:8F:1F:E0:79:94:16:BF:50:80:54:1D:CA:D8:C8:1F
Authority key identifier: BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07
Certificate issuer:       /CN=be3c54d1edca692f44c9da383402c24fde723507
Certificate serial:       019F9248990EC51FE506FF175E924A06D53A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
Manifest number:          195A
Signing time:             Fri 24 Jul 2026 04:00:58 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:58 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:58 +0000
Files and hashes:         1: CIRhprz3rBBOPNEdy3jnFyLtmiA.roa (hash: z/XfH3Aycu8JqZsvCP3U4kd6hBotdVQ6hRO0n7omiP8=)
                          2: vjxU0e3KaS9Eydo4NALCT95yNQc.crl (hash: zK9xO+rsZxt+P/YfbUcMpudlXHajFE1yh3ObyzUImtY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 04:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:99:0e:c5:1f:e5:06:ff:17:5e:92:4a:06:d5:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3c54d1edca692f44c9da383402c24fde723507
        Validity
            Not Before: Jul 24 04:00:58 2026 GMT
            Not After : Jul 25 04:00:58 2026 GMT
        Subject: CN=e341a876bc8f1fe0799416bf5080541dcad8c81f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:bc:24:71:5e:13:60:59:73:ae:8b:ab:db:b2:
                    cc:f4:78:f0:a1:4b:40:4d:bb:f5:e5:c0:aa:75:1c:
                    00:df:d2:25:f1:31:98:ed:c7:87:97:fc:c0:f7:ca:
                    3f:76:2f:d0:bd:09:cb:d8:2b:15:74:4f:ff:4c:a9:
                    a5:52:68:32:39:c5:35:2d:3e:51:77:41:5b:0e:2d:
                    47:92:66:8f:94:96:93:e0:09:d8:04:ca:1c:45:8c:
                    ef:00:c0:e6:ae:11:9c:b4:05:6f:4f:7d:bf:e6:36:
                    47:81:d9:fc:24:da:8f:69:9d:38:fd:05:09:ed:af:
                    44:9a:b0:e5:32:ec:1f:01:0a:16:a0:7c:c5:ce:b7:
                    54:3d:09:b5:30:34:c9:3b:0d:76:d2:3e:76:87:9a:
                    cf:3f:b8:15:93:6a:0e:9d:d2:cf:e0:ec:ad:89:6a:
                    5d:52:a2:0d:a6:36:97:3c:89:f0:07:e6:e6:8d:4d:
                    cb:d4:8a:bc:3c:dc:0b:2f:6a:5f:28:4b:79:93:a8:
                    4a:d7:9e:21:33:43:93:27:e5:ca:03:e9:75:f5:ca:
                    b4:6c:46:5c:e2:a7:55:c7:7c:73:0e:1c:73:eb:1c:
                    49:22:af:86:af:e9:3a:8c:bf:ae:ba:3b:c3:0d:b3:
                    00:f3:8b:1a:7f:df:3d:64:a9:72:d0:db:a0:f0:c8:
                    17:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:41:A8:76:BC:8F:1F:E0:79:94:16:BF:50:80:54:1D:CA:D8:C8:1F
            X509v3 Authority Key Identifier:
                keyid:BE:3C:54:D1:ED:CA:69:2F:44:C9:DA:38:34:02:C2:4F:DE:72:35:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjxU0e3KaS9Eydo4NALCT95yNQc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/35/5d6745-e0d6-40d0-84ed-c34953edc7e5/1/vjxU0e3KaS9Eydo4NALCT95yNQc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:78:ff:9f:16:29:44:64:15:c2:26:f1:c9:d4:91:1f:e4:d5:
         c4:65:4d:dc:16:ca:1d:dc:0b:a8:de:a9:78:cc:c6:4d:58:24:
         33:67:c8:f7:cc:b7:7c:50:ac:ba:05:e5:2c:29:60:95:76:33:
         bd:dc:ee:6d:74:13:8e:79:75:ec:89:6c:60:85:42:12:9a:f0:
         12:3d:4b:06:ca:b3:eb:ff:b1:c0:58:ff:1b:8f:b9:5d:02:59:
         23:f0:87:90:3f:1d:8d:c3:3a:9e:1a:47:a6:4b:a1:68:14:b7:
         a5:d6:d0:5c:a0:79:07:c2:15:2d:ad:19:a7:63:eb:02:80:5f:
         eb:8a:85:79:ad:92:87:b1:d5:14:66:b5:ec:7a:2a:77:ef:d6:
         95:ed:64:a7:18:71:18:91:a5:fe:28:a8:b5:0c:95:0e:e7:5f:
         4d:9c:20:77:a3:b9:88:58:a3:da:5b:3e:10:93:1b:46:70:96:
         79:9a:05:b6:e7:89:8e:68:13:1b:70:d0:97:4a:6a:31:37:86:
         38:b8:1b:a2:fe:ee:e8:e6:25:6e:fa:6f:d0:69:79:89:5d:b3:
         50:81:ec:2d:66:d8:dc:5a:b4:bb:de:35:d2:84:bc:49:9c:14:
         b2:df:b5:a7:77:e2:71:68:a9:e2:c7:28:4c:67:8d:e2:a9:aa:
         41:2c:b4:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:40:15 2026 by rpki-client