Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
File:                     vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft (raw, json)
Hash identifier:          o14g5fhCGB0MCXkF+/bdUfvLe3OM8S2RKE2DsDLdlqs=
Subject key identifier:   AD:92:17:DF:D5:E2:53:60:EA:B6:A2:F0:3E:3D:AC:69:C3:7B:0F:D7
Authority key identifier: BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01
Certificate issuer:       /CN=bccd52a6a7f957171b15f7be5e20916428369401
Certificate serial:       019F8FECD04E5F621A0BBC13384924E91072
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
Manifest number:          0FD5
Signing time:             Thu 23 Jul 2026 17:01:29 +0000
Manifest this update:     Thu 23 Jul 2026 17:01:29 +0000
Manifest next update:     Fri 24 Jul 2026 17:01:29 +0000
Files and hashes:         1: 0QR437_yNuwd46JSd_IiWmhwYow.roa (hash: 6GDXre6adrsJyqw14UC9mtlOqvJoPEYUbHv7Lqn+43k=)
                          2: 2JrvCfQOV4ZXnrTIWBdXJFkLuUs.roa (hash: oY8xJamfMnGEV8NndDLYA4TQsbfWIC33a4tru6ptivk=)
                          3: vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl (hash: ecFvD//qILZDDCjyDYnW2MJhqnpygg05qZFi2dhAj/I=)
                          4: wwh70_fWojYStsjUuAC2NCdOguo.roa (hash: FHvLtN1EizK8sBcMqm1u4JO0yb8K5X+r6eZldZxIZo8=)
                          5: ydQtvb3bvjFb-2ukCgShBr4iJ7o.roa (hash: D1atPq/SoJlgXADbklDBQIhta1tm984jYa7MmKBjm1U=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:d0:4e:5f:62:1a:0b:bc:13:38:49:24:e9:10:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bccd52a6a7f957171b15f7be5e20916428369401
        Validity
            Not Before: Jul 23 17:01:29 2026 GMT
            Not After : Jul 24 17:01:29 2026 GMT
        Subject: CN=ad9217dfd5e25360eab6a2f03e3dac69c37b0fd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2a:8e:0f:7a:92:c8:f5:9c:b2:68:89:85:75:
                    ea:ab:67:1a:86:4d:49:ce:b5:71:2c:66:96:da:82:
                    c2:71:49:12:45:0a:fd:81:00:18:57:6b:35:c9:9e:
                    58:0f:67:b5:2a:c1:0c:24:e6:81:bc:01:0d:b8:b8:
                    8d:45:17:23:9d:0c:40:aa:a7:1d:ae:e2:a8:fa:c3:
                    c9:8a:06:fa:01:18:84:2a:83:58:9f:54:07:56:93:
                    1e:16:c3:2a:f8:0c:50:f3:a5:ee:ee:36:27:4e:cb:
                    f8:ae:43:f5:d6:48:85:1c:09:69:b0:89:2e:d0:cf:
                    38:5a:45:05:72:39:85:d3:66:71:b8:e4:80:cb:47:
                    d0:73:4e:7e:c7:45:36:39:f4:e1:b7:72:64:0c:28:
                    41:d6:46:d0:49:48:03:dc:f8:9a:dd:b6:23:34:51:
                    a3:82:8e:9e:7c:1d:d8:fd:5a:22:f9:d6:1c:1c:2d:
                    1e:2d:df:11:24:e1:45:4a:b6:68:6d:42:0b:f1:7d:
                    20:74:62:26:40:cf:60:ae:42:e2:7d:4a:59:b4:53:
                    5f:d2:d1:79:e2:c8:0b:86:9c:e3:c0:be:4b:a1:30:
                    de:d7:9c:18:40:e6:42:c8:bd:10:ae:b8:05:cf:16:
                    3b:ec:45:55:9d:68:19:f7:01:3c:2d:0a:df:d1:e4:
                    7d:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:92:17:DF:D5:E2:53:60:EA:B6:A2:F0:3E:3D:AC:69:C3:7B:0F:D7
            X509v3 Authority Key Identifier:
                keyid:BC:CD:52:A6:A7:F9:57:17:1B:15:F7:BE:5E:20:91:64:28:36:94:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vM1Spqf5VxcbFfe-XiCRZCg2lAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/eeab9a-d207-4b2e-a525-e823e17bb5cc/1/vM1Spqf5VxcbFfe-XiCRZCg2lAE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:1b:20:c3:a8:ad:e5:ab:3a:7b:94:26:98:5b:89:c0:2f:bc:
         9d:b1:59:14:27:cf:d4:df:5e:79:39:28:ab:84:39:08:61:bc:
         ba:28:3b:f1:db:40:76:85:6a:51:27:d1:44:72:ce:bf:1b:27:
         92:00:f0:8e:63:45:32:59:aa:e6:76:e1:37:8e:56:d5:29:c6:
         7e:81:75:73:ca:79:59:3f:3c:4a:4a:c5:0c:84:3a:f2:2e:b9:
         3c:f5:46:11:e2:38:40:25:93:08:21:a5:2a:77:01:b8:4f:a2:
         0f:79:7f:1b:1a:6c:96:bd:be:8e:78:69:74:43:69:0e:e7:3f:
         67:32:8c:4b:66:e3:96:b4:ce:77:31:c2:4e:e1:6f:04:8c:0e:
         79:81:ff:8b:36:13:34:af:f2:2a:3e:90:00:bb:9b:8d:73:7e:
         2c:6e:88:b3:59:5b:e1:1d:0a:29:c5:59:26:56:fa:19:1f:de:
         fc:b7:64:70:29:5b:f3:cd:bb:bd:74:cd:4b:68:25:ee:71:4f:
         29:54:6a:45:24:0c:98:56:78:34:5e:22:68:bf:d3:48:3b:a2:
         5a:cc:c9:ef:a6:28:15:15:40:69:51:42:3d:2f:3f:ba:1c:33:
         61:d0:0c:49:00:8d:87:c8:16:86:6b:9f:49:e4:e2:8f:39:93:
         0a:1d:e5:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:19:55 2026 by rpki-client