Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
File:                     VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft (raw, json)
Hash identifier:          2+ZV63dgBhPuHGIB/t6KXEeAPq7S9x57uiHJW29uKbA=
Subject key identifier:   5C:3E:87:1C:63:3F:53:CD:CA:E4:59:79:7D:7F:BB:D0:49:F1:00:12
Authority key identifier: 54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C
Certificate issuer:       /CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
Certificate serial:       019F954A4E96963DF61B83F333D495EF1EC9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
Manifest number:          19C8
Signing time:             Fri 24 Jul 2026 18:01:42 +0000
Manifest this update:     Fri 24 Jul 2026 18:01:42 +0000
Manifest next update:     Sat 25 Jul 2026 18:01:42 +0000
Files and hashes:         1: 1-VM5a5VKVQLBO_mS5M0AKzrssE0.roa (hash: IZ1q5GIjELLZgJlLEGzKrti0blpYjCurNkMWnWHLthU=)
                          2: VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl (hash: Dz6fa5YIkh5Wd/roN1OOUx11onoVo5XsZB7osu7eStY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:4a:4e:96:96:3d:f6:1b:83:f3:33:d4:95:ef:1e:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54882b1413221e9b5d3bc8a7329b7649f9b1ec2c
        Validity
            Not Before: Jul 24 18:01:42 2026 GMT
            Not After : Jul 25 18:01:42 2026 GMT
        Subject: CN=5c3e871c633f53cdcae459797d7fbbd049f10012
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1f:e6:ab:3b:a9:5b:b7:12:b2:23:72:c9:8f:
                    77:1f:86:f9:04:b7:30:52:4e:e7:cb:5c:d2:6b:69:
                    8c:09:f2:53:29:71:c4:57:08:94:d7:15:c5:fa:ff:
                    6b:53:d4:c0:5b:f7:ea:cb:6f:7d:f0:71:68:bc:b5:
                    f7:a1:83:4a:1e:16:11:90:5e:c9:47:17:c2:47:34:
                    a1:7a:49:96:50:9d:37:59:7f:95:33:af:24:31:27:
                    08:b9:ee:fd:d1:b2:a1:6b:41:f3:aa:1a:d1:cc:79:
                    f5:03:b7:f9:24:32:02:92:df:32:53:f8:ca:a1:73:
                    68:33:5a:11:87:10:00:d0:7d:e0:1e:dc:a6:d4:ea:
                    11:b0:35:7a:81:9a:70:10:e8:ba:67:c8:7e:e8:be:
                    32:e3:ef:6f:18:43:ea:f2:92:67:aa:ea:53:b9:11:
                    42:f0:3f:c3:99:f5:6f:cf:29:c4:56:50:bb:39:4e:
                    01:fa:f3:f2:4e:5f:0c:de:4f:fc:ed:f9:b2:64:25:
                    d1:80:2a:3e:21:46:08:60:3e:84:8c:81:48:52:fd:
                    8c:0c:fe:0a:a1:31:bf:24:bc:86:5e:04:f3:d3:ab:
                    63:b9:0d:f1:2b:c1:e5:64:3e:00:23:6a:39:b6:8b:
                    c0:24:95:b5:f4:43:ad:0c:ea:07:af:3b:c6:ac:3a:
                    55:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:3E:87:1C:63:3F:53:CD:CA:E4:59:79:7D:7F:BB:D0:49:F1:00:12
            X509v3 Authority Key Identifier:
                keyid:54:88:2B:14:13:22:1E:9B:5D:3B:C8:A7:32:9B:76:49:F9:B1:EC:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VIgrFBMiHptdO8inMpt2Sfmx7Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/40/a760a9-ab5e-4acf-a8e2-4bd58db10ed2/1/VIgrFBMiHptdO8inMpt2Sfmx7Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:5a:52:61:22:5a:1e:a2:00:21:85:c4:0a:e7:c2:2c:02:e3:
         fe:97:65:3c:43:44:cf:31:64:d4:bc:f2:9a:b8:77:07:ec:52:
         a2:7b:be:2e:a2:8e:05:d4:75:38:63:1e:d0:6e:d2:44:e0:f0:
         c1:f7:ae:d1:2f:5d:78:c1:30:30:d6:c7:fd:e7:45:bc:dd:f7:
         62:64:3e:86:7e:b9:f7:a0:65:6a:1c:96:18:65:9c:54:8f:81:
         41:a1:65:e8:17:3c:36:89:7a:c2:25:64:73:e0:48:b7:ba:8f:
         cd:20:c1:20:8f:3d:31:4f:2a:60:4f:6c:c2:29:75:10:74:31:
         63:44:fb:f7:d6:de:d7:5c:86:ed:f5:5b:41:5b:17:5b:88:3f:
         84:7a:3c:7d:83:0a:b9:7d:41:a6:96:53:ab:6f:53:64:9e:75:
         05:df:cc:9f:f6:8d:c8:bb:cf:e8:c2:c7:89:90:09:b4:41:18:
         77:c3:29:96:e1:c9:ec:42:00:6f:5e:40:9a:ac:04:56:b7:83:
         f7:c2:06:ec:81:e6:21:64:b3:91:43:3f:af:05:a2:a2:2c:d2:
         37:47:08:a5:a8:ee:16:da:29:05:91:6a:a8:3d:2d:5e:d1:ef:
         dd:e4:4e:35:3f:51:aa:78:2e:33:d7:f6:c3:24:59:f3:c6:c2:
         07:4a:f7:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 23:14:33 2026 by rpki-client