Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          OrRlkUxIWRlfWyiSwpoG3n97vAgDJ3EiS6uur3cl5NE=
Subject key identifier:   A2:65:48:20:A4:A5:38:CB:6A:50:20:38:5E:D1:FA:70:0E:BE:28:AA
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019F96933F0150342864A7BC458C23A0DA39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          1618
Signing time:             Sat 25 Jul 2026 00:00:59 +0000
Manifest this update:     Sat 25 Jul 2026 00:00:59 +0000
Manifest next update:     Sun 26 Jul 2026 00:00:59 +0000
Files and hashes:         1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: sOULTt57400iBD1mq2MxUPRBKZGM2xOb4LqSeeI2X/4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 20:40:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:96:93:3f:01:50:34:28:64:a7:bc:45:8c:23:a0:da:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Jul 25 00:00:59 2026 GMT
            Not After : Jul 26 00:00:59 2026 GMT
        Subject: CN=a2654820a4a538cb6a5020385ed1fa700ebe28aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a5:76:63:4c:2d:97:97:e5:73:a5:cc:10:c8:
                    a6:e5:97:8a:06:85:6a:21:85:d4:9a:67:ce:cd:ff:
                    85:6d:2d:3f:cf:5e:59:bc:c9:0c:79:91:32:48:cc:
                    8f:eb:6f:b0:bb:21:e8:e3:ee:cf:57:49:af:e1:c1:
                    0c:60:58:f5:52:65:ad:5c:45:ad:a0:db:ae:96:0c:
                    6e:5d:fe:f4:03:0a:1d:ea:58:02:38:5e:3c:db:49:
                    d3:02:b8:c2:ed:93:c8:c2:74:9d:c4:67:43:68:6e:
                    df:77:b7:61:7a:3b:37:8b:65:30:0b:15:db:92:de:
                    0f:5b:a8:60:d3:cf:47:c6:48:5f:c8:c3:e0:62:bb:
                    c4:1f:92:45:9c:a9:90:05:a3:eb:be:a0:3e:4c:88:
                    09:d9:41:3b:10:a1:79:1c:28:25:0e:d5:a4:32:e8:
                    79:8c:21:a4:c6:c3:72:54:45:89:c1:dc:4b:d3:5b:
                    64:aa:76:4a:31:7d:c8:c9:83:2b:20:31:4f:1e:7b:
                    1b:a0:0c:3a:5b:30:36:da:14:98:f2:6b:d3:4e:15:
                    4d:64:40:51:96:f6:99:4e:3f:86:5f:68:b3:da:cc:
                    38:25:d0:4a:f2:58:64:23:ca:ec:3f:c2:59:1c:b4:
                    38:f7:30:61:2f:5c:3c:eb:6a:cb:f0:48:a4:73:ae:
                    c9:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:65:48:20:A4:A5:38:CB:6A:50:20:38:5E:D1:FA:70:0E:BE:28:AA
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:38:fa:9d:d0:4a:ab:0d:fa:71:5f:89:de:a3:b8:41:91:76:
         85:ac:af:7a:ff:dd:9d:1c:bf:5a:50:51:c5:51:1f:72:e4:64:
         0e:b3:98:1d:69:66:20:db:29:c6:bb:ef:dc:6f:29:2e:98:12:
         9c:b1:84:c7:91:99:1e:83:f1:d1:f1:bb:bc:a5:51:d2:9f:bd:
         8c:83:7c:b6:e4:8f:8e:ca:c5:9a:7a:80:f0:78:c0:98:c5:7c:
         e4:f0:82:df:12:1a:a9:8a:3d:89:6a:64:f3:da:af:85:46:0a:
         29:03:80:41:cb:01:e6:9b:89:90:dc:fb:e3:fe:bf:1f:29:36:
         10:a6:20:ec:08:f8:67:75:8c:3a:9a:cf:24:f8:a1:eb:98:f7:
         8b:5c:1c:95:0f:09:a6:73:60:23:1b:93:8d:d0:73:57:d3:28:
         04:f0:79:c0:4f:2d:07:00:35:4c:e8:63:03:5f:7e:31:44:bd:
         9f:98:26:a3:37:ab:d1:70:9a:0d:6c:fc:c7:9b:ab:d9:05:59:
         c4:f0:63:54:c2:47:fb:af:40:63:54:d4:3b:bc:8e:46:48:94:
         28:59:ce:51:8c:13:a2:1b:5b:24:09:c3:50:eb:a5:04:e4:ea:
         2a:5d:ff:88:32:01:f0:5e:bf:79:6e:ca:d1:d8:26:ba:89:8d:
         a4:7a:6f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 04:11:17 2026 by rpki-client