Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
File:                     pVB1uOQuRRTvSdP-ovGHJk50-y4.mft (raw, json)
Hash identifier:          jL9BKMkrj6fWwyERNXr4LdNvca5JCJJ6dRH+btN/P5g=
Subject key identifier:   C8:8B:F6:0F:BD:F5:78:0B:58:49:A8:DE:5C:30:07:AB:CE:D2:A7:68
Authority key identifier: A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E
Certificate issuer:       /CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
Certificate serial:       019F958085001158A6718AA0764A1540966B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
Manifest number:          0664
Signing time:             Fri 24 Jul 2026 19:00:55 +0000
Manifest this update:     Fri 24 Jul 2026 19:00:55 +0000
Manifest next update:     Sat 25 Jul 2026 19:00:55 +0000
Files and hashes:         1: XQv7wEz4cC45Y-u3Csa_kFWZP8A.roa (hash: Rg6Z2DsQeZ19hmYMspcAw/07/1QRuxsRYhNWi/fAiwc=)
                          2: pVB1uOQuRRTvSdP-ovGHJk50-y4.crl (hash: 1ztnc0Mkf4YFuiTZZablY0W/6b+XhqdMIddpcnWjTIE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 17:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:95:80:85:00:11:58:a6:71:8a:a0:76:4a:15:40:96:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a55075b8e42e4514ef49d3fea2f187264e74fb2e
        Validity
            Not Before: Jul 24 19:00:55 2026 GMT
            Not After : Jul 25 19:00:55 2026 GMT
        Subject: CN=c88bf60fbdf5780b5849a8de5c3007abced2a768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:3c:5d:0f:70:30:e8:7b:95:78:ae:3a:11:f7:
                    6b:a3:38:00:b7:a9:29:c7:71:9b:a3:51:b0:79:39:
                    37:8a:1a:a6:c8:4a:bd:68:00:d0:b0:ad:85:b4:1b:
                    d7:47:cf:c6:17:3b:d4:44:c5:b9:e5:82:76:d0:de:
                    a2:a3:8c:54:93:97:90:67:7f:ed:66:c8:8e:2c:dd:
                    d6:29:87:c4:a2:92:8a:44:3a:62:11:57:7f:87:45:
                    c8:15:c5:c8:43:c0:13:2a:c5:79:22:d0:94:65:b5:
                    a2:cb:62:b1:57:68:f9:dc:c9:b3:47:b8:5c:a1:3a:
                    ba:5c:05:2f:ae:89:53:ef:ab:e5:b4:f9:5d:7c:32:
                    e5:06:12:40:87:92:47:00:7a:b4:db:b5:b5:1a:6d:
                    ab:7c:86:b5:5a:6e:f7:4b:3c:00:87:13:66:66:40:
                    54:36:52:5b:65:d2:e9:b3:4e:c6:29:ee:8d:52:75:
                    7f:8e:c7:1d:92:bf:16:73:11:2f:13:c3:7c:72:14:
                    35:f4:cc:fe:98:52:6e:76:35:aa:5b:bc:a1:e4:a8:
                    70:d6:2c:ad:eb:cf:33:60:30:fd:83:cb:06:76:d6:
                    c1:5f:db:00:7e:39:0c:fe:66:98:27:fe:aa:12:95:
                    b2:3b:a7:c2:cf:a3:bd:07:38:c9:60:dc:c9:04:a7:
                    52:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8B:F6:0F:BD:F5:78:0B:58:49:A8:DE:5C:30:07:AB:CE:D2:A7:68
            X509v3 Authority Key Identifier:
                keyid:A5:50:75:B8:E4:2E:45:14:EF:49:D3:FE:A2:F1:87:26:4E:74:FB:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pVB1uOQuRRTvSdP-ovGHJk50-y4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/9b1f95-3b18-4812-924e-7bfda62544ce/1/pVB1uOQuRRTvSdP-ovGHJk50-y4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:cd:1a:2c:1c:c7:eb:2e:30:4b:a2:f3:10:63:ff:c7:04:a5:
         cf:60:61:73:56:6e:a2:b4:a9:7e:db:b3:52:13:32:14:9b:0f:
         75:17:fe:0d:ec:79:1b:6d:f4:62:38:da:06:0b:38:da:99:5b:
         bf:dd:a8:76:3f:01:39:d7:1f:f2:e8:ba:fc:77:86:ae:47:e0:
         c7:ec:ed:55:9d:55:e5:ff:46:d6:f6:83:fa:7d:d8:6d:79:a6:
         f9:18:72:a5:a2:38:61:56:2b:ef:21:3c:1e:a7:8c:f2:ac:f9:
         3c:c2:c1:78:10:57:18:9d:59:d2:b5:94:d4:af:d7:75:ff:0a:
         90:69:0a:ba:09:ba:55:84:1a:ce:d3:dd:58:c5:3a:2e:ff:c8:
         07:0d:42:1f:12:4e:a6:26:24:e7:6e:22:40:f4:cd:27:e4:e8:
         05:df:e9:a0:b1:2b:09:af:8c:a4:d6:7c:94:f3:eb:eb:01:78:
         3a:1b:27:cb:9a:85:1a:f1:07:4f:1c:0a:28:5d:4e:c0:4c:f4:
         d9:23:98:cb:27:87:41:79:32:1d:91:58:ff:c5:4e:db:50:ab:
         0d:a2:00:2c:f4:ed:ed:a0:32:01:38:65:cc:5d:e8:8d:01:c7:
         1c:32:66:5a:31:45:ad:87:73:e2:38:3e:9b:71:94:42:83:1a:
         73:52:a4:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:03:40 2026 by rpki-client