Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
File:                     vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft (raw, json)
Hash identifier:          IrF6Ii/ERaco+KQLxt66vX+7cinPc2vU1RhLMNfOuY0=
Subject key identifier:   65:E5:FE:F1:3C:A0:2D:38:67:86:B6:DD:B8:55:0C:88:1D:56:41:FE
Authority key identifier: BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6
Certificate issuer:       /CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
Certificate serial:       019F91DA881C6F63624B907FA5326C129389
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
Manifest number:          039D
Signing time:             Fri 24 Jul 2026 02:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:45 +0000
Files and hashes:         1: vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl (hash: jGu3enqHewx2/RXCMwdSaa1UfLjAwaPJw/uOhvGxKlE=)
                          2: xnX10RwznEnmTe1E1E5B2rhOTnA.roa (hash: feg+CLsY1TCQ8UES6e5qZUfIKp0hLMvvn81xyTCKGRc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:88:1c:6f:63:62:4b:90:7f:a5:32:6c:12:93:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6892e99c84a1c5dc9b12e114d67af16c24a9d6
        Validity
            Not Before: Jul 24 02:00:45 2026 GMT
            Not After : Jul 25 02:00:45 2026 GMT
        Subject: CN=65e5fef13ca02d386786b6ddb8550c881d5641fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ae:a5:69:44:47:d9:b1:29:b9:e9:40:2b:05:
                    93:06:32:f8:4d:92:48:22:09:92:39:06:61:d3:12:
                    7a:c6:16:d2:11:2b:4b:5c:8c:c2:79:7a:fc:d9:df:
                    4f:db:7c:f0:64:a5:50:e2:17:61:ba:cf:0e:71:56:
                    38:46:72:6d:72:4f:22:0a:f9:c9:41:cb:9b:34:57:
                    d2:f7:b9:e3:6d:aa:c3:dc:5f:4f:71:01:6a:6f:ae:
                    0e:77:ab:0a:3f:fd:34:d9:70:ec:8b:e9:58:60:e0:
                    b1:94:98:4c:d2:12:8f:07:c5:33:f1:fd:c3:6c:0f:
                    03:b7:fe:75:f3:1f:78:bc:85:9d:ad:5e:ff:63:aa:
                    05:57:d0:99:07:e5:e5:1e:2b:44:7e:0f:43:8f:b9:
                    ab:25:aa:c6:2c:8d:48:62:46:a6:75:01:ee:66:6c:
                    c3:22:68:8a:66:c6:f4:d3:88:31:f0:e9:d9:e7:64:
                    9f:fa:1b:64:6e:0f:1f:af:90:6f:d5:b6:b4:32:7a:
                    bb:c2:02:b4:69:6a:60:87:45:47:9f:13:cd:b7:4e:
                    05:c7:0c:2f:a7:e0:44:fa:7e:92:0c:7b:33:e9:38:
                    94:92:de:46:16:85:dc:6a:d2:f6:3e:92:73:24:29:
                    97:c2:87:66:21:e1:1f:f9:09:cf:9e:20:5e:c3:f0:
                    7b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:E5:FE:F1:3C:A0:2D:38:67:86:B6:DD:B8:55:0C:88:1D:56:41:FE
            X509v3 Authority Key Identifier:
                keyid:BC:68:92:E9:9C:84:A1:C5:DC:9B:12:E1:14:D6:7A:F1:6C:24:A9:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGiS6ZyEocXcmxLhFNZ68WwkqdY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/62d9dd-72f2-42a7-9982-b64e0f6a09ca/1/vGiS6ZyEocXcmxLhFNZ68WwkqdY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:c3:02:7d:d6:e6:b0:9d:3b:0a:61:7e:ec:32:af:eb:9b:a2:
         bf:f7:29:77:6a:44:a6:85:18:89:97:3c:28:ee:e4:e4:d8:87:
         cb:c7:5c:b3:f8:61:71:95:2e:4d:08:4c:05:9f:47:9d:b3:e2:
         0a:c5:25:c6:19:cf:8e:04:0b:9d:5c:fe:a3:46:a5:c7:25:9f:
         25:a3:cb:03:9e:41:0b:03:0a:bb:d4:a1:4b:44:97:99:84:ba:
         70:81:f5:60:83:0e:95:dc:ca:94:7d:74:69:0f:68:77:10:36:
         03:12:2f:cb:0c:80:f5:b9:0d:a6:bf:4a:58:6a:fd:bb:c4:34:
         27:fe:cc:2f:b6:01:a9:5e:31:69:93:60:5a:d9:5e:c2:dd:82:
         d4:44:3f:31:92:07:c8:e2:d5:7a:0e:4c:e4:02:3d:7d:53:56:
         bf:77:a4:83:7d:06:7c:eb:91:24:0e:69:13:30:ca:c9:0f:ac:
         3c:22:8f:73:8c:7a:6d:59:e1:27:3c:d4:5c:65:67:6a:16:a9:
         3e:68:e7:e3:97:59:cc:85:fa:26:09:cb:b0:95:d6:da:b4:ea:
         25:1e:e2:7d:ec:10:62:93:59:db:b8:1f:72:05:b7:6c:cd:be:
         90:7d:f5:e3:4f:79:9a:8f:f2:be:9a:b1:99:1c:11:66:e0:9f:
         93:9d:37:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+R2ogcb2NiS5B/pTJsEpOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjg5MmU5OWM4NGExYzVkYzliMTJlMTE0ZDY3YWYxNmMy
NGE5ZDYwHhcNMjYwNzI0MDIwMDQ1WhcNMjYwNzI1MDIwMDQ1WjAzMTEwLwYDVQQD
Eyg2NWU1ZmVmMTNjYTAyZDM4Njc4NmI2ZGRiODU1MGM4ODFkNTY0MWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1K6laURH2bEpuelAKwWTBjL4TZJI
IgmSOQZh0xJ6xhbSEStLXIzCeXr82d9P23zwZKVQ4hdhus8OcVY4RnJtck8iCvnJ
QcubNFfS97njbarD3F9PcQFqb64Od6sKP/002XDsi+lYYOCxlJhM0hKPB8Uz8f3D
bA8Dt/518x94vIWdrV7/Y6oFV9CZB+XlHitEfg9Dj7mrJarGLI1IYkamdQHuZmzD
ImiKZsb004gx8OnZ52Sf+htkbg8fr5Bv1ba0Mnq7wgK0aWpgh0VHnxPNt04Fxwwv
p+BE+n6SDHsz6TiUkt5GFoXcatL2PpJzJCmXwodmIeEf+QnPniBew/B76wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXl/vE8oC04Z4a23bhVDIgdVkH+MB8GA1UdIwQY
MBaAFLxokumchKHF3JsS4RTWevFsJKnWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODIt
YjY0ZTBmNmEwOWNhLzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My82MmQ5ZGQtNzJmMi00MmE3LTk5ODItYjY0ZTBmNmEwOWNh
LzEvdkdpUzZaeUVvY1hjbXhMaEZOWjY4V3drcWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq8MCfdbm
sJ07CmF+7DKv65uiv/cpd2pEpoUYiZc8KO7k5NiHy8dcs/hhcZUuTQhMBZ9HnbPi
CsUlxhnPjgQLnVz+o0alxyWfJaPLA55BCwMKu9ShS0SXmYS6cIH1YIMOldzKlH10
aQ9odxA2AxIvywyA9bkNpr9KWGr9u8Q0J/7ML7YBqV4xaZNgWtlewt2C1EQ/MZIH
yOLVeg5M5AI9fVNWv3ekg30GfOuRJA5pEzDKyQ+sPCKPc4x6bVnhJzzUXGVnahap
Pmjn45dZzIX6JgnLsJXW2rTqJR7ifewQYpNZ27gfcgW3bM2+kH314095mo/yvpqx
mRwRZuCfk503Cg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:30:14 2026 by rpki-client