Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
File:                     HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft (raw, json)
Hash identifier:          y25i4Az5cl67iAdgRQqDSscRVwUNyxK4zQC5xsqjs+U=
Subject key identifier:   06:D6:A5:CE:3E:54:14:11:D2:D3:65:61:7A:BA:10:3B:89:DE:CA:13
Authority key identifier: 1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42
Certificate issuer:       /CN=1d2fefbd168f18661eca15569dc6218f86746942
Certificate serial:       019F92B6AD944A8F5E7B069FF570F94A031E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
Manifest number:          1522
Signing time:             Fri 24 Jul 2026 06:01:13 +0000
Manifest this update:     Fri 24 Jul 2026 06:01:13 +0000
Manifest next update:     Sat 25 Jul 2026 06:01:13 +0000
Files and hashes:         1: 2N_IitL-Roir7KWPvaCm5THkhUg.roa (hash: NPSRBZiouS646q44dnnhpu+APpisTp7TAM14DCj7m+A=)
                          2: HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl (hash: uwfCqG4gi3x5TV8NYjbDiijGvPsy/efSrMYVK5ma+xk=)
                          3: R9NM-BVkjdOgHMvjqOrQmeiRwfc.roa (hash: 3NXP8/kDPMdPKlf5UK/0AZErHOXSoPloXC4ehIWQshs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:b6:ad:94:4a:8f:5e:7b:06:9f:f5:70:f9:4a:03:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d2fefbd168f18661eca15569dc6218f86746942
        Validity
            Not Before: Jul 24 06:01:13 2026 GMT
            Not After : Jul 25 06:01:13 2026 GMT
        Subject: CN=06d6a5ce3e541411d2d365617aba103b89deca13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:72:22:ac:9d:22:33:22:18:de:ef:2c:4f:7a:
                    6a:2c:0f:41:fc:d1:8b:1b:8e:a3:ab:8c:61:9c:0e:
                    15:6d:35:0a:1f:f3:82:60:2d:74:fe:aa:18:0c:d6:
                    b4:2d:2f:22:5b:12:47:21:88:2a:a4:83:9a:87:03:
                    b4:28:b0:17:3f:4b:89:0e:6e:eb:39:a1:39:69:43:
                    f6:ef:d5:7f:44:0f:a0:8a:de:e3:b8:e2:e2:22:f5:
                    e7:3c:80:cc:09:2d:e0:c9:60:94:c5:7c:7b:6c:33:
                    b6:52:74:fa:13:6e:97:e9:81:e7:86:55:cb:85:47:
                    6f:36:d1:96:c5:99:64:4c:16:04:cb:28:4b:7a:d0:
                    a3:37:64:f3:4a:c8:60:ff:af:96:25:02:2c:dc:71:
                    85:28:b4:8d:0b:e4:8b:5d:79:a7:11:ca:86:60:c7:
                    dc:57:95:05:8c:5e:7f:9f:7b:f4:13:dc:4b:59:ba:
                    08:41:82:4a:d0:38:ab:e8:bb:96:ef:84:28:be:50:
                    b7:25:2a:38:1f:e8:29:21:db:f9:8b:3d:f2:e6:76:
                    5c:eb:ff:1f:b4:6e:34:55:48:93:70:5b:f3:4d:19:
                    0a:c4:81:45:f9:6e:aa:d6:98:fc:17:e1:52:5a:75:
                    64:e9:f0:c6:50:a1:81:74:ae:a8:fb:1c:3d:da:0b:
                    ee:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D6:A5:CE:3E:54:14:11:D2:D3:65:61:7A:BA:10:3B:89:DE:CA:13
            X509v3 Authority Key Identifier:
                keyid:1D:2F:EF:BD:16:8F:18:66:1E:CA:15:56:9D:C6:21:8F:86:74:69:42

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HS_vvRaPGGYeyhVWncYhj4Z0aUI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/53/c2df59-9f1e-48df-8466-c6495853cc1a/1/HS_vvRaPGGYeyhVWncYhj4Z0aUI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:ea:4e:c4:43:d5:d5:96:bc:24:05:90:de:dc:8c:fe:e6:a2:
         c9:e3:53:9a:e6:1b:74:8d:02:42:b8:2f:88:ec:41:e0:50:11:
         60:8f:90:d6:6d:2a:df:5d:4a:cd:47:80:0b:36:f0:67:be:da:
         ed:90:97:a9:1d:f2:50:ad:2f:08:7a:f4:24:9e:7f:da:03:1e:
         69:84:82:97:de:d5:25:c6:54:c6:f7:6b:8b:5f:8d:1d:60:58:
         bb:90:43:00:a7:fb:83:4a:ab:5c:4f:d2:bc:aa:a7:f1:60:2c:
         10:08:b1:02:62:14:bf:ba:c3:76:b9:03:33:b2:7c:f7:d8:fb:
         93:00:84:6c:30:bf:29:41:34:d5:9e:b3:bc:3e:6f:2f:e5:93:
         f4:45:07:83:bc:ab:f1:51:bd:7e:a2:6a:cf:3a:72:7a:12:f1:
         e4:0e:b1:dd:1c:1c:f6:e3:94:64:13:3a:b7:72:f0:f9:97:f2:
         b2:10:1d:bf:6d:7b:05:45:7c:69:6d:95:be:35:1a:43:d6:ce:
         ce:de:c5:5f:19:d9:06:26:62:2c:4b:d0:31:09:75:fc:7d:41:
         70:5f:d7:40:90:cb:c3:9d:c2:9c:b4:e1:6f:0b:a4:8c:55:ea:
         3b:aa:18:ea:0c:9f:b6:20:ef:55:34:5c:8e:c1:38:c1:d4:09:
         31:23:42:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:28:15 2026 by rpki-client