Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          PeIuWbWntCng+ZjgsF6wBVRKGfFT5NuEKSv1XW2PICA=
Subject key identifier:   EA:90:56:8D:2E:5D:5E:66:4D:D9:9A:66:C0:86:36:9A:8D:F5:5B:50
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       019F9323BBF7ED44668D3DD48128D837AB47
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          0880
Signing time:             Fri 24 Jul 2026 08:00:20 +0000
Manifest this update:     Fri 24 Jul 2026 08:00:20 +0000
Manifest next update:     Sat 25 Jul 2026 08:00:20 +0000
Files and hashes:         1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: wZlzZ8DiS5o0CaWotTX6c8Sc2fbNsZ+WgVWKfa20Eec=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:93:23:bb:f7:ed:44:66:8d:3d:d4:81:28:d8:37:ab:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Jul 24 08:00:20 2026 GMT
            Not After : Jul 25 08:00:20 2026 GMT
        Subject: CN=ea90568d2e5d5e664dd99a66c086369a8df55b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:65:cc:f8:c9:61:83:22:eb:8c:52:3b:cd:8c:
                    12:88:aa:f1:01:e5:4e:13:cc:a6:0b:81:6c:b2:33:
                    24:4d:2d:39:5b:9c:57:e1:92:ef:a5:04:b7:c7:5a:
                    59:ff:14:af:21:6f:05:10:d1:e0:c0:89:50:3f:cc:
                    eb:9e:08:64:c7:32:cd:b5:35:36:89:d9:57:e1:9e:
                    ad:97:c4:e1:45:e5:95:0b:e5:b9:63:20:1f:44:e8:
                    9c:14:2c:bd:92:cd:0a:17:a8:2d:93:99:de:60:06:
                    8b:84:9c:1d:4f:83:f6:b9:50:c0:16:94:e8:70:5e:
                    8f:a3:10:02:9d:49:a6:1c:42:84:28:7c:b6:45:29:
                    bb:cb:58:f9:0c:a9:7e:4c:20:8b:8a:b0:9d:ef:29:
                    74:98:6d:7f:90:b9:77:68:82:2d:27:b5:11:0b:93:
                    6c:8c:71:5b:0d:61:04:01:ec:9f:97:54:0a:82:a0:
                    88:f3:7e:af:52:78:56:10:fe:47:fa:ce:a2:03:7c:
                    e4:b6:40:f3:b1:26:b4:26:a4:49:1f:e6:7b:bc:a1:
                    13:a5:62:50:02:5d:1e:d5:8b:c1:ff:8f:a2:4b:37:
                    5e:bb:66:5a:ff:b2:22:a0:39:a7:7d:cd:a9:1d:95:
                    d8:76:c9:60:c6:1f:05:db:6d:99:58:42:37:2a:9b:
                    4a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:90:56:8D:2E:5D:5E:66:4D:D9:9A:66:C0:86:36:9A:8D:F5:5B:50
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:51:77:e1:17:db:b4:fb:c7:a0:71:7c:97:30:df:4d:bb:cf:
         55:cc:12:a3:87:cb:c1:90:5b:b2:53:6e:42:2f:e0:74:36:fc:
         81:d3:2d:a8:1b:9e:87:5a:ed:5d:04:a3:37:d1:5d:d8:7e:83:
         89:e3:7f:2b:7d:26:03:21:6b:19:95:f9:16:d9:b2:67:99:b3:
         0c:3a:bf:8e:f3:ed:ab:ce:92:63:b8:a8:b8:ed:3f:a1:65:ae:
         68:cf:cd:07:f0:c5:7d:0d:80:c8:56:da:bc:5f:68:33:60:f2:
         8d:32:1c:d3:9c:ee:36:3b:f3:ac:86:f5:ed:1e:a4:5e:a7:91:
         11:94:da:2b:b6:61:36:c9:66:92:0c:13:a1:57:a4:5e:13:b0:
         df:14:21:b4:1a:7d:de:df:08:93:af:fe:eb:51:c4:94:46:fd:
         8e:72:5a:ba:af:93:28:82:96:30:4f:51:29:46:bf:b0:cd:bc:
         1c:67:83:5e:64:2e:f6:13:88:a1:ef:72:bb:48:de:fb:a5:39:
         1f:2f:a6:97:7c:c0:a9:2b:13:a7:73:8d:78:86:58:29:96:b7:
         35:35:5e:76:e9:c5:ea:e0:fd:66:27:f9:f8:49:d2:6d:7c:c5:
         7d:55:03:6a:fa:f8:a0:b9:7a:f2:1b:9e:e4:66:2c:1b:ea:bb:
         ab:92:63:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:57:05 2026 by rpki-client