Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File:                     vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier:          Gm/zCm9mWq5I5se6PWoUwOcKaoDTq3IORxjNDqkgvps=
Subject key identifier:   53:60:56:29:0F:84:73:3D:D9:C8:04:65:FD:AB:13:95:F8:66:3D:5D
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer:       /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial:       019F916C8A6C0FC06D6CE1B53F41DBCB306A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number:          17D4
Signing time:             Fri 24 Jul 2026 00:00:37 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:37 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:37 +0000
Files and hashes:         1: PYuODH0zBuvAiK-JKuXaExSuhvY.roa (hash: j4fDEw0K8kYxrAUmB58fcgklFQjA7X3SeZOjGCv6B9g=)
                          2: r8wWtQIRlfVaRAqsTE8BSM5K8Fg.roa (hash: q8BWxYBDwimUfBX5rZs0mS3SnxWzlL9k3GvkEkEzIbs=)
                          3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: gpFUSD27dFnJG6emazU/mvjwy5tpc/np9XlErkFlNhk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:8a:6c:0f:c0:6d:6c:e1:b5:3f:41:db:cb:30:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
        Validity
            Not Before: Jul 24 00:00:37 2026 GMT
            Not After : Jul 25 00:00:37 2026 GMT
        Subject: CN=536056290f84733dd9c80465fdab1395f8663d5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:aa:31:6f:7e:a1:33:18:1f:2a:61:cd:2c:fb:
                    a5:64:86:e7:4a:b9:76:a0:da:0f:20:2b:19:b7:0c:
                    10:d6:3d:ce:c0:93:55:ec:ff:6b:77:d0:33:6c:0e:
                    fe:0b:97:87:51:1c:39:ea:18:fe:9c:0f:31:25:40:
                    d2:3d:76:cc:5b:b4:75:8d:79:cf:70:6f:d0:ad:23:
                    96:9c:a6:2d:7d:71:2c:11:73:78:e8:ae:d2:3d:5d:
                    7e:e8:70:3a:24:dd:91:d8:f2:58:2a:d3:1d:d2:3e:
                    ca:39:97:e3:13:d1:6e:90:ec:0a:33:d1:16:39:1e:
                    77:d9:df:8d:31:47:81:1a:07:17:70:56:e9:3a:04:
                    58:71:3a:5f:49:74:0a:78:44:1b:3d:f3:fa:e1:e2:
                    96:d5:9f:b4:39:25:24:a9:cb:06:b4:51:a2:02:72:
                    3d:6e:f9:4b:b1:f5:ac:a8:ab:1b:d0:63:3f:1f:3d:
                    25:01:f7:2a:a7:d6:ab:46:4f:a8:b5:3d:41:2a:92:
                    3f:e8:c1:51:87:13:bd:a5:38:97:22:2f:83:7a:65:
                    b8:2d:fe:83:1d:11:c3:ec:c6:7c:ce:15:d1:26:91:
                    79:77:34:0a:bb:f1:47:94:08:a2:ed:21:25:38:16:
                    9f:28:a8:fb:ea:13:8a:be:6d:e2:b0:a2:e1:77:da:
                    29:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:60:56:29:0F:84:73:3D:D9:C8:04:65:FD:AB:13:95:F8:66:3D:5D
            X509v3 Authority Key Identifier:
                keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:cf:3c:e7:03:4e:8e:82:28:5b:74:55:f4:25:f4:ee:09:f9:
         a0:0f:48:b7:c6:44:dc:e6:96:73:de:83:04:28:7d:65:b9:f9:
         0d:d7:09:51:35:9e:62:74:c0:12:c2:49:4b:50:d5:26:24:0b:
         3f:c4:1f:28:d0:ef:b7:03:5d:67:7d:91:98:f7:30:1f:f8:d0:
         fb:4e:18:14:8c:de:05:cd:88:8a:bb:08:fb:45:ae:77:e0:97:
         74:01:95:d2:71:ba:bf:4c:ef:2a:3a:0f:42:90:6a:1b:a9:9f:
         ec:39:b1:fa:1c:8a:b7:97:b0:70:85:5c:96:3b:93:21:75:52:
         9b:9b:55:2c:6a:1e:3d:8f:d6:0f:55:97:ba:f3:5d:96:a2:60:
         a5:c6:97:17:49:b3:9c:0d:6c:e9:36:86:e4:b1:d7:de:4d:c9:
         38:da:2a:5e:6a:7e:89:9a:87:4e:87:00:32:48:a4:96:8d:27:
         4c:ce:ac:76:45:ee:9f:fc:9f:6b:de:2f:d1:da:23:12:f2:15:
         b2:cd:ae:d2:ff:a1:92:5a:c1:75:dd:64:89:bb:b5:34:15:2b:
         36:74:f6:1a:32:92:30:42:b1:d6:6f:91:05:24:8e:66:15:b2:
         98:4c:6f:98:a4:eb:32:41:da:4d:e4:23:0e:49:5c:f7:cd:ec:
         09:53:a4:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+RbIpsD8BtbOG1P0HbyzBqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzM2NGJjMzhmNzViMThkNmY2ZWVmMjAzMjA5ZjcxYzI3
NjhkODUwHhcNMjYwNzI0MDAwMDM3WhcNMjYwNzI1MDAwMDM3WjAzMTEwLwYDVQQD
Eyg1MzYwNTYyOTBmODQ3MzNkZDljODA0NjVmZGFiMTM5NWY4NjYzZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqoxb36hMxgfKmHNLPulZIbnSrl2
oNoPICsZtwwQ1j3OwJNV7P9rd9AzbA7+C5eHURw56hj+nA8xJUDSPXbMW7R1jXnP
cG/QrSOWnKYtfXEsEXN46K7SPV1+6HA6JN2R2PJYKtMd0j7KOZfjE9FukOwKM9EW
OR532d+NMUeBGgcXcFbpOgRYcTpfSXQKeEQbPfP64eKW1Z+0OSUkqcsGtFGiAnI9
bvlLsfWsqKsb0GM/Hz0lAfcqp9arRk+otT1BKpI/6MFRhxO9pTiXIi+DemW4Lf6D
HRHD7MZ8zhXRJpF5dzQKu/FHlAii7SElOBafKKj76hOKvm3isKLhd9opJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNgVikPhHM92cgEZf2rE5X4Zj1dMB8GA1UdIwQY
MBaAFL4zZLw491sY1vbu8gMgn3HCdo2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTct
MWE2YWM5OGFjNmY5LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTctMWE2YWM5OGFjNmY5
LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIM885wNO
joIoW3RV9CX07gn5oA9It8ZE3OaWc96DBCh9Zbn5DdcJUTWeYnTAEsJJS1DVJiQL
P8QfKNDvtwNdZ32RmPcwH/jQ+04YFIzeBc2IirsI+0Wud+CXdAGV0nG6v0zvKjoP
QpBqG6mf7Dmx+hyKt5ewcIVcljuTIXVSm5tVLGoePY/WD1WXuvNdlqJgpcaXF0mz
nA1s6TaG5LHX3k3JONoqXmp+iZqHTocAMkiklo0nTM6sdkXun/yfa94v0dojEvIV
ss2u0v+hklrBdd1kibu1NBUrNnT2GjKSMEKx1m+RBSSOZhWymExvmKTrMkHaTeQj
Dklc983sCVOkew==
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:13:47 2026 by rpki-client