Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
File:                     Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json)
Hash identifier:          8dwMeOs16UgrGbNy+Hydfx1SdE7gMS+WKnmeLUOWFr0=
Subject key identifier:   4E:AF:2A:0C:24:9E:9D:61:11:74:CB:EF:43:0C:AC:C9:D5:EA:2D:CF
Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE
Certificate issuer:       /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
Certificate serial:       019F9022A64C9898B692B15FC038F1B3229C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
Manifest number:          14A2
Signing time:             Thu 23 Jul 2026 18:00:17 +0000
Manifest this update:     Thu 23 Jul 2026 18:00:17 +0000
Manifest next update:     Fri 24 Jul 2026 18:00:17 +0000
Files and hashes:         1: 5GxvHZCMMVes7bAUdIaYsXEtdX4.roa (hash: x5pIX8HDxeQPjQseodSp8HJv0Ul8z850CXMOjeGpMb0=)
                          2: NJ5Ft9nE4KuBN7HLQnKzgQ0mpXo.roa (hash: hBgheJjYW2NTuQX0GMNpUdScgOBs91Gnhme3LbGhhOA=)
                          3: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: D7/G13ii68vgiM9Y45uzDreRsgX6D0IwgCnaJX5+m6g=)
                          4: Wg9e837QOmrPZ6kJBIC8tEaMEc4.roa (hash: HxZPcDMVde46E0YraYcux12OmT61HV19peqYpruy8ck=)
                          5: ff1Fa-kOqddev469q_q9QwdHNOQ.roa (hash: w2PaSCsne5WpEMiMwnCdvo+2V64rmEO1ylIDUMBUfOM=)
                          6: jBBcly2HdJSD-rjpgRD1A4Ettvk.roa (hash: GKrqdhyqZWB/m9EFHfl5IOaV7MkDa8X8m2CiX/6U4m8=)
                          7: kZfuHKDAiQJXBvJliXqrjaU0XIg.roa (hash: DHMZVeLexmvq1Vc8FbkkKH/pRR44r4WIYoKUwGuSUU0=)
                          8: lnT80rw_Ryd-z_u4DO17nxl0A5w.roa (hash: wdCITiVG5nvublaggiVZXX2U+oaT1yDZ4/O9JgAyQzQ=)
                          9: mKeMsR2QrnSBHWDrAB633iC9wkU.roa (hash: foj5YbHBhBGk2YpBJaz/TDOqgfzkdxrbsm0c98jIv+U=)
                          10: zt0vn-Fh3T0JcalRjhRB-Eg10pY.roa (hash: ZkfO9/jzoHTqMuf/g6245EMxohpj+UHCz0pRarj0WJw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 18:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:22:a6:4c:98:98:b6:92:b1:5f:c0:38:f1:b3:22:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be
        Validity
            Not Before: Jul 23 18:00:17 2026 GMT
            Not After : Jul 24 18:00:17 2026 GMT
        Subject: CN=4eaf2a0c249e9d611174cbef430cacc9d5ea2dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:df:ce:bc:4a:2b:ef:b6:8c:d3:6e:bb:9a:14:
                    4f:b7:4c:51:57:74:cf:14:94:46:b3:4d:c1:55:e0:
                    dd:f3:8d:ed:24:c9:3a:38:3e:85:98:19:57:47:2c:
                    5f:2e:f3:08:f1:c3:fd:98:6e:d3:b9:98:8a:b4:e0:
                    6a:21:f4:7b:1e:bd:3b:24:ac:73:bd:93:07:79:8b:
                    28:eb:bb:9b:43:72:ab:0d:bd:9e:40:e3:0e:fe:3b:
                    f5:1c:86:e6:d4:51:99:84:9e:b7:9f:b9:b7:45:eb:
                    fd:56:54:a3:7c:cd:9d:01:3d:1a:6e:fb:94:ad:ba:
                    75:86:f8:82:b7:39:32:c0:aa:1e:8e:53:3f:6b:35:
                    55:b0:fc:e9:d2:c7:ff:c1:ec:3c:c1:db:47:ad:fc:
                    25:ba:c7:22:ae:0d:f1:7d:9d:be:87:99:ed:ce:23:
                    44:57:15:09:97:d7:ed:8e:5a:05:c3:ce:95:5b:6e:
                    ce:2e:df:33:04:03:1b:80:8a:d1:f2:78:64:4c:0a:
                    f1:d9:a0:9a:4c:9b:11:36:16:3f:ba:eb:d9:41:bb:
                    43:7d:3f:df:26:d4:67:75:1d:5e:d7:a2:c2:01:89:
                    c0:52:7d:c5:14:d3:79:92:3c:ed:d0:ce:01:98:b2:
                    13:ac:21:76:a7:84:8a:46:a3:4f:3f:36:b2:3f:55:
                    00:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AF:2A:0C:24:9E:9D:61:11:74:CB:EF:43:0C:AC:C9:D5:EA:2D:CF
            X509v3 Authority Key Identifier:
                keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:69:ff:08:72:25:01:0e:0e:d9:58:61:ff:0f:13:f9:c2:c2:
         d9:dc:5b:34:31:e9:4f:ae:92:7a:8c:ea:5f:43:6c:97:6f:ec:
         50:22:91:14:f3:01:fd:be:52:e3:3a:75:9f:cc:a1:2f:8a:39:
         dc:ec:9e:41:f4:f8:43:30:c9:72:03:89:5d:6e:30:80:74:34:
         62:1e:6a:52:13:63:11:d9:07:c7:0b:ac:c0:54:71:20:99:93:
         03:59:14:41:f9:b7:6c:7e:10:2a:0c:b4:13:b9:68:4c:d4:0f:
         58:9d:25:ca:c1:e9:13:5f:0a:d3:2a:64:68:d3:27:63:e7:5f:
         da:e7:43:3c:96:25:fc:d1:81:67:81:90:34:22:b1:9b:7d:07:
         47:f3:05:ce:3c:27:38:a9:7d:8e:ff:3d:c5:eb:61:3c:11:36:
         fb:39:b1:a1:5e:01:dd:ae:95:75:a7:83:75:63:42:dd:66:16:
         c1:2e:ca:6e:92:23:e3:ec:a5:dc:77:d0:a1:9c:63:99:18:c4:
         d0:55:f6:64:38:31:6b:c5:9d:28:5d:70:bc:b7:4c:7e:92:95:
         2e:29:24:90:07:75:2b:f4:78:e2:fa:72:90:52:b9:4e:e0:48:
         3c:40:ec:1a:7e:10:e8:71:aa:91:27:0b:b2:29:93:f5:4c:f2:
         ce:6f:50:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:23:59 2026 by rpki-client