Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
File:                     V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft (raw, json)
Hash identifier:          dKVHYDlGj3jFVOlzDLybogqzyT0ti69VTflaqmAC3OI=
Subject key identifier:   38:10:21:B7:8D:B8:E2:51:33:D3:BC:83:E6:05:EA:5D:8D:37:3C:E5
Authority key identifier: 57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0
Certificate issuer:       /CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
Certificate serial:       019F92484D6BFD6E88BE2BEE9382B59EF67D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
Manifest number:          1958
Signing time:             Fri 24 Jul 2026 04:00:39 +0000
Manifest this update:     Fri 24 Jul 2026 04:00:39 +0000
Manifest next update:     Sat 25 Jul 2026 04:00:39 +0000
Files and hashes:         1: 8BMsIpep3t4zLDNzNTQPbvhtEs4.roa (hash: Kc6FDAfUDHb/D1pz1W/TVvRE/xKyOIdC92JUUP2l6Co=)
                          2: V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl (hash: 3AIm1n3zhaekeWCZfs41NJPiCKyYbg8fN9cb2713WCE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:48:4d:6b:fd:6e:88:be:2b:ee:93:82:b5:9e:f6:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57504a4efd51dc95847c156f4a36dbfe5583c2b0
        Validity
            Not Before: Jul 24 04:00:39 2026 GMT
            Not After : Jul 25 04:00:39 2026 GMT
        Subject: CN=381021b78db8e25133d3bc83e605ea5d8d373ce5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4a:aa:97:96:e2:6d:38:c2:87:ee:5a:a7:ef:
                    07:87:43:ae:07:47:3f:c0:cd:ca:26:6f:cc:8a:63:
                    43:87:3f:37:3e:83:7a:99:b3:f0:c7:b9:e1:42:85:
                    89:77:b4:c6:f1:42:4d:dc:c0:20:2d:7c:fb:3e:b8:
                    c5:ab:0f:ac:b9:0f:2d:bc:e1:5d:93:50:c5:5b:d0:
                    1a:99:a2:a7:ae:1d:d2:14:40:4b:23:c7:75:cc:db:
                    b3:73:7b:91:d5:a5:be:29:d9:16:3e:a3:b8:80:6d:
                    5e:21:d8:50:0b:5d:41:cb:81:cf:d0:d2:6d:47:10:
                    1b:49:c4:2d:af:13:61:08:9d:76:1a:c9:92:3e:10:
                    38:8d:35:68:42:5f:e4:f4:05:41:5a:17:dc:b7:c3:
                    ef:44:89:75:52:d0:74:fe:ad:46:46:58:29:d2:df:
                    62:71:6a:b8:38:57:68:c0:e6:d2:5a:12:d1:f1:9f:
                    51:6d:45:62:5a:fb:32:73:5f:f3:38:a0:77:9d:ad:
                    c6:1d:8c:36:a6:8c:8c:79:a5:91:2f:bc:37:08:7a:
                    e3:f0:d0:cb:b8:71:c5:1b:53:13:37:a3:01:0e:30:
                    c0:12:27:22:3f:89:5f:d3:e3:d4:13:9c:d8:38:eb:
                    d6:04:53:9b:f7:ec:6e:cc:28:fe:2e:83:8b:fc:4e:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:10:21:B7:8D:B8:E2:51:33:D3:BC:83:E6:05:EA:5D:8D:37:3C:E5
            X509v3 Authority Key Identifier:
                keyid:57:50:4A:4E:FD:51:DC:95:84:7C:15:6F:4A:36:DB:FE:55:83:C2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V1BKTv1R3JWEfBVvSjbb_lWDwrA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/73/022606-4faa-4e99-be29-963480e9be79/1/V1BKTv1R3JWEfBVvSjbb_lWDwrA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:9d:71:04:df:99:3a:5a:c6:a9:f6:55:dd:4b:f0:4e:0c:5c:
         8a:ae:96:f6:e3:f2:23:34:e1:82:2f:65:e8:83:27:ab:cd:d3:
         64:e2:83:a7:76:a0:e7:bc:19:08:d1:2f:19:2e:da:1d:8d:cc:
         5f:e8:bd:fa:de:a7:a7:69:fb:09:d1:37:8a:87:ea:97:fe:ad:
         06:0e:0b:83:44:2a:50:c5:ae:63:26:22:09:12:6c:93:44:65:
         1f:fb:6c:5f:33:ca:5a:90:91:59:ff:ce:7d:c2:08:20:e4:93:
         71:4b:1e:5c:56:4b:d9:ea:11:51:81:47:ce:50:4c:d3:86:a9:
         e9:81:7d:fd:50:a7:ad:22:b7:c0:68:19:8b:2c:49:ce:7a:0a:
         47:f2:c5:b8:67:7f:56:be:c0:6a:08:26:cb:74:b3:a7:4f:ea:
         9f:2c:67:45:57:7e:d6:f7:86:7c:49:90:40:a6:64:e0:5e:59:
         d2:b1:5a:1c:70:4b:bd:3f:94:1f:f2:c8:ee:43:f1:20:ef:15:
         7f:d0:80:21:2b:cc:b8:49:8e:a4:81:fe:0a:a2:72:ed:c3:0f:
         fc:22:42:ba:18:b7:24:2b:e8:ca:5f:cd:15:10:5b:db:6c:02:
         82:60:b0:6f:d4:5c:d3:da:fd:e6:6b:76:e6:db:a3:42:5b:7d:
         0b:47:2d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:57:23 2026 by rpki-client