Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
File:                     VgGQvfsKPyO0QR59dI7du9CfhUY.mft (raw, json)
Hash identifier:          /cKDommM5TGFlFfLmQNXzkOGfmm8Kr/FbA/7agfW5M4=
Subject key identifier:   05:7A:52:76:6B:0F:DD:8A:26:81:47:32:63:97:1B:E8:53:E3:D4:2A
Authority key identifier: 56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46
Certificate issuer:       /CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
Certificate serial:       019F91358B4471B3BB18C3EFBDC8D12F1C37
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
Manifest number:          097A
Signing time:             Thu 23 Jul 2026 23:00:33 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:33 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:33 +0000
Files and hashes:         1: INDLHM8Me2Bf0WnYerAJJYX2gwI.roa (hash: BGHoRGlVGb3E28D4ASgweblzagCCiTyzQTZOnGs2vlM=)
                          2: M0wNnqU_1DLmYVDdUs4avMQhe8s.roa (hash: fIfKhvWtJwrxjzjm4hZW5+IdLNHxi4+A23VOYUPdMUs=)
                          3: VgGQvfsKPyO0QR59dI7du9CfhUY.crl (hash: WkUjv/Vsqpp+sxfZrN+eJAaTrBo3EgBfU6cuJqcrwAY=)
                          4: kRyxiAkPj1N4o5Q97vndpCqxuTo.roa (hash: xfkYlTGJlH9MSL13viAFnNVbnhUFjXhBp9WdZzYRj34=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:8b:44:71:b3:bb:18:c3:ef:bd:c8:d1:2f:1c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=560190bdfb0a3f23b4411e7d748eddbbd09f8546
        Validity
            Not Before: Jul 23 23:00:33 2026 GMT
            Not After : Jul 24 23:00:33 2026 GMT
        Subject: CN=057a52766b0fdd8a2681473263971be853e3d42a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:07:7c:20:bb:64:cd:aa:e4:44:9c:65:60:
                    dc:8b:39:3d:23:d0:70:d5:23:c3:8a:9f:f9:5b:dc:
                    d1:5c:ca:5c:88:80:29:da:3b:d4:e7:da:5a:43:5c:
                    2c:fc:5f:7c:e7:fa:9a:70:5d:d8:53:f4:45:3a:67:
                    57:5c:9c:f1:4f:e6:d8:6e:3a:20:16:8c:8c:6a:4f:
                    af:cb:45:7c:11:29:e3:1f:2e:ea:5d:88:72:3a:7d:
                    ee:22:81:22:3d:14:bb:21:d1:bd:3b:ed:f8:70:00:
                    ee:bd:42:02:1e:6c:f9:29:6c:b2:7d:1d:d1:58:06:
                    ac:54:7d:a2:86:08:a2:5d:2b:9c:c3:43:ec:67:a6:
                    14:55:53:48:ff:a4:44:e6:33:3f:af:d9:c1:f5:8a:
                    c9:69:14:70:c8:37:17:70:1a:03:2f:25:fc:38:ce:
                    a8:26:f7:f7:d3:0b:6a:6c:3e:83:04:e8:d5:f7:e6:
                    fc:28:94:c4:5b:6a:9e:45:3b:5e:47:12:8e:a6:ed:
                    36:85:df:05:dc:f1:04:c9:95:4a:35:57:40:95:bb:
                    64:4a:37:85:5e:26:4b:f0:52:b9:71:42:a0:6e:72:
                    bf:8f:66:ce:bd:12:2f:43:c2:24:f1:bc:34:5b:98:
                    51:f6:11:b9:e2:21:9a:dc:5f:01:c6:00:14:a3:ef:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:7A:52:76:6B:0F:DD:8A:26:81:47:32:63:97:1B:E8:53:E3:D4:2A
            X509v3 Authority Key Identifier:
                keyid:56:01:90:BD:FB:0A:3F:23:B4:41:1E:7D:74:8E:DD:BB:D0:9F:85:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VgGQvfsKPyO0QR59dI7du9CfhUY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/77/b66c83-0d61-421f-b083-2b9fc41e0a80/1/VgGQvfsKPyO0QR59dI7du9CfhUY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:ab:33:e2:82:2c:26:c2:06:c0:f0:ca:79:a6:00:eb:a2:55:
         5b:e9:c5:55:b5:6f:32:66:8e:a6:a6:a6:f0:64:9d:c6:54:a5:
         a6:d6:a7:1f:c9:2f:a3:81:ea:33:4b:4a:6f:78:7f:b9:1d:4f:
         d2:83:34:0a:8c:44:aa:37:ee:d1:8a:44:08:15:57:53:ea:fc:
         b1:40:d6:e6:2d:52:f7:0e:dc:1c:d5:df:6d:e4:84:23:76:f0:
         42:ef:d5:9d:bc:79:52:22:9e:3f:04:6a:da:20:55:c2:fb:32:
         5f:4b:38:5c:b4:0f:e8:31:0b:48:7e:63:87:44:1f:de:06:48:
         db:99:da:7d:3b:90:9d:a9:db:7a:20:05:8b:f2:98:4a:74:96:
         97:37:d6:33:f1:97:87:0d:39:d8:38:46:b6:f9:ce:96:de:e6:
         18:23:4c:a7:6b:fb:03:4c:50:d8:b0:d7:e0:af:28:6a:5e:44:
         09:3c:0d:1a:5b:a5:6b:a7:8a:f0:d1:d0:28:e4:6f:22:86:cf:
         48:19:b2:58:58:a4:e0:71:28:ca:ef:3a:98:62:f7:62:d9:af:
         0d:30:a5:38:45:78:8b:1a:88:a1:cd:47:fe:0a:c6:85:83:d4:
         89:53:fd:53:ad:3d:da:3a:b9:ea:67:83:3c:fe:57:40:41:e6:
         c1:85:c0:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 09:24:15 2026 by rpki-client