Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
File:                     vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft (raw, json)
Hash identifier:          5c1qMGRjWwZxRb1qI94GCAtrZ7OW/Sd3ic/Ij8XXG48=
Subject key identifier:   81:42:38:28:D2:1B:F8:99:A6:29:F8:50:91:2A:21:3E:C6:2B:3C:DC
Authority key identifier: BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34
Certificate issuer:       /CN=bd60edf96266b7c0d43836c854ab472cb74db034
Certificate serial:       019F8FEC17A8FA427056D919C3532768422A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
Manifest number:          03CB
Signing time:             Thu 23 Jul 2026 17:00:42 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:42 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:42 +0000
Files and hashes:         1: 8HPlLJKGC0uGDXpjxVBwb6wa0qk.roa (hash: Ojh5/xBT32ZIv2cbh6f99Qcqv0JCaF6De9sA3ACbGs0=)
                          2: IivqEYycEJ9ENYkDV_x_rR4eFr0.roa (hash: IQVchAwFZI4RDu0XF+MD2n3sIbpJvcGSbjEZGTu8Mwc=)
                          3: X8pouaMpaLsuYErTPUpgqpWeT9Y.roa (hash: psbUeXwDjoOPzcvtNOSx3ERhIjFSIX4yWz6HMVvEcEg=)
                          4: XyAp-ULJDGqQnYw4x0VOKO9WL4A.roa (hash: p7Y5UggA9XaPiUt8v09KTFjc/O7q3EmBodfSudOJ2G0=)
                          5: mvMvzcuR1NgOhwlZXo7XswNReO8.roa (hash: OC7UawU8PzTtEO+txuJgCieiCDiiiwo16T6kmqVkBqo=)
                          6: p-FRidV19Ral8HYCkTftp8ZGx_I.roa (hash: hshHmTn3wzmrRXENipR4Ti5XKN7QbdSwu9BQI5Ilgp0=)
                          7: vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl (hash: Ze6Q9ZyL+U/2A77Rl3MCKKSYq2Qsy2QL5FN/NDAOKqk=)
                          8: wlWnFSIiYVvXp_mwjODRnhkY0UE.roa (hash: Uu3Z+8tn4NyyEWREHHOZxn7oBRlFx43GJ0VENqzt+D0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:ec:17:a8:fa:42:70:56:d9:19:c3:53:27:68:42:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd60edf96266b7c0d43836c854ab472cb74db034
        Validity
            Not Before: Jul 23 17:00:42 2026 GMT
            Not After : Jul 24 17:00:42 2026 GMT
        Subject: CN=81423828d21bf899a629f850912a213ec62b3cdc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bc:8d:44:ec:8d:aa:5b:d2:07:3d:9b:95:66:
                    89:dc:67:ca:5c:d0:5d:9f:62:33:30:a3:62:e8:52:
                    f3:d5:0e:13:41:44:2d:20:09:e3:e1:9a:8a:dc:50:
                    04:c2:76:69:7a:77:b2:e2:8a:37:70:70:8b:78:6f:
                    38:f3:c3:29:66:35:f7:fd:9f:24:45:25:db:84:e7:
                    a4:7f:8c:7e:ea:cf:f8:32:b9:97:00:66:59:c0:82:
                    dc:51:39:d2:1f:51:c9:fe:5a:32:bf:a4:a3:86:b2:
                    e3:25:28:f9:ea:d7:d5:64:34:4b:71:8b:c1:7f:c9:
                    39:58:ff:be:49:15:b3:e3:9b:ff:70:b6:93:d6:37:
                    fd:6d:0c:9f:56:b7:6d:ab:9f:c8:87:f1:c0:0a:d2:
                    a4:ff:0c:38:a0:32:60:b8:60:97:7f:ba:2b:f2:64:
                    45:17:52:de:0a:56:6d:ac:2c:53:0f:04:bf:7c:28:
                    12:cc:c8:5c:aa:3d:57:8a:49:52:45:e9:68:d3:7a:
                    f8:f9:5a:e9:22:a5:bb:5d:d3:6f:95:2b:91:01:15:
                    76:09:91:23:f2:1f:bf:cf:21:cc:ef:cb:b4:23:03:
                    5b:b1:3d:85:fe:57:78:c6:c2:a1:7b:50:69:75:64:
                    81:61:cd:3e:c2:f3:4a:af:22:4e:c8:0f:af:e3:74:
                    73:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:42:38:28:D2:1B:F8:99:A6:29:F8:50:91:2A:21:3E:C6:2B:3C:DC
            X509v3 Authority Key Identifier:
                keyid:BD:60:ED:F9:62:66:B7:C0:D4:38:36:C8:54:AB:47:2C:B7:4D:B0:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vWDt-WJmt8DUODbIVKtHLLdNsDQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/b5d5bb-23c6-4b3d-94c8-42bbf1a6a65b/1/vWDt-WJmt8DUODbIVKtHLLdNsDQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:19:b9:06:c5:91:5f:cf:f8:9f:76:c0:7a:18:2e:48:f0:ab:
         0e:69:d2:57:b0:a3:94:30:14:2c:c5:91:0b:51:45:dc:8b:e2:
         37:63:2f:a1:b5:c7:dc:c8:24:4f:69:e8:52:30:8c:4d:ce:f2:
         8c:b8:15:e6:1c:34:2a:9c:da:84:06:3b:f4:52:bb:1c:8f:5c:
         b5:a4:a3:6b:da:72:91:8e:cd:c1:68:cc:13:2b:b5:bc:b8:18:
         4e:58:9b:ca:43:36:27:84:3b:21:de:ff:c7:2d:cd:e6:f3:9b:
         e7:b5:52:78:f8:e0:e0:93:29:33:76:05:64:ad:90:a3:c2:51:
         5b:80:ae:eb:9b:89:47:b1:3e:34:2f:d2:2d:ee:0a:14:e1:42:
         f5:6d:a3:dc:2f:38:81:4c:8f:4e:fd:d0:78:2b:2a:db:d9:54:
         67:08:ff:27:74:6f:ac:a9:a9:20:0e:1f:23:ca:99:9f:56:dc:
         66:de:38:e5:5d:7b:f8:7d:b9:54:64:6b:d8:21:f2:48:3f:89:
         54:a5:b4:f6:84:b9:d2:e3:4e:ec:70:c4:06:82:14:f8:82:5b:
         9e:60:8e:d7:f3:e8:9f:c7:ff:20:c7:32:94:ba:ea:31:5f:c0:
         42:62:80:2e:1b:4d:e1:b1:3e:95:1a:c3:31:3e:56:87:77:c3:
         bb:14:da:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:42:48 2026 by rpki-client