Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File:                     vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier:          sF/6DVZfRMT/2Q1rJS3P5mdof+p4O4tevGdECWCZVmM=
Subject key identifier:   C5:9B:B4:9F:7F:8E:53:BD:36:A8:E5:AF:A7:3F:37:43:B5:DF:CA:F3
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer:       /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial:       019F9211486C2D3B9863554D40504BA4A0B2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number:          19C9
Signing time:             Fri 24 Jul 2026 03:00:33 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:33 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:33 +0000
Files and hashes:         1: 473COPKd9olJMqE4kR25XOWDFnY.roa (hash: monMcaQ2KeRWOvX/C8J08SlGKpHbfXIEgRkLvwPSBPI=)
                          2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: ajkq9cc/IzUSQ3kkoLqCrIqVoIR6b1J/XVcy150wCw0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:48:6c:2d:3b:98:63:55:4d:40:50:4b:a4:a0:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
        Validity
            Not Before: Jul 24 03:00:33 2026 GMT
            Not After : Jul 25 03:00:33 2026 GMT
        Subject: CN=c59bb49f7f8e53bd36a8e5afa73f3743b5dfcaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:0e:af:ca:7f:f8:09:f6:80:d7:3c:43:74:75:
                    68:56:83:64:5e:d8:0a:63:22:a7:a4:b3:6e:43:dc:
                    9d:3a:7d:fa:a6:c7:f9:ab:8d:d9:e7:f5:07:da:9d:
                    98:33:dd:fd:17:d8:6e:9d:68:c9:47:5b:66:e8:d6:
                    76:43:92:6e:40:40:cb:19:3b:e8:5e:cc:27:59:6d:
                    e0:94:da:b4:a1:c9:2e:95:fb:b0:32:70:5f:86:23:
                    53:00:57:da:6c:a2:bf:69:c2:3c:84:a9:a5:bf:ba:
                    80:f8:3b:2e:26:55:7f:a5:21:17:1c:a4:49:50:cf:
                    f7:c7:17:dd:c7:aa:76:fd:61:a6:ae:d9:33:43:b3:
                    0c:69:5f:05:e1:6d:4a:ff:f1:42:e5:d8:31:f0:55:
                    4b:f6:e2:61:1a:78:5b:d8:e6:e8:27:65:ab:98:a7:
                    d4:e5:14:28:12:6e:ed:52:0a:0a:18:d2:78:6e:90:
                    b3:ee:9e:ac:b6:ac:1d:9d:b8:46:d0:1f:09:cf:ef:
                    12:8f:19:8e:50:3d:b1:d8:fb:95:ea:4f:d4:6f:41:
                    f5:a9:ad:ee:31:eb:43:f1:d0:86:66:ee:08:13:35:
                    5d:78:82:7f:6d:cf:41:32:3a:bc:91:45:b7:bf:f2:
                    1f:6f:c5:2b:67:ae:bb:88:4f:50:f6:d5:a4:81:f8:
                    5d:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:9B:B4:9F:7F:8E:53:BD:36:A8:E5:AF:A7:3F:37:43:B5:DF:CA:F3
            X509v3 Authority Key Identifier:
                keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:9c:9a:2a:93:15:53:93:73:60:84:01:5a:9e:94:04:6c:13:
         05:09:2e:d1:2d:9a:4c:68:99:9d:4d:9c:89:f0:0f:5f:d3:c2:
         c4:66:db:82:f6:02:a6:49:00:52:30:9b:dc:94:ab:0b:11:47:
         51:56:d7:37:cd:0e:64:2a:f9:53:7c:40:8d:71:00:46:68:e4:
         ca:57:4d:17:f6:90:46:c7:33:83:f1:e1:ef:05:d2:e7:3a:1a:
         c1:91:f6:32:ac:3d:5e:f5:70:43:f4:07:c6:86:1e:e1:7c:80:
         bd:5b:5a:3e:be:8b:30:07:f9:25:8d:6c:23:e6:17:be:26:c5:
         7b:ee:a6:fb:92:f3:20:a6:b6:38:73:e1:38:99:d5:e3:ab:76:
         18:5a:6e:d3:b9:b1:30:9e:fb:d8:8b:61:ea:a0:9f:52:7b:75:
         e7:28:fb:33:29:56:b1:eb:af:18:de:3d:73:cc:8b:ae:23:04:
         f6:b6:63:30:31:45:69:a3:d0:08:c5:26:0c:88:72:df:2b:37:
         7f:54:74:42:cf:11:b7:c5:c2:f6:e1:d3:27:89:11:1b:a7:1c:
         a4:ee:55:e7:2d:2e:cb:27:e2:4e:92:c8:85:6b:47:de:a8:96:
         b2:a2:18:ff:7e:68:68:7e:b7:fa:65:a7:b2:30:54:b9:6a:cc:
         ae:73:72:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:03:30 2026 by rpki-client