Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
File:                     VP1dZagmaMyV9_7_VdUbcNGpneo.mft (raw, json)
Hash identifier:          v5pXH30gESX//kZvfIkyU/HzkH6ZHzBfNA3C1fV9emg=
Subject key identifier:   02:D8:C8:E7:F8:0C:E1:A6:81:40:5E:B3:8C:44:F6:43:A6:E7:74:7D
Authority key identifier: 54:FD:5D:65:A8:26:68:CC:95:F7:FE:FF:55:D5:1B:70:D1:A9:9D:EA
Certificate issuer:       /CN=54fd5d65a82668cc95f7feff55d51b70d1a99dea
Certificate serial:       019F921174F8581716EBF9136E0C191656AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
Manifest number:          0140
Signing time:             Fri 24 Jul 2026 03:00:45 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:45 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:45 +0000
Files and hashes:         1: RvkZEoK0HyizIOoF3aDu_3nGrKE.roa (hash: BJ0nBnlY8vQ8ef9j08YqNE70rnN85bh90GtAddLxkHI=)
                          2: VP1dZagmaMyV9_7_VdUbcNGpneo.crl (hash: 2Er3QqUxAOaFMpqM6Vun50OfK3jhhGGSpAzcEsY0ACM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 03:00:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:74:f8:58:17:16:eb:f9:13:6e:0c:19:16:56:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54fd5d65a82668cc95f7feff55d51b70d1a99dea
        Validity
            Not Before: Jul 24 03:00:45 2026 GMT
            Not After : Jul 25 03:00:45 2026 GMT
        Subject: CN=02d8c8e7f80ce1a681405eb38c44f643a6e7747d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:b4:b6:f9:5f:7a:71:93:a4:46:68:8b:46:e7:
                    e5:8a:42:d3:05:0f:e3:67:c1:52:95:9b:5c:f2:d8:
                    79:a3:ca:82:48:0f:75:7e:c4:f4:7b:36:44:2b:8c:
                    07:1c:03:fb:6d:ad:bb:a4:d9:9a:3d:34:81:bc:1c:
                    5c:5a:7d:c8:27:21:29:fa:d5:11:1a:ac:32:00:95:
                    51:c3:51:b1:50:5f:62:2a:58:9d:de:61:97:fb:29:
                    e3:31:dd:08:46:d5:03:ac:6a:16:f3:fb:35:94:f0:
                    09:0d:2c:2f:a3:70:78:c4:e9:02:db:77:50:67:bf:
                    70:19:26:38:d0:89:ae:3c:e0:94:3e:d5:98:88:1f:
                    ac:08:63:52:62:29:a5:3f:43:ed:e0:0e:1f:c3:eb:
                    3c:aa:4a:99:d7:62:79:35:a4:0a:11:56:07:64:f7:
                    d4:66:38:f9:1b:c5:0a:f0:ff:8f:bb:14:0a:27:38:
                    8e:79:b9:c4:d6:c4:23:a2:16:a6:23:56:a5:c2:a5:
                    a4:c6:78:df:76:8d:74:70:a0:5f:1b:40:59:2a:97:
                    b9:4f:4c:76:c6:e4:6e:1c:0f:f6:0a:8f:74:bc:2f:
                    bf:eb:42:5d:cd:ff:0d:8f:2c:e6:53:bd:c3:ba:8a:
                    f2:0f:9d:0f:5e:7a:31:95:de:80:7d:79:c4:4b:f7:
                    3c:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:D8:C8:E7:F8:0C:E1:A6:81:40:5E:B3:8C:44:F6:43:A6:E7:74:7D
            X509v3 Authority Key Identifier:
                keyid:54:FD:5D:65:A8:26:68:CC:95:F7:FE:FF:55:D5:1B:70:D1:A9:9D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:3f:9c:88:98:53:ec:2d:1a:f4:7e:24:02:ca:eb:a3:8b:5a:
         54:42:65:2d:ae:d0:9c:9b:9e:11:27:bc:6b:7d:66:40:fc:7b:
         3f:94:11:a6:b4:37:6d:68:9c:47:94:ce:11:07:f1:06:8e:96:
         43:ab:cf:e0:8a:40:8d:76:f4:ac:e3:e5:a7:b6:bc:d2:a5:b6:
         64:ce:ec:41:d8:e5:53:bb:7f:3b:3f:10:f4:d8:77:06:6b:fa:
         15:4f:be:02:48:40:f2:c4:4f:b2:e4:3e:1b:31:94:62:f5:6c:
         bb:89:e5:d4:07:c7:5a:18:82:b9:37:8b:d3:34:1a:fc:01:1a:
         f4:28:3a:e0:e8:fc:36:de:ab:55:ab:69:2c:f3:7e:0b:43:11:
         d6:b7:c8:c0:c1:9f:b5:aa:df:ba:46:30:85:77:52:79:f8:a2:
         31:ab:68:da:74:e6:9e:d4:34:47:28:ee:c6:47:6d:3e:c2:08:
         aa:94:95:9d:2b:c7:b1:4c:b2:f4:34:e1:c9:61:a3:7b:81:ce:
         d4:d2:f4:49:c6:52:98:0d:96:79:0b:90:d5:3d:5e:98:6f:3f:
         a7:60:46:4e:f2:a0:24:62:44:17:71:22:b5:9a:5a:3d:a7:e9:
         60:89:aa:70:b2:3c:5c:61:79:63:01:8d:e4:2c:62:42:75:f6:
         e9:df:10:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEXT4WBcW6/kTbgwZFlaqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZmQ1ZDY1YTgyNjY4Y2M5NWY3ZmVmZjU1ZDUxYjcwZDFh
OTlkZWEwHhcNMjYwNzI0MDMwMDQ1WhcNMjYwNzI1MDMwMDQ1WjAzMTEwLwYDVQQD
EygwMmQ4YzhlN2Y4MGNlMWE2ODE0MDVlYjM4YzQ0ZjY0M2E2ZTc3NDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+LS2+V96cZOkRmiLRuflikLTBQ/j
Z8FSlZtc8th5o8qCSA91fsT0ezZEK4wHHAP7ba27pNmaPTSBvBxcWn3IJyEp+tUR
GqwyAJVRw1GxUF9iKlid3mGX+ynjMd0IRtUDrGoW8/s1lPAJDSwvo3B4xOkC23dQ
Z79wGSY40ImuPOCUPtWYiB+sCGNSYimlP0Pt4A4fw+s8qkqZ12J5NaQKEVYHZPfU
Zjj5G8UK8P+PuxQKJziOebnE1sQjohamI1alwqWkxnjfdo10cKBfG0BZKpe5T0x2
xuRuHA/2Co90vC+/60Jdzf8NjyzmU73DuoryD50PXnoxld6AfXnES/c8XwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALYyOf4DOGmgUBes4xE9kOm53R9MB8GA1UdIwQY
MBaAFFT9XWWoJmjMlff+/1XVG3DRqZ3qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlAxZFphZ21hTXlWOV83X1ZkVWJjTkdwbmVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC81MGQ4OGQtYjEyZS00ZDQ3LThhNWUt
ZTViZGQ0YmVhNGFlLzEvVlAxZFphZ21hTXlWOV83X1ZkVWJjTkdwbmVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC81MGQ4OGQtYjEyZS00ZDQ3LThhNWUtZTViZGQ0YmVhNGFl
LzEvVlAxZFphZ21hTXlWOV83X1ZkVWJjTkdwbmVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuD+ciJhT
7C0a9H4kAsrro4taVEJlLa7QnJueESe8a31mQPx7P5QRprQ3bWicR5TOEQfxBo6W
Q6vP4IpAjXb0rOPlp7a80qW2ZM7sQdjlU7t/Oz8Q9Nh3Bmv6FU++AkhA8sRPsuQ+
GzGUYvVsu4nl1AfHWhiCuTeL0zQa/AEa9Cg64Oj8Nt6rVatpLPN+C0MR1rfIwMGf
tarfukYwhXdSefiiMato2nTmntQ0RyjuxkdtPsIIqpSVnSvHsUyy9DThyWGje4HO
1NL0ScZSmA2WeQuQ1T1emG8/p2BGTvKgJGJEF3EitZpaPafpYImqcLI8XGF5YwGN
5CxiQnX26d8Q4Q==
-----END CERTIFICATE-----
Generated at Fri Jul 24 14:16:29 2026 by rpki-client