Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
File:                     V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft (raw, json)
Hash identifier:          SchwIVqj9F0bfbM/E6rI3BHxzJRuFk/bjtwTYfJ9U1c=
Subject key identifier:   16:9E:6C:E4:1B:AB:D8:F8:F5:9C:A8:B1:5F:EE:AE:2F:8A:51:B0:8D
Authority key identifier: 57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0
Certificate issuer:       /CN=579d549a3316e42571cca5f8380e2df59c2b34a0
Certificate serial:       019F9135930767B782E5208AE606656BAC17
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
Manifest number:          2E
Signing time:             Thu 23 Jul 2026 23:00:35 +0000
Manifest this update:     Thu 23 Jul 2026 23:00:35 +0000
Manifest next update:     Fri 24 Jul 2026 23:00:35 +0000
Files and hashes:         1: HXHjwpKZ0hUuhA-ecTFWovLriWw.roa (hash: /sTU1en73B/4P9sdmgCdOcbF8vhNLR8j5kj2wC8xqfE=)
                          2: V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl (hash: uV7H2S6jYYjWU4eHB2/XLrCRTzDc0NdOaSQaF8EUCJ4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:35:93:07:67:b7:82:e5:20:8a:e6:06:65:6b:ac:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579d549a3316e42571cca5f8380e2df59c2b34a0
        Validity
            Not Before: Jul 23 23:00:35 2026 GMT
            Not After : Jul 24 23:00:35 2026 GMT
        Subject: CN=169e6ce41babd8f8f59ca8b15feeae2f8a51b08d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:02:11:d6:14:27:1a:25:43:ff:93:96:b9:35:
                    a8:3d:80:fe:77:54:07:95:20:64:30:ad:af:b5:ce:
                    8b:25:4b:bf:6c:fc:56:96:e7:46:64:61:b7:e6:4a:
                    99:c3:bf:26:d4:9d:71:9c:a1:c5:13:6d:d1:45:1a:
                    bd:2f:c3:32:cc:8b:21:03:9a:b5:5f:9c:74:b1:fa:
                    95:15:68:a4:f9:46:86:07:ec:a5:2f:c0:c1:6d:e0:
                    4b:e9:13:1a:0b:ef:a5:2c:38:fa:93:9d:50:0b:7d:
                    cb:4e:17:65:93:52:44:f9:f4:d2:ba:8f:f6:2e:f7:
                    01:5d:f7:23:1b:dc:89:ed:34:5d:1c:e1:67:c8:65:
                    ea:89:d6:4b:a9:89:6d:c0:3b:05:21:e1:71:f9:59:
                    dc:aa:7c:51:09:95:5d:33:47:89:70:7b:5e:0d:80:
                    63:c9:49:a4:c8:ef:56:75:b4:30:18:1a:44:01:1f:
                    de:cc:33:fb:f0:21:67:3a:1c:92:65:f7:ec:f4:7e:
                    63:fb:15:d7:d8:7f:6d:ae:a3:30:88:dc:9f:e3:20:
                    78:2f:a4:91:95:a0:ec:ae:cc:61:17:99:8d:24:e6:
                    24:68:03:21:69:49:54:0e:25:7f:62:d4:68:46:3d:
                    74:8c:2c:4f:32:d7:01:ce:b8:fd:40:67:6e:da:8d:
                    68:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9E:6C:E4:1B:AB:D8:F8:F5:9C:A8:B1:5F:EE:AE:2F:8A:51:B0:8D
            X509v3 Authority Key Identifier:
                keyid:57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:13:dc:bd:e0:e4:61:91:4e:16:63:7b:4e:57:59:fb:5e:6e:
         6f:09:6a:9b:15:5b:e1:d2:73:66:07:dc:3d:96:7a:f8:51:8a:
         34:f8:b6:f7:71:7e:cb:74:af:82:f8:70:81:84:29:63:73:cd:
         79:09:d4:f1:e5:c0:e1:77:d8:36:3b:1e:ec:4c:5e:e8:e8:ca:
         40:aa:63:f1:11:fa:02:ee:f6:6d:aa:1c:bd:fe:a5:d1:78:92:
         2d:e1:a0:bc:61:ac:a1:12:08:52:1f:b7:83:ca:57:d3:88:0c:
         9c:2a:e8:81:6a:5d:5a:c2:e3:be:94:19:64:10:35:ec:e3:ad:
         9f:b8:fe:2e:69:9c:bf:c8:3c:44:7d:7f:98:9f:1f:5d:22:49:
         32:f2:09:4d:ab:a0:56:a9:fa:97:89:30:a0:d4:ef:37:74:19:
         9b:45:7a:11:0f:f1:ab:97:bd:1e:5f:8f:93:a1:2c:cb:71:d7:
         76:66:97:50:f2:62:72:bb:22:a0:2f:1c:9e:87:b1:84:09:ae:
         58:46:21:9b:56:03:a3:f7:fa:80:c8:4a:2a:84:60:aa:af:ee:
         ae:93:d9:08:26:e1:1c:ef:c7:6a:ab:ed:0d:c7:64:5e:67:99:
         9e:9e:08:46:ea:93:03:eb:02:74:6f:27:14:a7:f8:9f:a5:3b:
         9e:b1:f8:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:31:54 2026 by rpki-client