Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
File:                     vQM98D7VHOeSSkgBg7z_208EJTc.mft (raw, json)
Hash identifier:          MTclFACi5iUA12ABTA4XkGb4e9xXmZknODu7miCOetM=
Subject key identifier:   E0:97:54:CD:09:FD:66:ED:18:67:D1:6B:D2:B6:29:B7:28:8D:CD:F1
Authority key identifier: BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37
Certificate issuer:       /CN=bd033df03ed51ce7924a480183bcffdb4f042537
Certificate serial:       019F8F4746B88D62956E087C7220866A0898
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
Manifest number:          05BA
Signing time:             Thu 23 Jul 2026 14:00:40 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:40 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:40 +0000
Files and hashes:         1: j6WVMlj7QGC0B6lVcgTm5Vqjms0.asa (hash: HUsdlww5wzPN9pHKVOg9JknKg0Sqp60i383BUXuT2YI=)
                          2: vQM98D7VHOeSSkgBg7z_208EJTc.crl (hash: bi6oScBWMdhAESFinSWqxlkkgUxSCoxim+C+ybYmCPk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:47:46:b8:8d:62:95:6e:08:7c:72:20:86:6a:08:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd033df03ed51ce7924a480183bcffdb4f042537
        Validity
            Not Before: Jul 23 14:00:40 2026 GMT
            Not After : Jul 24 14:00:40 2026 GMT
        Subject: CN=e09754cd09fd66ed1867d16bd2b629b7288dcdf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:04:a7:a7:63:50:bf:1a:fe:9a:7d:13:8b:75:
                    2a:89:1a:56:f6:f0:dc:1e:61:65:57:25:69:09:a3:
                    01:f9:4f:9f:5c:34:c5:41:1c:61:25:a5:ff:6e:64:
                    82:ed:6d:3d:10:b6:b4:79:dc:05:bb:bb:51:ce:c7:
                    50:08:6b:4d:50:31:5d:a5:66:8c:c0:35:68:a4:e4:
                    ec:ab:2b:a1:ac:c7:69:1e:80:5a:93:78:58:62:47:
                    4e:4b:49:a9:20:99:36:b5:49:1f:30:a9:78:bd:6b:
                    ca:d6:b1:2e:c4:04:04:96:5a:ea:d2:e7:2e:c8:9a:
                    57:20:26:bc:d0:6c:0f:0f:ba:1b:9e:59:38:cc:b9:
                    33:59:aa:08:9a:47:48:1b:b6:84:bd:38:d8:d3:c8:
                    d3:9c:f9:00:d8:4d:c1:06:6f:c9:b3:7a:88:f3:03:
                    7a:e9:9d:e8:dd:d3:17:b7:cd:a2:3d:df:3a:90:1b:
                    ce:3c:95:d8:7a:73:cf:ae:8d:eb:2b:d4:fa:19:a5:
                    0e:55:b7:52:30:ba:43:8d:10:a9:7e:50:48:37:ed:
                    56:1c:0d:89:b2:13:a5:b6:1f:94:e5:31:91:0e:3c:
                    64:a3:61:11:92:3d:e7:74:94:c5:c3:50:41:a8:45:
                    a5:77:69:10:e8:8c:27:0f:ff:43:cb:65:8e:31:4c:
                    38:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:97:54:CD:09:FD:66:ED:18:67:D1:6B:D2:B6:29:B7:28:8D:CD:F1
            X509v3 Authority Key Identifier:
                keyid:BD:03:3D:F0:3E:D5:1C:E7:92:4A:48:01:83:BC:FF:DB:4F:04:25:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQM98D7VHOeSSkgBg7z_208EJTc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/cc66d4-7d98-43b5-b209-b8487fe96149/1/vQM98D7VHOeSSkgBg7z_208EJTc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:62:05:41:9a:d4:68:d3:4e:a3:8f:69:61:10:d9:b9:a6:51:
         f5:14:df:ca:9b:a9:cc:a2:1d:08:36:3e:91:4e:e0:bb:ae:55:
         44:b7:9f:37:d3:60:09:14:d0:26:81:28:48:98:c7:a7:ae:10:
         a9:de:c7:34:3a:9f:56:eb:da:5c:3e:08:39:49:c1:e1:c0:b4:
         e8:76:2a:9a:4d:8c:a4:8c:42:5d:aa:5e:c8:44:66:db:5f:6a:
         7c:67:60:52:2a:6c:71:d3:66:2b:51:59:46:62:ca:7e:1b:54:
         c8:09:22:b6:b0:35:b8:49:6c:3f:d8:8f:95:53:95:a5:f1:b2:
         15:d2:db:8d:0b:7d:98:e0:81:ad:01:bb:69:f4:2a:f2:da:d9:
         c9:ad:a3:90:cb:47:c6:da:46:30:04:5e:9b:7c:ca:4c:8c:1b:
         c0:71:fd:1d:c1:a2:61:5e:ba:e5:6b:4b:32:c0:0e:89:30:1e:
         4f:cd:06:e1:3b:d7:7f:69:8e:6b:0f:74:5b:78:12:d6:d2:04:
         d0:01:8e:db:52:38:2d:dd:fb:4d:53:ff:4a:1c:c4:04:98:c7:
         4a:c0:a4:f2:fe:97:d6:dc:86:5b:68:16:1e:c7:30:af:32:5c:
         73:10:3c:8d:46:d7:55:b1:f0:78:3f:61:5d:01:9a:f7:4e:b2:
         42:b7:a2:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:18:36 2026 by rpki-client