Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
File:                     vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft (raw, json)
Hash identifier:          nXdk/niyI5YqQ8pfug/W9boA5MmGaZlIFcHKSUUivdE=
Subject key identifier:   78:EC:F5:33:07:8D:AA:9C:47:4C:E8:D7:2A:3E:3C:EB:9E:B8:7A:82
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Certificate issuer:       /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial:       019F916C4295A90BB33B3D2D8C42BB25136D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:00:18 +0000
Manifest this update:     Fri 24 Jul 2026 00:00:18 +0000
Manifest next update:     Sat 25 Jul 2026 00:00:18 +0000
Files and hashes:         1: HDFBj63zZKtSC6Jw4UiShUElLMM.roa (hash: dM6soWydRdWA9tO0ayG6aaBJ/bKBsqmgot+omBKKzgI=)
                          2: MV9jYxZc4Pt5SR7yy233XyCWLl0.roa (hash: CCSfxKCBfU96JZOkhVpKkTvEVxdzHUgSCznNnbc32HM=)
                          3: QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa (hash: hnbKkDbftBuvAa8vwX3rQQSx/8OuOGXHnpFHQ2CyWKo=)
                          4: WpnuLvnippB8tVyEsrRUR3ewk_U.roa (hash: BHza+2duMNR9nIMzQqoFfpCBTh9mkWoaMy7myW/tl3E=)
                          5: dMUseDjB4Vm4-QaNQKEDVpMbMMA.roa (hash: wDNh4iJtkmG2Tv4fXnbCCR59EatzQ/W+vho/keWCSrQ=)
                          6: vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl (hash: bBxXBe0biXs/pkdtNwPeF4kzYlpIqWQVBk4jBmS0p9Q=)
                          7: wjlwL_TATpRkl3IwETvo11EU7l0.roa (hash: uMoT+Y/uxFQEEAREXENe/LFmTT6LeqDGlq2BaS0K//Y=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6c:42:95:a9:0b:b3:3b:3d:2d:8c:42:bb:25:13:6d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
        Validity
            Not Before: Jul 24 00:00:18 2026 GMT
            Not After : Jul 25 00:00:18 2026 GMT
        Subject: CN=78ecf533078daa9c474ce8d72a3e3ceb9eb87a82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:dd:24:1d:47:ca:15:d5:dd:c4:f6:a4:db:76:
                    e7:10:de:e1:c1:8f:37:80:a1:76:6d:52:37:ff:7c:
                    18:34:8d:52:0e:31:5e:63:5e:fc:51:4a:bb:a0:93:
                    c5:61:46:eb:ad:fa:bb:2c:e6:f7:c3:c0:79:24:ca:
                    c0:46:a8:39:0d:c3:f3:f9:78:9f:9e:c7:a6:8d:8a:
                    ee:2b:f6:aa:4f:9d:4a:98:43:a6:49:15:9a:48:ac:
                    5d:e9:c8:0b:13:99:33:2e:36:c9:31:0c:f9:1b:40:
                    db:f8:db:08:8c:bb:94:25:49:05:7e:39:1b:b9:7a:
                    2e:3a:1e:4e:ed:4b:56:7a:ba:e3:eb:2f:84:d3:44:
                    34:64:ed:1e:78:0e:dd:f2:4e:5c:3e:16:e7:9b:77:
                    b9:98:8d:77:64:d1:ad:23:31:79:d6:51:6d:40:5e:
                    b4:83:53:84:c3:ff:08:c1:ce:88:23:46:0a:de:bc:
                    9a:03:d3:a1:52:0f:ba:99:a2:d7:5a:39:6c:56:c9:
                    f9:71:35:6f:49:61:a7:a2:9f:6e:15:bc:b1:5b:33:
                    7d:51:1a:2f:f2:a3:9c:ef:57:e1:40:27:0c:13:08:
                    7f:02:e4:73:44:06:7b:d1:a1:25:f5:99:bb:3a:0a:
                    62:70:c4:ff:2b:8e:d6:16:9f:46:ff:42:2e:32:30:
                    38:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:EC:F5:33:07:8D:AA:9C:47:4C:E8:D7:2A:3E:3C:EB:9E:B8:7A:82
            X509v3 Authority Key Identifier:
                keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b2:4d:a6:b4:db:91:f1:f9:35:cb:69:50:0b:4b:8f:e4:f6:
         b7:6c:13:97:a7:5a:21:3b:e1:75:a4:5c:0b:ef:02:61:d9:ad:
         0a:b3:bd:2d:dc:6e:21:85:65:17:12:16:5c:a7:74:ac:dc:86:
         a0:02:eb:c9:98:17:c0:70:87:c9:44:27:46:a6:15:cb:bc:ad:
         c7:22:8f:91:2d:89:1d:65:cc:17:eb:39:5e:7a:c6:9b:e3:d9:
         18:99:d2:a2:8b:d2:e2:bb:f4:19:74:1a:e0:9b:c8:43:b0:2b:
         b5:65:68:38:b4:98:43:19:98:18:61:d6:e6:09:bc:d9:7a:dc:
         e7:9e:d3:9f:1f:5e:a0:b7:c7:2e:a1:1b:1d:15:b2:c4:48:b0:
         97:c0:eb:c8:ac:5a:23:3b:9a:fe:3e:85:ea:6c:5e:09:2f:04:
         cf:7c:66:80:78:6c:4f:3f:5d:d6:fb:aa:7f:8b:5f:0b:8b:19:
         5d:9f:78:04:b0:ca:de:8c:19:8e:f3:b2:86:74:37:99:ac:e6:
         d2:44:01:94:b9:55:3f:65:f7:04:71:36:b5:a8:eb:bf:ae:c5:
         8d:a9:91:f4:93:21:05:73:d6:53:31:91:c3:ed:5c:21:0e:d5:
         1d:4f:b4:08:06:cb:ca:cc:24:cb:31:25:29:75:b5:22:5b:01:
         fe:73:a6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:25:52 2026 by rpki-client