Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
File:                     vO4cB0VxEbnCuXLruBjd-VvIBPI.mft (raw, json)
Hash identifier:          j/gMQMV6HLkzeuxvzxo92vnS93PjMY2PjtjpmB2BEwA=
Subject key identifier:   BC:9F:7E:41:9B:95:2C:30:EA:22:90:8A:D6:00:B1:54:31:9C:FF:69
Authority key identifier: BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2
Certificate issuer:       /CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
Certificate serial:       019F8EA2375D2024F3381E84F98ABE71F8D0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
Manifest number:          01B6
Signing time:             Thu 23 Jul 2026 11:00:23 +0000
Manifest this update:     Thu 23 Jul 2026 11:00:23 +0000
Manifest next update:     Fri 24 Jul 2026 11:00:23 +0000
Files and hashes:         1: fTu-1x5V5YhHNb-kmN7PLGuLQ3A.asa (hash: IhEje5PxVy0GWA0HaCmdOM2Jl588sWu9ngriqlKgsa8=)
                          2: vO4cB0VxEbnCuXLruBjd-VvIBPI.crl (hash: 60WTpQ9zMjFYt1aJOFnOpWTcm0M3uw972JzCkRqWIWw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 11:00:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8e:a2:37:5d:20:24:f3:38:1e:84:f9:8a:be:71:f8:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcee1c07457111b9c2b972ebb818ddf95bc804f2
        Validity
            Not Before: Jul 23 11:00:23 2026 GMT
            Not After : Jul 24 11:00:23 2026 GMT
        Subject: CN=bc9f7e419b952c30ea22908ad600b154319cff69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:65:79:5e:bb:72:19:e2:e3:22:85:84:44:53:
                    90:71:e4:45:7f:52:39:d9:c5:d8:80:c5:7b:8d:6d:
                    29:3e:e9:33:4c:6c:24:c7:c4:2f:65:bb:69:dc:d5:
                    41:09:e7:e5:6d:52:61:0f:1b:86:f6:34:12:b6:e6:
                    26:45:6f:a9:7e:0b:4c:36:9e:fe:a3:8a:05:d9:55:
                    d4:73:69:68:c5:e7:31:04:53:e4:36:78:a6:09:06:
                    52:20:db:6e:9a:63:ef:be:c2:c6:09:23:59:29:0a:
                    3b:28:29:34:ca:90:79:0e:ae:1b:0c:f2:7f:30:d5:
                    93:8f:24:0d:8e:af:01:53:7b:74:a5:ca:5f:23:21:
                    12:b8:2f:bd:78:47:77:fb:ab:2f:85:1f:a7:03:2e:
                    ae:7d:c7:90:0a:11:cb:26:35:00:f1:74:09:45:2a:
                    57:3e:6a:a5:79:53:38:26:60:c9:7b:fc:ee:fc:f5:
                    c5:4c:5d:7c:23:11:8e:ea:00:50:e5:14:54:c2:62:
                    63:74:91:a3:1c:43:17:56:cf:39:a6:dc:fa:2a:68:
                    61:88:e9:d9:c5:5b:77:c4:24:a2:0a:f9:b4:b2:a4:
                    5b:a6:73:13:e5:da:4f:9b:bd:f5:47:eb:86:41:e7:
                    34:f5:fb:e0:d9:9b:e8:be:2d:e7:e1:aa:d0:a6:96:
                    92:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:9F:7E:41:9B:95:2C:30:EA:22:90:8A:D6:00:B1:54:31:9C:FF:69
            X509v3 Authority Key Identifier:
                keyid:BC:EE:1C:07:45:71:11:B9:C2:B9:72:EB:B8:18:DD:F9:5B:C8:04:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vO4cB0VxEbnCuXLruBjd-VvIBPI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/61116f-3cb6-4dd4-9327-c1d6ba0d7746/1/vO4cB0VxEbnCuXLruBjd-VvIBPI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:24:30:07:f0:e5:f3:f6:55:d1:8c:f6:f4:96:57:f7:68:79:
         c0:56:c4:55:0e:5f:46:76:05:a6:fe:d3:0c:a7:08:69:72:d5:
         a8:e7:0a:fb:54:09:b3:34:63:95:18:9d:97:e5:cd:23:46:9a:
         7d:b3:76:6c:9b:61:e6:3c:e4:85:b2:82:91:f5:9e:7c:22:25:
         cf:0b:af:14:23:5f:b5:c5:af:1c:7a:ad:5b:9d:f9:aa:8a:7b:
         3f:b9:78:4d:96:4a:03:39:47:94:5e:c6:0a:87:54:46:8b:69:
         6b:9b:d3:7b:ad:88:e7:84:6d:b4:5f:3a:35:09:94:41:61:06:
         9d:d7:b0:89:19:c6:ee:90:84:57:64:38:26:15:dd:fe:07:94:
         a2:32:66:cf:c0:70:f0:93:b3:1a:06:09:41:9c:ea:f5:0a:81:
         f2:5b:92:63:87:a0:af:18:bb:08:ae:39:cf:f8:4e:b7:13:30:
         1a:d7:b9:14:dc:23:29:05:67:93:ee:7e:4b:d7:9a:ea:76:9e:
         3b:6a:15:2d:3a:1c:be:05:27:b7:7a:f1:d4:98:f4:8a:8f:f4:
         05:b3:4d:23:29:ac:28:8c:ea:20:8d:13:73:d6:72:00:24:26:
         40:d8:90:9a:ed:53:e8:9f:4e:41:5f:b6:dd:4e:24:5e:13:12:
         8c:83:8b:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OojddICTzOB6E+Yq+cfjQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWUxYzA3NDU3MTExYjljMmI5NzJlYmI4MThkZGY5NWJj
ODA0ZjIwHhcNMjYwNzIzMTEwMDIzWhcNMjYwNzI0MTEwMDIzWjAzMTEwLwYDVQQD
EyhiYzlmN2U0MTliOTUyYzMwZWEyMjkwOGFkNjAwYjE1NDMxOWNmZjY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWV5XrtyGeLjIoWERFOQceRFf1I5
2cXYgMV7jW0pPukzTGwkx8QvZbtp3NVBCeflbVJhDxuG9jQStuYmRW+pfgtMNp7+
o4oF2VXUc2loxecxBFPkNnimCQZSINtummPvvsLGCSNZKQo7KCk0ypB5Dq4bDPJ/
MNWTjyQNjq8BU3t0pcpfIyESuC+9eEd3+6svhR+nAy6ufceQChHLJjUA8XQJRSpX
PmqleVM4JmDJe/zu/PXFTF18IxGO6gBQ5RRUwmJjdJGjHEMXVs85ptz6KmhhiOnZ
xVt3xCSiCvm0sqRbpnMT5dpPm731R+uGQec09fvg2Zvovi3n4arQppaS6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLyffkGblSww6iKQitYAsVQxnP9pMB8GA1UdIwQY
MBaAFLzuHAdFcRG5wrly67gY3flbyATyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk80Y0IwVnhFYm5DdVhMcnVCamQtVnZJQlBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi82MTExNmYtM2NiNi00ZGQ0LTkzMjct
YzFkNmJhMGQ3NzQ2LzEvdk80Y0IwVnhFYm5DdVhMcnVCamQtVnZJQlBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi82MTExNmYtM2NiNi00ZGQ0LTkzMjctYzFkNmJhMGQ3NzQ2
LzEvdk80Y0IwVnhFYm5DdVhMcnVCamQtVnZJQlBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGSQwB/Dl
8/ZV0Yz29JZX92h5wFbEVQ5fRnYFpv7TDKcIaXLVqOcK+1QJszRjlRidl+XNI0aa
fbN2bJth5jzkhbKCkfWefCIlzwuvFCNftcWvHHqtW535qop7P7l4TZZKAzlHlF7G
CodURotpa5vTe62I54RttF86NQmUQWEGndewiRnG7pCEV2Q4JhXd/geUojJmz8Bw
8JOzGgYJQZzq9QqB8luSY4egrxi7CK45z/hOtxMwGte5FNwjKQVnk+5+S9ea6nae
O2oVLTocvgUnt3rx1Jj0io/0BbNNIymsKIzqII0Tc9ZyACQmQNiQmu1T6J9OQV+2
3U4kXhMSjIOLvg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:14:40 2026 by rpki-client