Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
File:                     VuhSHoDy8HGjE4W837wxpiHGj5Q.mft (raw, json)
Hash identifier:          FDM94meDUJ+uAcueCL0sQWGuHFzvws32Oc4K4C+isLA=
Subject key identifier:   04:BA:50:63:FF:17:72:F3:7C:00:2B:A5:D9:32:77:B7:A9:3B:37:71
Authority key identifier: 56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94
Certificate issuer:       /CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
Certificate serial:       019F91DA3E606657E94CE5199C0211C683FD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
Manifest number:          05E1
Signing time:             Fri 24 Jul 2026 02:00:26 +0000
Manifest this update:     Fri 24 Jul 2026 02:00:26 +0000
Manifest next update:     Sat 25 Jul 2026 02:00:26 +0000
Files and hashes:         1: 1XLn2EcayJXCpeoADdUargrZ6uQ.roa (hash: 9EjMpW/7TLzpMCvVuiux2e1xySwJuLaEjWMRwlKneqc=)
                          2: 92tN2JlzdGv4w4ppY92AT6gCqqI.roa (hash: fAyJZwtwkaBMV81rgwnHMRFeP5C1LeUheuNVRLYAlYE=)
                          3: UDD4U9oh5woq1sTFQu5LzTFUSVI.roa (hash: gBskSlesmYDIcJaF0F0FSqoN+kHk6oOKBdSTOSK9ftw=)
                          4: VuhSHoDy8HGjE4W837wxpiHGj5Q.crl (hash: MPhWRRLFV3TXVvAdO1KRmQeItukukJ9jfOEp0zjhG4E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 02:00:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:da:3e:60:66:57:e9:4c:e5:19:9c:02:11:c6:83:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e8521e80f2f071a31385bcdfbc31a621c68f94
        Validity
            Not Before: Jul 24 02:00:26 2026 GMT
            Not After : Jul 25 02:00:26 2026 GMT
        Subject: CN=04ba5063ff1772f37c002ba5d93277b7a93b3771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:8b:a5:ea:f2:0a:77:0c:1f:51:f1:e7:0f:62:
                    af:18:51:fd:79:c5:e4:e5:76:b8:1b:55:34:fd:db:
                    8f:6e:0b:22:b6:17:96:2a:e9:7a:cb:52:00:82:f1:
                    f5:9f:b3:84:aa:f6:ce:4e:ff:92:d5:f8:4d:7a:51:
                    81:64:77:60:0c:5c:7e:f2:e2:5a:bb:8b:45:a5:79:
                    5d:de:d2:48:de:ab:86:f5:3d:32:20:c6:07:cb:e8:
                    53:da:e1:b7:02:e7:02:71:d4:c6:70:e9:e0:fb:c6:
                    f0:72:06:18:44:45:01:1f:a5:66:5b:63:8e:2a:46:
                    e8:99:a7:be:db:2b:7d:07:f7:2c:e9:66:57:4e:09:
                    35:a2:7b:40:af:e0:da:05:da:ac:29:a7:18:14:17:
                    f2:db:be:ff:9e:5a:1d:b3:9f:ae:97:6e:80:5a:18:
                    d7:f9:18:ce:3a:0e:37:cb:98:17:b4:47:61:c3:97:
                    7e:56:02:99:12:f4:5c:81:ea:6b:f8:c4:01:1f:4e:
                    65:d5:9d:2a:81:7f:b9:fe:ad:6a:f3:f2:5a:bf:6b:
                    43:3e:fb:92:f0:79:12:bc:4a:aa:69:3b:ed:16:1a:
                    e8:a5:5f:69:55:2e:83:7a:f6:39:c6:82:57:95:c9:
                    ef:fb:97:3b:c1:8d:c9:cd:3e:16:d2:7b:de:84:14:
                    d5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:BA:50:63:FF:17:72:F3:7C:00:2B:A5:D9:32:77:B7:A9:3B:37:71
            X509v3 Authority Key Identifier:
                keyid:56:E8:52:1E:80:F2:F0:71:A3:13:85:BC:DF:BC:31:A6:21:C6:8F:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuhSHoDy8HGjE4W837wxpiHGj5Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9f399-0a89-48ca-9473-0da0f2ad4688/1/VuhSHoDy8HGjE4W837wxpiHGj5Q.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:4a:51:a0:8b:15:cd:34:0c:1d:c9:47:9c:d8:07:92:f8:ac:
         87:3a:a7:0b:57:65:c8:56:77:e9:6d:3f:82:6d:40:7b:f8:59:
         48:50:51:75:37:a8:2e:af:c7:db:e1:df:bf:97:1c:05:0e:0d:
         1e:3a:aa:a5:77:d8:78:bc:2f:03:62:75:8a:a1:0e:7c:21:9a:
         54:c2:0e:29:7e:8f:25:42:06:a0:a0:91:b2:66:10:82:53:d6:
         af:6b:d0:02:2e:14:f7:42:87:e6:0a:2c:98:d2:a0:44:47:1c:
         d0:c1:46:7c:1a:ce:0e:65:6c:23:32:12:57:e0:b8:5a:3d:d4:
         0b:d2:3e:82:f8:b9:be:d4:0e:38:63:e7:19:fc:36:2f:24:08:
         4a:69:b7:e8:85:be:a9:e5:60:29:aa:50:08:1a:30:d2:97:c6:
         cc:45:c6:45:34:33:3a:c3:c1:89:03:9b:c7:d3:cb:eb:2e:fb:
         a4:4c:19:bb:4a:0a:8d:60:0d:44:f8:57:4c:82:7b:42:01:e5:
         86:5c:b1:6e:00:22:48:2f:37:a5:63:d7:f7:51:f3:1a:9c:af:
         b4:8d:21:e9:58:f8:f0:b8:d3:f2:cc:ae:8b:22:f2:0d:80:35:
         da:e1:07:dd:32:6a:61:ed:13:d6:d9:f3:09:be:43:35:a9:72:
         d8:86:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 12:13:16 2026 by rpki-client