Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
File:                     vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft (raw, json)
Hash identifier:          N5JEUAPUG5QS5tnFtRLH/3UfkaXNCTvVzSWaxglaL1Y=
Subject key identifier:   AA:51:9B:C8:1D:68:69:C6:D7:BD:82:B3:E4:92:D3:7E:7F:25:93:45
Authority key identifier: BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52
Certificate issuer:       /CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
Certificate serial:       019F916D14623D17190D53FF335A4C92F4C0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
Manifest number:          0133
Signing time:             Fri 24 Jul 2026 00:01:12 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:12 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:12 +0000
Files and hashes:         1: JhZMzH9twl8wNkeYev4LG3VPv2I.roa (hash: jdBJTvheHN0jaLshgZDbXGrYMtZxQytteuaj6IybSug=)
                          2: VjQjZjd8u0m638f09ekHhQd_-mM.roa (hash: zTHtgnTnSF7YEYTr+ZUE/h/cmSAdI4ibLvD59NKOvq4=)
                          3: aLIN_Ivl6t0-_yxLs-_sm8ODAaY.roa (hash: EB5XZLXbZe8cIE5ruaV3Aim0QvJLKlyaJyoooR5aR3Y=)
                          4: vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl (hash: +DMqQ96LGQr/Sh5CDzKaX6N//rvJcAMokUGg9tgNEoU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:14:62:3d:17:19:0d:53:ff:33:5a:4c:92:f4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd199f36c3b2cbd1c20acd0cbf9053c004e55052
        Validity
            Not Before: Jul 24 00:01:12 2026 GMT
            Not After : Jul 25 00:01:12 2026 GMT
        Subject: CN=aa519bc81d6869c6d7bd82b3e492d37e7f259345
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8e:aa:e5:f7:f3:a8:b2:b2:92:e6:e7:c6:4d:
                    e9:f5:3c:93:73:a2:f4:bc:ea:a0:22:39:19:fa:4e:
                    5b:eb:d9:2b:6e:1d:5e:bb:2b:84:f0:4a:07:7a:13:
                    55:24:ad:d4:be:90:55:a5:87:19:8a:bc:fd:92:77:
                    67:e7:7d:7c:9e:4e:61:d5:84:e5:de:a5:74:65:8b:
                    86:bd:95:9e:86:59:20:01:24:00:ec:97:18:14:41:
                    2b:01:92:aa:83:45:2d:bb:95:c4:32:32:8c:0c:b2:
                    f5:6d:0b:4c:47:1b:4b:23:d7:6f:3e:0d:87:d0:35:
                    f5:2c:fb:f5:bd:42:8f:5a:98:05:99:e0:66:ec:af:
                    fa:0c:41:23:66:73:5c:b9:ad:a5:ca:b1:c3:51:a6:
                    9b:b0:e2:c8:07:53:7e:c5:4a:6b:0c:82:37:15:e6:
                    dd:7a:51:d4:a4:c2:fe:49:80:42:c2:bd:d9:c0:42:
                    4e:29:d2:16:dc:05:a2:04:45:ab:be:b3:33:93:b0:
                    99:3b:da:7f:c3:ed:6b:b8:16:d3:09:6d:be:91:c8:
                    dd:46:cc:a3:94:0f:03:82:d8:62:51:cf:4d:9c:d7:
                    51:64:f0:1d:db:63:f3:2b:1c:95:b4:a3:f3:04:ee:
                    a3:8c:13:18:b1:49:80:f6:47:fe:82:ca:a3:70:88:
                    fd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:51:9B:C8:1D:68:69:C6:D7:BD:82:B3:E4:92:D3:7E:7F:25:93:45
            X509v3 Authority Key Identifier:
                keyid:BD:19:9F:36:C3:B2:CB:D1:C2:0A:CD:0C:BF:90:53:C0:04:E5:50:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vRmfNsOyy9HCCs0Mv5BTwATlUFI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/6fe893-e597-4ad8-81c2-4ce945c7f725/1/vRmfNsOyy9HCCs0Mv5BTwATlUFI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:1c:65:20:e2:64:fd:43:d6:6a:72:f1:5a:2e:7f:dd:13:60:
         34:b6:f1:55:69:c0:d5:5a:92:c6:1c:89:51:73:21:ae:2f:47:
         2f:aa:bc:1c:cd:e3:a9:93:b9:de:a4:52:10:c4:cb:b1:88:04:
         9a:52:3b:7b:6b:b2:94:a2:7c:63:8f:e7:7c:e3:dc:eb:e7:aa:
         f3:6d:d5:7f:17:b2:b8:f8:8c:26:ba:d8:1c:04:de:16:9a:6a:
         93:64:ee:1f:9d:d5:f7:f9:70:05:4b:b2:5e:1c:ef:bc:ac:6b:
         13:8f:63:4d:a7:4d:21:34:8b:fa:84:43:a3:a6:20:0e:8d:c0:
         1f:e4:c9:5c:06:1b:e7:59:f2:a1:20:03:84:2f:65:0f:d5:6c:
         22:59:88:40:95:eb:58:e5:5a:15:eb:98:26:78:f5:fe:f8:a0:
         34:f3:ac:0d:d8:01:f0:f6:5a:b6:06:77:b5:42:4a:ec:6f:49:
         31:44:57:52:43:73:61:03:7e:77:3d:2e:52:be:bb:4a:12:71:
         28:2b:65:fd:29:9a:e6:f7:c0:e2:e3:7b:c1:27:7e:20:3b:73:
         94:25:59:c2:e1:94:64:eb:7f:c5:af:54:32:59:dd:2f:fc:cc:
         8a:18:70:35:a7:3f:2d:2b:ce:c2:16:c4:bf:cc:11:9e:03:76:
         88:d4:42:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:05:31 2026 by rpki-client