Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
File:                     vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft (raw, json)
Hash identifier:          +FzDQFL/TQV0Q2v09zMRGpR1PGPYLJ74JinriyqQZ0Q=
Subject key identifier:   79:AB:14:5F:AE:D9:69:F1:64:D9:89:D3:D0:B0:FA:90:A0:70:80:5A
Authority key identifier: BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED
Certificate issuer:       /CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
Certificate serial:       019F90916968E8FB1934E3682F7DE85FF11C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
Manifest number:          19C6
Signing time:             Thu 23 Jul 2026 20:01:16 +0000
Manifest this update:     Thu 23 Jul 2026 20:01:16 +0000
Manifest next update:     Fri 24 Jul 2026 20:01:16 +0000
Files and hashes:         1: CnLU5sdd9_xh2OEtCZx6z-2dgTY.roa (hash: n31FwsvZCRP5aWFMhgbGP9qd5w+wCRJhNJerptRYayU=)
                          2: vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl (hash: dSzptSFhnZZXUX0CRf8BYTcZAwcmnNZUILvQ8PTilkQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 20:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:91:69:68:e8:fb:19:34:e3:68:2f:7d:e8:5f:f1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcb4e6294e7fe4673f7bc6f57f48138e958fcced
        Validity
            Not Before: Jul 23 20:01:16 2026 GMT
            Not After : Jul 24 20:01:16 2026 GMT
        Subject: CN=79ab145faed969f164d989d3d0b0fa90a070805a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:d5:42:01:f0:51:d5:0e:30:f3:65:95:4b:12:
                    f4:5c:d6:79:e0:ae:73:cd:ff:b7:8a:aa:fd:dc:cf:
                    f5:e3:7b:75:2d:87:93:09:bc:1b:f3:d7:fa:52:1e:
                    b8:b4:10:ec:2b:09:63:29:e7:02:23:d9:03:68:d3:
                    0a:75:33:dd:ac:50:c5:be:76:90:cb:26:0c:39:01:
                    98:26:9a:b1:bc:87:6d:d0:1e:20:df:3f:37:5c:bb:
                    66:9c:97:07:06:32:1c:c0:23:e7:3f:5e:88:f4:34:
                    e2:44:a8:7b:4d:37:ec:6a:3c:db:0e:50:ed:fe:71:
                    a2:f1:cc:b4:2d:03:08:d7:78:2d:25:b8:89:88:9e:
                    40:94:88:af:47:88:1a:c6:f0:63:09:cb:0b:8d:2a:
                    aa:bc:97:c1:21:b2:ad:fe:63:78:45:81:5a:a0:5c:
                    88:0d:58:f0:33:41:ea:29:4c:c9:37:61:cb:a5:ec:
                    cc:04:77:b2:df:b3:93:64:31:e0:6b:a2:ad:11:7a:
                    ef:1a:f4:e3:e9:df:ba:17:4d:65:d5:2e:53:b1:cb:
                    ca:39:fe:31:56:9f:8d:e6:36:b0:4c:c2:20:6a:d9:
                    1b:b4:f7:fa:62:7b:fe:7a:46:73:7d:98:84:06:40:
                    59:9c:4a:1e:db:72:33:8c:45:15:fa:52:fb:bf:6f:
                    ba:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:AB:14:5F:AE:D9:69:F1:64:D9:89:D3:D0:B0:FA:90:A0:70:80:5A
            X509v3 Authority Key Identifier:
                keyid:BC:B4:E6:29:4E:7F:E4:67:3F:7B:C6:F5:7F:48:13:8E:95:8F:CC:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/ad4f52-9c28-4512-8c1a-0d597c7da9c8/1/vLTmKU5_5Gc_e8b1f0gTjpWPzO0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:75:ed:3b:c1:4d:56:aa:62:71:a9:a0:79:cd:db:dc:41:19:
         18:31:b4:d4:70:42:a2:68:bc:2a:65:88:7d:a0:3d:b1:42:74:
         46:5a:22:60:79:3a:cb:cd:69:75:be:87:de:91:f1:86:b3:eb:
         eb:bf:0c:2b:57:d2:ff:b9:7d:ea:d2:3c:49:5e:5c:f2:0d:db:
         36:bb:3a:38:b1:a7:49:58:97:41:e1:a1:89:ba:2f:04:3a:f6:
         72:3b:b9:24:0f:56:f7:f2:f4:1d:1c:10:fa:cb:c3:62:d2:10:
         bc:73:5d:36:23:e6:fb:0b:ff:82:bf:7f:75:3c:94:f6:57:de:
         63:1b:27:d5:c0:77:b2:9a:b7:f1:4b:cb:f1:21:64:ea:85:0a:
         03:9a:08:ca:39:b1:23:a2:87:f6:93:29:44:60:94:d6:72:9f:
         ff:85:06:92:73:39:c4:c2:e3:bc:eb:3b:f7:8f:79:1c:ba:d4:
         6a:27:f8:77:93:6a:a0:95:c2:0f:d0:b3:35:13:31:53:3f:2c:
         cc:80:ce:50:90:85:4b:7c:cc:b8:0f:0d:29:18:5b:e6:b8:47:
         ae:9f:16:51:b2:1f:07:43:0f:e1:8a:8a:d5:f8:99:37:66:a1:
         e4:de:c1:5c:dc:0b:5c:6f:c9:e2:2e:f6:b1:50:07:a2:d2:83:
         a1:ad:9a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:05:20 2026 by rpki-client