Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
File:                     vkjMNUiL2ebzErIPx2oQJy8M3to.mft (raw, json)
Hash identifier:          W5M0jLwEn4mJQIyzYUqfUT8cSCwIAora25VdHDj+Jek=
Subject key identifier:   B7:10:EB:96:B5:8F:06:6B:0C:84:5C:45:F2:9F:39:66:40:B4:23:08
Authority key identifier: BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA
Certificate issuer:       /CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
Certificate serial:       019F92ED7A261F80BDFB54E757237FBB0934
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
Manifest number:          19CA
Signing time:             Fri 24 Jul 2026 07:01:04 +0000
Manifest this update:     Fri 24 Jul 2026 07:01:04 +0000
Manifest next update:     Sat 25 Jul 2026 07:01:04 +0000
Files and hashes:         1: 1-jVMWvCo1Ia8-NPvjqSraY5h6j8.roa (hash: UbgB51BsUdBtKMnN7GLkK8Ly1Wmd/yhJ431EUB3j0ds=)
                          2: vkjMNUiL2ebzErIPx2oQJy8M3to.crl (hash: X/UswHLVNeA1zePIX1bs7OX1EQqe2WmFWGRwgKBj1eg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 Jul 2026 07:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:ed:7a:26:1f:80:bd:fb:54:e7:57:23:7f:bb:09:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be48cc35488bd9e6f312b20fc76a10272f0cdeda
        Validity
            Not Before: Jul 24 07:01:04 2026 GMT
            Not After : Jul 25 07:01:04 2026 GMT
        Subject: CN=b710eb96b58f066b0c845c45f29f396640b42308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3a:12:ff:02:79:9c:a7:5c:6b:2e:8f:93:26:
                    c5:c7:9b:fa:80:24:11:ea:29:93:95:88:a3:a7:e8:
                    f6:f9:f7:01:00:17:aa:e3:27:19:bb:77:2b:86:96:
                    ba:e5:fb:58:03:d8:7b:7e:1b:95:f9:14:69:ce:f6:
                    e6:3d:59:a2:eb:6e:9b:fe:e3:35:53:96:ac:f7:d3:
                    b9:17:7f:73:55:84:43:1b:79:b1:fc:08:7e:db:97:
                    46:6c:08:2c:f0:97:52:c0:e3:13:95:60:21:46:2a:
                    91:33:82:a9:cb:75:b8:d2:42:78:c9:0f:00:e7:97:
                    36:da:9d:65:d8:e7:04:15:46:de:8d:0d:8c:5c:98:
                    fc:d2:fc:25:ba:4e:be:ff:32:ad:b0:18:00:cb:14:
                    d7:c5:09:ff:35:90:d8:34:26:1c:5f:41:52:8a:22:
                    d3:99:07:aa:63:1d:53:10:79:e7:93:ea:70:bb:5d:
                    a6:fc:0d:ed:84:30:2d:fe:e4:26:0c:8b:82:b7:3b:
                    53:24:ed:44:b5:fc:a4:bd:04:cf:28:bf:e1:21:98:
                    f4:d1:2e:8b:72:03:65:98:34:bd:a2:b4:85:f3:62:
                    70:9b:ac:92:33:92:85:08:19:00:1a:04:3d:6a:45:
                    af:9f:ae:79:ce:dd:3d:73:ee:89:f5:d8:8a:bf:11:
                    42:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:10:EB:96:B5:8F:06:6B:0C:84:5C:45:F2:9F:39:66:40:B4:23:08
            X509v3 Authority Key Identifier:
                keyid:BE:48:CC:35:48:8B:D9:E6:F3:12:B2:0F:C7:6A:10:27:2F:0C:DE:DA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkjMNUiL2ebzErIPx2oQJy8M3to.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/d26971-b7a8-4ede-8bb4-49bc43660c97/1/vkjMNUiL2ebzErIPx2oQJy8M3to.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:50:81:8f:10:90:fb:58:58:0b:43:be:91:bb:9f:e2:d6:47:
         62:6b:a5:3f:3f:72:75:8e:94:78:3d:01:e8:5a:04:d9:01:d5:
         a3:4f:c3:bd:e8:07:45:fe:e7:3e:85:e3:76:29:c9:19:ec:75:
         5f:b6:69:51:ed:76:ac:15:63:1f:0b:60:5f:e4:b3:1f:7a:ca:
         40:65:46:65:ab:ca:50:e7:a7:51:41:46:71:f5:78:0b:5e:c8:
         33:09:d3:a3:c6:a3:56:84:51:dc:0a:86:2d:06:9b:95:39:df:
         6c:a0:2c:97:c3:be:81:f4:cf:34:a6:05:a5:5b:49:3b:38:ea:
         73:50:09:9a:0c:51:b7:d8:d9:1b:ad:28:91:7a:bc:8c:13:5a:
         39:25:4b:e9:da:bb:20:80:45:71:ff:c9:b6:cd:e1:0b:17:f1:
         26:c7:86:81:08:90:a1:61:c8:ce:9f:7b:0b:c7:31:e4:68:5c:
         43:3a:7a:f5:77:61:a4:dd:f4:aa:06:ca:01:94:62:a6:af:5e:
         e4:02:dc:09:77:fe:e2:ce:85:70:c2:a8:c0:27:a2:da:1b:48:
         7a:96:f4:df:89:7f:1d:68:58:08:3c:09:01:c6:6d:63:49:ab:
         2c:29:d7:ac:59:2e:d5:40:28:ce:0e:86:79:36:d2:6d:db:2d:
         fb:cf:6c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:33:52 2026 by rpki-client