Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
File:                     vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft (raw, json)
Hash identifier:          E6mNjuFrYFrtIOKjPceOrnE6ftoMcEX1maGm4HbsMGY=
Subject key identifier:   42:A5:D3:B3:59:0E:10:25:5C:69:7B:A4:A0:66:E3:9D:F2:F5:2D:C7
Authority key identifier: BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9
Certificate issuer:       /CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
Certificate serial:       019F916D403662ECFF28B2F3BF71719F79B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
Manifest number:          17E4
Signing time:             Fri 24 Jul 2026 00:01:23 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:23 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:23 +0000
Files and hashes:         1: R-q6ieQ5ZRpyZAS3VuKsjP1lbqI.roa (hash: LE0wpmfemoMC71Up9yLLrAR45HiWA1m8U6namnoo6+E=)
                          2: RoC9yHrjkOJ0GiednXz9KzpBgEI.roa (hash: kugJughWaN4KyRcT9vU8DskQM03Ay2SChRmN27jdndQ=)
                          3: Uj9qErLJ7z3sRt5hNWIVbAoCTJU.roa (hash: XmHbyEYbwLMwHEMXeqgjX8MuDffCoDklGaGBFZdSn00=)
                          4: u_BnVwDhAa2ItOuzTxp9mi3OVGk.roa (hash: DT0/HarFisk4IStUU9LzkErJGL5WNt4QSQVHnd5C+vo=)
                          5: upv2bkah2kmcgwzii9vlsV1YYx0.roa (hash: DdoCoWJ4MAXwMUb9LrgBORU0OoZ8wqZEHBq3WjBn6lw=)
                          6: vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl (hash: YZvl0lSn8k9TCa7E8wcu1QY1kcLVA0Rf9IP7OlJTwmM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:40:36:62:ec:ff:28:b2:f3:bf:71:71:9f:79:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be49fb190f4bd0f5815a8e579f366ad58d5d41f9
        Validity
            Not Before: Jul 24 00:01:23 2026 GMT
            Not After : Jul 25 00:01:23 2026 GMT
        Subject: CN=42a5d3b3590e10255c697ba4a066e39df2f52dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:52:e7:d8:cc:99:2e:42:35:50:38:e8:30:57:
                    14:ee:34:5c:73:76:14:e1:25:c8:38:24:1e:dd:4c:
                    8e:6b:12:a5:dc:8c:b0:11:cd:9c:1e:df:d2:ff:41:
                    fc:c8:53:27:8f:d0:b3:7d:27:7a:72:b1:b5:68:9e:
                    0c:89:f2:36:cd:56:d5:48:9c:99:49:ec:9f:42:f0:
                    4f:50:16:4e:6f:3d:ef:ec:57:b9:25:46:77:8b:7a:
                    0e:4c:8a:71:af:1d:9b:a1:c7:2c:5a:1e:76:67:b0:
                    1b:1d:bc:2c:8b:77:81:c4:51:dc:70:f1:a5:5f:87:
                    e9:16:4d:60:e1:5d:fe:b9:16:8e:91:a9:c4:18:7c:
                    89:03:b7:39:fc:dc:4e:87:4c:16:4e:d1:ee:d1:9d:
                    30:a0:db:41:f3:3e:2f:97:5c:dd:34:0a:97:75:88:
                    72:86:8c:04:7e:ce:e4:f1:33:ed:94:20:1b:b6:fa:
                    99:c8:71:41:f8:bd:a5:8f:4c:dd:d1:7d:6a:c7:5d:
                    b2:29:fb:7d:1b:75:ee:e6:6e:fb:46:0b:76:09:19:
                    4e:97:c7:13:91:ad:0d:5a:dd:5c:54:07:c4:89:67:
                    27:10:22:77:f7:c4:5a:48:d8:48:9e:41:9b:d3:11:
                    60:e2:bc:33:ad:f2:77:36:3a:dc:43:2c:42:d3:e9:
                    4c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:A5:D3:B3:59:0E:10:25:5C:69:7B:A4:A0:66:E3:9D:F2:F5:2D:C7
            X509v3 Authority Key Identifier:
                keyid:BE:49:FB:19:0F:4B:D0:F5:81:5A:8E:57:9F:36:6A:D5:8D:5D:41:F9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/bd0d13-e983-4ff9-b507-5e656f1b4876/1/vkn7GQ9L0PWBWo5XnzZq1Y1dQfk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:30:ba:d5:b9:3a:dc:e5:42:9e:57:2b:6f:03:02:aa:22:a3:
         36:a4:59:0c:63:ee:f1:e2:e7:73:dc:be:9f:13:05:b9:f9:a3:
         6d:6f:16:87:3c:38:ae:9a:a1:74:3f:44:da:1e:67:e6:0f:2e:
         8f:a9:a6:23:93:95:08:67:3a:b4:f4:1e:bf:bb:99:25:59:92:
         fb:7b:9e:8b:ad:8e:f2:06:84:80:45:45:43:2f:2f:b7:99:e4:
         92:8a:6c:69:78:2b:e1:e1:8b:e1:d3:36:05:4d:fc:95:ee:09:
         16:d2:92:da:60:e2:4b:cb:3d:4f:6e:69:1a:9f:12:32:c3:7e:
         a2:1d:91:e3:cf:26:3a:b3:ff:16:cb:ad:12:69:6d:86:99:f9:
         cb:16:d4:b5:2f:2d:33:9a:26:21:3b:19:45:ad:28:13:45:cd:
         1e:0d:ce:26:59:a9:b0:c5:a0:bc:1a:35:db:04:28:d3:cf:33:
         da:2f:52:fc:1f:41:29:5f:dd:61:00:11:0a:b7:41:7b:7c:89:
         dc:8e:fe:fd:17:1c:f3:ae:4c:33:39:7e:e1:ee:c0:82:a3:61:
         41:97:39:95:66:f4:26:1c:20:42:82:ea:b2:5d:24:73:67:aa:
         ea:56:e2:a1:ed:44:ce:76:20:d1:02:71:77:79:b0:96:f2:30:
         70:f2:0c:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:38 2026 by rpki-client