Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
File:                     Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft (raw, json)
Hash identifier:          9mfxsbiDfC0o++M2n4OJCB4uASz+QLVQTDoZF4TjG1A=
Subject key identifier:   E6:76:E5:CD:1A:36:7F:01:DC:48:08:B3:68:46:F1:75:AB:CB:D3:21
Authority key identifier: 55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73
Certificate issuer:       /CN=55df024d85e89953d74c9bee32c9e32796bcfe73
Certificate serial:       019F916DCC0F1C61E9D0FEEB5CD76953B5B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
Manifest number:          40
Signing time:             Fri 24 Jul 2026 00:01:59 +0000
Manifest this update:     Fri 24 Jul 2026 00:01:59 +0000
Manifest next update:     Sat 25 Jul 2026 00:01:59 +0000
Files and hashes:         1: IiKdZihxK24qAbY3IlsJBY8DWuI.roa (hash: GiUmS/2trsIX5BrmBaADREO7MrJkpyzXZUgRulZKo18=)
                          2: KyEl-NBPpQ9teBrmm7tpFc8-Dj4.roa (hash: LX3Hr454zl2MUCj61HpMXcW0BQ8pIuxmh8gRh4mgIis=)
                          3: Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl (hash: T0YRQhmr/qZb107lV5H/tnBnGbSlNOyCHRahBj/hQ38=)
                          4: XGylWLMmuf-6cyXPIHTSqm3GCd8.roa (hash: Bd9s12c8P6Pe+DYxSBmdpuoMDBh5umpoBqgkM4LDkJw=)
                          5: aWVkUEp4lm12y5qwWv2adJ66-rs.roa (hash: Hq+MYEUAwJVfh/YoUoYayEoIk7iU3N4ROU0WjO5xyMA=)
                          6: a_a4Bm2vMVbsH9BfYmsaqGtUarI.roa (hash: YQ7WevldUaPUf2luIJT1enFkQ7Ao715lMC2Xh1aTnXU=)
                          7: mX5yBu9SXhlcsrImPSehotm7bas.roa (hash: +AwpNCGeeHcy8ov56jxqSP8MLjuzljj6nR9dFS6V4jM=)
                          8: uTiURM_DMHiv75dNHPrAJFdnAd0.roa (hash: sF0ZyLzuBt8uyr+UBykHairkTID8q9WL1Vh7lTAxp1w=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:91:6d:cc:0f:1c:61:e9:d0:fe:eb:5c:d7:69:53:b5:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55df024d85e89953d74c9bee32c9e32796bcfe73
        Validity
            Not Before: Jul 24 00:01:59 2026 GMT
            Not After : Jul 25 00:01:59 2026 GMT
        Subject: CN=e676e5cd1a367f01dc4808b36846f175abcbd321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c9:c1:33:07:df:0c:19:1d:0b:62:9a:64:6c:
                    30:fc:0f:fd:c0:b2:b8:2d:9e:f2:0b:dd:30:ed:f8:
                    53:a1:e3:0b:5e:63:c9:55:d0:78:25:fc:1e:33:b0:
                    69:57:2d:2c:84:de:c1:30:6f:c9:1a:e2:c2:43:cc:
                    ad:a7:82:34:e7:59:cb:48:86:57:f3:cc:e6:3d:b1:
                    1c:4e:e9:56:24:12:b9:9b:da:e2:1e:2c:4b:6a:9a:
                    a7:42:9f:bc:aa:11:5e:8e:53:c4:01:4d:b5:ef:74:
                    72:ac:1d:42:e3:36:7f:ee:74:0e:6e:65:f8:22:45:
                    d4:d6:77:41:a5:f9:c7:64:71:e3:d4:f1:49:56:9e:
                    b8:45:ac:f1:62:cd:37:75:3d:68:ca:e7:5c:1a:46:
                    b9:62:5b:7c:25:88:7a:b8:14:b6:93:01:d2:f5:fd:
                    55:05:93:66:16:48:c4:3e:94:69:a4:f9:e0:1e:41:
                    34:74:4e:53:9a:5d:63:7d:2f:21:e7:8a:5c:70:68:
                    ea:bf:22:f4:6f:26:c9:6b:a8:c2:2c:85:e3:74:0a:
                    ff:00:e0:f0:89:ce:47:53:b5:14:f5:b0:a1:19:8c:
                    d2:fa:74:7f:12:ce:fa:69:f4:2c:9a:df:e1:99:49:
                    a4:81:4b:ea:de:2f:f8:cd:e1:05:8c:f4:9d:5e:40:
                    44:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:76:E5:CD:1A:36:7F:01:DC:48:08:B3:68:46:F1:75:AB:CB:D3:21
            X509v3 Authority Key Identifier:
                keyid:55:DF:02:4D:85:E8:99:53:D7:4C:9B:EE:32:C9:E3:27:96:BC:FE:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/Vd8CTYXomVPXTJvuMsnjJ5a8_nM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         85:cd:b1:3d:ec:86:36:a9:57:d6:c8:ab:63:39:42:ec:83:18:
         65:0c:ab:59:b3:c0:40:05:d1:f9:e4:c4:a4:75:60:0f:c8:ba:
         23:82:6e:78:d3:db:72:f1:ce:d1:f0:90:6a:05:7a:d6:5c:0b:
         e2:4f:55:e0:1e:cf:48:80:1d:7c:d3:c7:e4:7f:1d:d1:01:2a:
         70:e8:a8:58:84:c3:9d:8b:39:84:8a:12:00:8e:ae:c2:ab:b0:
         15:99:b3:92:bc:aa:33:98:5e:b0:e9:d8:ed:ab:b1:d2:77:89:
         e7:56:dd:f9:60:97:b5:77:d0:ec:81:7f:cf:04:e0:d7:5e:11:
         9f:27:26:81:c5:50:8a:46:3f:79:72:1c:bc:43:70:e2:d9:60:
         5d:72:d1:c4:e6:a5:e3:cf:fc:e4:55:4b:bb:0b:4f:09:97:46:
         73:2b:ce:ad:65:6c:a9:d0:af:37:8c:0d:fb:ff:05:01:c7:f0:
         e2:48:06:ae:29:93:cd:78:a6:fb:26:4f:49:67:ce:0a:55:17:
         1e:64:39:9d:f2:e2:b4:8a:6f:22:74:26:f6:c9:81:3f:13:26:
         03:ba:6f:5b:53:7d:13:9f:35:5d:73:78:ff:a8:48:40:64:6d:
         be:08:5f:99:9d:4b:3f:1e:1e:26:78:ae:35:61:0c:f5:5b:59:
         69:b4:18:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:29 2026 by rpki-client