Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
File:                     VYR5uCKzUywZue4BAvmaiYUN8SQ.mft (raw, json)
Hash identifier:          6wfvrNKpQGLYMGYZ7vy2JHNhZ1vyBPHpEFMWjVlRugU=
Subject key identifier:   9F:8F:32:71:0F:B7:63:BD:AA:BD:7D:EF:17:0D:97:2B:7F:D8:64:17
Authority key identifier: 55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24
Certificate issuer:       /CN=558479b822b3532c19b9ee0102f99a89850df124
Certificate serial:       019F90C8159374A9B38926A4216CEC11B9CC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
Manifest number:          0649
Signing time:             Thu 23 Jul 2026 21:00:59 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:59 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:59 +0000
Files and hashes:         1: IpSnJJcRk0rVaIinr9MzfOMamE4.roa (hash: sJC1dVz6+49l7Xv9i824Gl0XhIuWekON6If1soCkGf8=)
                          2: VYR5uCKzUywZue4BAvmaiYUN8SQ.crl (hash: e/OdLBxAMeB07TIwYlMMsg2u1coMJPCjpOqmGXU1m7o=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 21:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c8:15:93:74:a9:b3:89:26:a4:21:6c:ec:11:b9:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=558479b822b3532c19b9ee0102f99a89850df124
        Validity
            Not Before: Jul 23 21:00:59 2026 GMT
            Not After : Jul 24 21:00:59 2026 GMT
        Subject: CN=9f8f32710fb763bdaabd7def170d972b7fd86417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:a8:cb:b7:c4:80:4a:5b:76:2d:60:d9:43:cc:
                    54:bb:2c:9f:c0:2d:ab:27:b3:a7:0f:28:83:dd:81:
                    64:e8:1b:22:86:37:56:fd:16:d1:57:7e:ba:25:e2:
                    01:73:0c:6a:ba:18:03:63:5f:80:61:27:19:93:92:
                    ee:69:15:43:e5:c2:9b:e7:2d:e7:90:10:6e:a2:bb:
                    11:e6:64:66:0f:cc:39:a2:45:64:43:65:80:5c:c4:
                    0b:de:08:da:b8:3f:1b:40:2d:94:2f:ae:46:b9:81:
                    d5:40:e9:29:26:ad:9c:6f:7d:33:5f:d9:bf:97:15:
                    1e:f6:44:b3:f5:9e:b1:18:95:85:a5:d4:c7:e3:15:
                    e7:d7:c3:75:9f:37:1e:45:cf:0d:61:2e:91:31:6d:
                    1d:74:f9:94:06:a1:81:c5:b5:d6:e6:9c:92:4d:44:
                    f7:6c:6e:93:13:b1:2d:36:40:44:f4:c4:56:ff:ca:
                    e1:2b:72:53:e2:46:cb:83:80:76:83:6c:9a:6c:3f:
                    d2:3b:70:75:02:60:c0:a6:af:89:7d:60:97:f4:08:
                    33:f7:1e:2b:26:8c:ca:01:15:ca:49:ff:76:c8:3d:
                    5e:a7:f4:d9:e4:fd:31:c5:4d:5f:9b:88:71:f1:f4:
                    46:dc:c9:e1:e5:10:8d:b2:85:43:62:1d:48:9a:7c:
                    b0:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8F:32:71:0F:B7:63:BD:AA:BD:7D:EF:17:0D:97:2B:7F:D8:64:17
            X509v3 Authority Key Identifier:
                keyid:55:84:79:B8:22:B3:53:2C:19:B9:EE:01:02:F9:9A:89:85:0D:F1:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VYR5uCKzUywZue4BAvmaiYUN8SQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/379625-71be-44fa-9d60-0b591f3a1bf0/1/VYR5uCKzUywZue4BAvmaiYUN8SQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:34:57:f8:f9:9d:6e:d0:ca:cb:06:7a:69:93:34:fc:25:1a:
         96:0b:75:af:f4:80:a8:d1:28:77:8b:2f:45:51:75:6d:34:f8:
         92:7f:fd:82:d9:90:65:6e:48:ff:fe:e1:b3:21:68:84:d6:d2:
         d5:15:05:08:4e:02:c9:6c:b4:13:04:17:cf:01:58:36:95:f0:
         8b:d1:e6:7e:8e:da:0b:e1:49:cd:07:d0:dd:93:53:ed:6e:bd:
         c7:c0:e6:4c:2b:29:87:21:6f:ef:f1:1d:80:c3:56:77:4e:71:
         7c:a3:8c:cc:38:14:bc:0b:be:e5:3c:3c:9e:e3:c4:95:6a:01:
         a8:85:dd:cb:a7:f6:07:8e:04:c0:1d:25:90:2f:01:46:95:3b:
         41:1c:07:d4:7c:f3:d4:84:b5:6d:b6:5d:39:dc:13:48:f8:12:
         0f:e1:f7:eb:28:0c:f0:26:82:62:bb:ac:7c:38:17:15:8b:fe:
         95:0e:07:28:c1:e8:ef:a1:dd:74:aa:be:eb:81:f8:cc:2f:c2:
         3a:76:c4:8f:6e:fc:0f:77:ee:44:45:a2:2b:a6:79:b8:92:62:
         e8:bf:9d:d3:a6:8c:40:39:cb:0a:c6:eb:12:62:16:3f:93:0d:
         c0:6f:a3:5d:5c:15:4e:06:d7:a2:7d:61:9f:92:ff:06:6f:0b:
         ae:30:3b:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:02:28 2026 by rpki-client