Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          qTvgIlBWU0VGaW1eMjMcgE0BcOWRTyX1XrMWjfEZr00=
Subject key identifier:   5C:B9:9E:3A:20:F3:C9:A6:70:82:A2:8F:E0:09:2A:3D:41:F5:62:7F
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       019F8F46FE43A395795AA8539E2B17B444F3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          0430
Signing time:             Thu 23 Jul 2026 14:00:22 +0000
Manifest this update:     Thu 23 Jul 2026 14:00:22 +0000
Manifest next update:     Fri 24 Jul 2026 14:00:22 +0000
Files and hashes:         1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
                          2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: 84M/jrOU62idljQTrCl08JkeZtAKl8Ea0gHH5cuyisk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:46:fe:43:a3:95:79:5a:a8:53:9e:2b:17:b4:44:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Jul 23 14:00:22 2026 GMT
            Not After : Jul 24 14:00:22 2026 GMT
        Subject: CN=5cb99e3a20f3c9a67082a28fe0092a3d41f5627f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3a:96:ac:ed:1e:ef:4f:1d:0c:b9:f4:e1:e5:
                    27:d3:6b:26:0a:80:1e:33:a0:34:93:cb:52:36:06:
                    4c:b0:5a:0f:11:a4:da:50:ef:02:8e:72:c9:70:69:
                    f9:ec:44:d3:9e:70:ae:8f:5a:ad:69:65:41:e5:be:
                    e2:76:ad:93:a8:b6:98:2b:0e:98:4f:b7:d0:bc:c4:
                    31:8f:d2:1f:81:a5:a7:77:15:09:80:ec:41:8a:8a:
                    54:ff:fb:42:d1:7a:ed:2f:8a:a8:d6:a2:8a:65:b2:
                    86:6d:22:42:d5:8b:d2:3d:17:8b:c5:18:f2:3b:fc:
                    8e:f6:56:36:18:f1:15:e9:47:d6:81:40:d7:55:d7:
                    02:d4:3c:59:74:24:1d:0f:e4:b1:50:77:c8:9a:27:
                    2d:b1:97:24:a9:1d:b1:fa:65:9e:63:72:e7:dd:ba:
                    94:3a:45:b0:15:b7:11:e0:e7:fa:04:3e:67:d1:b3:
                    50:f9:89:17:ac:3c:23:89:b9:7c:7d:3a:3e:a8:8a:
                    bb:0c:69:fd:a1:62:00:5e:9a:17:fb:fe:59:3f:8b:
                    15:c6:cb:54:b4:d1:ef:11:ed:86:a1:b2:c0:1a:bc:
                    a9:a7:86:83:04:72:08:b9:7c:2e:f0:35:ae:22:59:
                    c4:fd:a3:48:bd:38:de:cb:09:54:e5:0a:30:97:6d:
                    cc:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B9:9E:3A:20:F3:C9:A6:70:82:A2:8F:E0:09:2A:3D:41:F5:62:7F
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:b0:88:85:b3:45:76:2e:44:4b:82:50:b4:8a:93:de:fa:05:
         08:5c:81:9a:9d:c9:3c:c4:c0:87:8e:de:c1:b6:51:9e:d6:61:
         0c:ff:41:f8:c3:c1:6f:34:48:f3:93:cd:06:cb:23:1d:ab:8f:
         ee:6c:ff:5f:e2:59:b0:0a:ed:0f:88:c2:0a:d1:97:24:bb:f0:
         b0:b7:98:87:f1:36:62:c7:23:86:ea:8a:7f:af:9c:e2:8a:05:
         4a:e1:a2:77:c6:35:41:99:f3:9a:97:ff:b3:57:f7:7b:20:d1:
         5d:ab:88:cf:3c:e5:d1:fd:f0:20:04:51:7d:d7:e9:d6:7a:76:
         11:a6:71:27:c7:8b:48:69:88:9c:a5:e0:eb:f3:11:4e:21:cd:
         aa:24:22:30:20:e4:00:9a:75:74:ac:58:1c:0c:cb:60:ec:7a:
         e6:70:fa:f7:d4:4e:bc:06:e9:56:af:54:c6:f7:bd:2f:52:16:
         38:c1:ef:e3:17:39:00:83:d6:97:fe:53:d2:7f:e4:ff:20:f1:
         4f:12:8c:37:5c:3c:4f:bf:b7:3f:3e:77:09:53:c4:50:65:90:
         b9:4d:67:6b:3a:cb:84:04:4b:b6:ad:a2:ae:8d:2f:0c:36:14:
         88:e5:be:62:c1:17:d6:63:19:27:c3:0e:45:9a:0d:b0:48:e1:
         59:70:63:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+PRv5Do5V5WqhTnisXtETzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NjgyOGQ2MmE1Yjg5M2UyMmQ1ODY3ZjFhMTQyZDE5OGU4
NWUxYWIwHhcNMjYwNzIzMTQwMDIyWhcNMjYwNzI0MTQwMDIyWjAzMTEwLwYDVQQD
Eyg1Y2I5OWUzYTIwZjNjOWE2NzA4MmEyOGZlMDA5MmEzZDQxZjU2MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAujqWrO0e708dDLn04eUn02smCoAe
M6A0k8tSNgZMsFoPEaTaUO8CjnLJcGn57ETTnnCuj1qtaWVB5b7idq2TqLaYKw6Y
T7fQvMQxj9IfgaWndxUJgOxBiopU//tC0XrtL4qo1qKKZbKGbSJC1YvSPReLxRjy
O/yO9lY2GPEV6UfWgUDXVdcC1DxZdCQdD+SxUHfImictsZckqR2x+mWeY3Ln3bqU
OkWwFbcR4Of6BD5n0bNQ+YkXrDwjibl8fTo+qIq7DGn9oWIAXpoX+/5ZP4sVxstU
tNHvEe2GobLAGrypp4aDBHIIuXwu8DWuIlnE/aNIvTjeywlU5Qowl23M6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFy5njog88mmcIKij+AJKj1B9WJ/MB8GA1UdIwQY
MBaAFFVoKNYqW4k+ItWGfxoULRmOheGrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUt
M2Q3NDM5ODBiNmUyLzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNS82M2I4NzUtMDY0My00NzI0LTkyOGUtM2Q3NDM5ODBiNmUy
LzEvVldnbzFpcGJpVDRpMVlaX0doUXRHWTZGNGFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjLCIhbNF
di5ES4JQtIqT3voFCFyBmp3JPMTAh47ewbZRntZhDP9B+MPBbzRI85PNBssjHauP
7mz/X+JZsArtD4jCCtGXJLvwsLeYh/E2YscjhuqKf6+c4ooFSuGid8Y1QZnzmpf/
s1f3eyDRXauIzzzl0f3wIARRfdfp1np2EaZxJ8eLSGmInKXg6/MRTiHNqiQiMCDk
AJp1dKxYHAzLYOx65nD699ROvAbpVq9Uxve9L1IWOMHv4xc5AIPWl/5T0n/k/yDx
TxKMN1w8T7+3Pz53CVPEUGWQuU1nazrLhARLtq2iro0vDDYUiOW+YsEX1mMZJ8MO
RZoNsEjhWXBjUg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 21:51:59 2026 by rpki-client