Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
File:                     VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft (raw, json)
Hash identifier:          YGmKYg6x2vswrxTE/S+Rr7dYGXrdAMMU9RPz7gcHi74=
Subject key identifier:   6A:37:41:5E:A1:D4:25:EE:FE:06:F3:82:5C:0E:B1:7C:85:23:B5:FC
Authority key identifier: 55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99
Certificate issuer:       /CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
Certificate serial:       019F90C77A32538D8AF287B70C8EFF99953A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
Manifest number:          08ED
Signing time:             Thu 23 Jul 2026 21:00:19 +0000
Manifest this update:     Thu 23 Jul 2026 21:00:19 +0000
Manifest next update:     Fri 24 Jul 2026 21:00:19 +0000
Files and hashes:         1: 0mKPMQWV_Qy-vh6NIOs-vGzzkcs.roa (hash: 40hzdqt6UbwBLVWM2lystwa7D/FQ/GMdaZDwu9K4ql4=)
                          2: BS20TmqftUiHcp-uC9dL2gI-BNc.roa (hash: pr6OCsI1Ad/tkV2rABLwG62aqjOA03sElNbNxIP4zvk=)
                          3: IHxGZu_O4SFl3mCd8QYX5eqd12E.roa (hash: 1i0b2nBfdKjb8NkkxZHECgejSLN+yW+3HQmhrGhzeOI=)
                          4: UMFicQc5pR1BZjbSliFsmn9hVsQ.roa (hash: J5/XGYpI2q8qdb/0SuhhGpJUPu+HCV/urhJXWQ6uRoM=)
                          5: VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl (hash: bDI2ayoYNUBF47tIt4dodKvXZ+M0XDpNNvNsfNTSnEI=)
                          6: h6L7Hu9h-WRsvEVUYJvrCBj7EO0.roa (hash: H7jR89trSYSnXKR1ihEqgmmJtnhfIxvnyG0FDPgKVnw=)
                          7: zX0vtOpCmeQpkB3rn-rz1jkd-r4.roa (hash: jPj9zmWBHzHIPP8lAD+ZNC+krJqdUU0kA46if5ji8Uk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:90:c7:7a:32:53:8d:8a:f2:87:b7:0c:8e:ff:99:95:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5524b2e26dd3afcc5c1eac01f90263d201fbe099
        Validity
            Not Before: Jul 23 21:00:19 2026 GMT
            Not After : Jul 24 21:00:19 2026 GMT
        Subject: CN=6a37415ea1d425eefe06f3825c0eb17c8523b5fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:24:4d:30:74:89:88:8b:b4:2d:a1:0d:9a:28:
                    d5:2a:12:d0:dd:81:3c:d1:ec:55:64:2d:b1:89:b8:
                    2c:bd:68:b5:62:1e:a2:6a:bb:d8:8c:22:6d:57:97:
                    1a:8b:67:31:37:d2:e5:bf:e5:91:70:b8:d6:85:75:
                    51:c8:27:ae:c0:a0:f6:51:4a:6c:83:4d:88:b0:f6:
                    2b:0a:ca:dd:03:50:74:05:56:27:2d:0a:87:29:7b:
                    c6:6b:90:3e:7c:23:a5:56:ca:27:5a:c8:d9:0d:d2:
                    54:79:a4:34:9f:28:c5:fb:54:6c:ca:08:8d:85:72:
                    69:c4:3b:1c:f6:7b:93:3c:c2:d0:eb:eb:6e:59:06:
                    0a:f8:bc:b5:51:b4:64:1a:6f:53:9f:9b:92:dd:6f:
                    38:90:89:e8:8e:af:c5:3d:fc:15:8c:87:1f:a4:e4:
                    b7:8e:24:2c:82:9c:95:42:41:1d:7b:c4:40:5e:36:
                    c4:b5:c8:49:e8:f8:30:11:88:10:bc:7d:64:1b:c1:
                    da:25:ef:6a:5d:1d:2f:fb:ff:84:ef:ce:aa:32:8c:
                    b5:33:c9:0c:c2:f8:1f:21:51:a9:2f:a5:3d:e5:0c:
                    4c:e3:74:e0:bc:df:00:31:f0:27:88:1b:c7:86:1c:
                    49:4e:f6:9f:cc:cf:76:e8:a4:85:97:cb:e5:3c:c9:
                    30:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:41:5E:A1:D4:25:EE:FE:06:F3:82:5C:0E:B1:7C:85:23:B5:FC
            X509v3 Authority Key Identifier:
                keyid:55:24:B2:E2:6D:D3:AF:CC:5C:1E:AC:01:F9:02:63:D2:01:FB:E0:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/143392-d868-4a26-8543-3aa2227badfe/1/VSSy4m3Tr8xcHqwB-QJj0gH74Jk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b4:94:78:75:b9:fc:13:b6:67:ac:74:74:bf:69:0e:61:a6:
         7c:68:1f:c3:2b:34:28:5e:1b:ab:e5:f6:80:2d:1e:ef:19:1e:
         cb:0f:ba:aa:6f:79:16:81:f0:d8:93:bd:4f:27:c1:19:96:2c:
         6e:fc:dd:46:44:72:4a:8b:75:8f:e7:81:90:50:3c:17:86:12:
         57:b6:98:5f:eb:63:ba:24:56:d1:1e:9c:54:4b:a5:47:ea:4c:
         fa:2a:30:8b:45:ab:1b:86:c0:40:27:67:c4:5d:8a:f9:bf:a0:
         ee:8d:99:d6:14:72:4d:61:b7:fb:75:0b:34:ca:32:65:35:a6:
         83:19:f8:ba:1a:1c:5d:0c:da:bc:15:d6:e9:ad:3e:51:75:e9:
         57:ec:84:2d:50:d1:9d:e5:c3:01:51:1a:3f:12:14:fc:1d:f7:
         c4:6d:8f:88:23:58:8f:f6:f2:56:34:df:a7:ed:3e:41:af:b4:
         f7:9d:ad:17:0b:38:e4:2c:34:51:e5:d9:27:b8:45:d0:7d:82:
         ca:a0:51:84:10:0c:4f:eb:50:87:b5:1c:40:5b:c7:83:d2:5d:
         9e:c7:90:7b:8d:35:f2:9a:62:04:e5:54:1b:c4:f0:cb:f1:f0:
         8b:75:97:e5:79:7a:3a:d2:6e:87:59:97:73:e8:f0:09:d8:89:
         0d:a9:08:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+Qx3oyU42K8oe3DI7/mZU6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MjRiMmUyNmRkM2FmY2M1YzFlYWMwMWY5MDI2M2QyMDFm
YmUwOTkwHhcNMjYwNzIzMjEwMDE5WhcNMjYwNzI0MjEwMDE5WjAzMTEwLwYDVQQD
Eyg2YTM3NDE1ZWExZDQyNWVlZmUwNmYzODI1YzBlYjE3Yzg1MjNiNWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArCRNMHSJiIu0LaENmijVKhLQ3YE8
0exVZC2xibgsvWi1Yh6iarvYjCJtV5cai2cxN9Llv+WRcLjWhXVRyCeuwKD2UUps
g02IsPYrCsrdA1B0BVYnLQqHKXvGa5A+fCOlVsonWsjZDdJUeaQ0nyjF+1RsygiN
hXJpxDsc9nuTPMLQ6+tuWQYK+Ly1UbRkGm9Tn5uS3W84kInojq/FPfwVjIcfpOS3
jiQsgpyVQkEde8RAXjbEtchJ6PgwEYgQvH1kG8HaJe9qXR0v+/+E786qMoy1M8kM
wvgfIVGpL6U95QxM43TgvN8AMfAniBvHhhxJTvafzM926KSFl8vlPMkw+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGo3QV6h1CXu/gbzglwOsXyFI7X8MB8GA1UdIwQY
MBaAFFUksuJt06/MXB6sAfkCY9IB++CZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMt
M2FhMjIyN2JhZGZlLzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS8xNDMzOTItZDg2OC00YTI2LTg1NDMtM2FhMjIyN2JhZGZl
LzEvVlNTeTRtM1RyOHhjSHF3Qi1RSmowZ0g3NEprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtLSUeHW5
/BO2Z6x0dL9pDmGmfGgfwys0KF4bq+X2gC0e7xkeyw+6qm95FoHw2JO9TyfBGZYs
bvzdRkRySot1j+eBkFA8F4YSV7aYX+tjuiRW0R6cVEulR+pM+iowi0WrG4bAQCdn
xF2K+b+g7o2Z1hRyTWG3+3ULNMoyZTWmgxn4uhocXQzavBXW6a0+UXXpV+yELVDR
neXDAVEaPxIU/B33xG2PiCNYj/byVjTfp+0+Qa+0952tFws45Cw0UeXZJ7hF0H2C
yqBRhBAMT+tQh7UcQFvHg9JdnseQe4018ppiBOVUG8Twy/Hwi3WX5Xl6OtJuh1mX
c+jwCdiJDakILA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 23:17:54 2026 by rpki-client