Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
File:                     viphXepqVOryff6ZwH483I13X74.mft (raw, json)
Hash identifier:          v1sS17ojizEemvRcDUhQ68+FVI1+g1FwXewOgvx13ms=
Subject key identifier:   22:BB:54:4D:8A:75:D8:B1:8B:2E:BA:D2:06:00:C1:38:06:45:A3:85
Authority key identifier: BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE
Certificate issuer:       /CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
Certificate serial:       019F84C3551FCCEA4829A50F22E5E8148859
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
Manifest number:          050B
Signing time:             Tue 21 Jul 2026 13:00:21 +0000
Manifest this update:     Tue 21 Jul 2026 13:00:21 +0000
Manifest next update:     Wed 22 Jul 2026 13:00:21 +0000
Files and hashes:         1: lTdGRDnrt9WeZntnZqlzp_ouBUk.roa (hash: 7Ld1N10vzsnooyAXDhjI5cFlj26fJBqTU53xQhD+MQU=)
                          2: viphXepqVOryff6ZwH483I13X74.crl (hash: brINCYQkybpPZM9nP13npE1nPcVV/USgHCmR/SLvCvE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 13:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:84:c3:55:1f:cc:ea:48:29:a5:0f:22:e5:e8:14:88:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be2a615dea6a54eaf27dfe99c07e3cdc8d775fbe
        Validity
            Not Before: Jul 21 13:00:21 2026 GMT
            Not After : Jul 22 13:00:21 2026 GMT
        Subject: CN=22bb544d8a75d8b18b2ebad20600c1380645a385
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:53:58:64:81:db:fc:0f:8f:1c:51:c8:c2:
                    9d:4c:12:e1:37:56:f2:5c:2e:0d:b0:f2:c9:ff:c0:
                    4f:71:13:da:9b:9f:3d:5a:c3:14:5a:e7:93:c8:d5:
                    45:9f:1e:a2:09:43:60:c6:02:49:de:17:db:95:0b:
                    3f:b1:54:a3:88:76:16:65:cb:9f:71:04:7b:6d:a5:
                    04:6d:d1:da:28:d2:47:29:80:54:dc:59:55:81:48:
                    d3:9b:e8:61:b2:34:74:a1:2f:21:20:1b:7f:ed:fa:
                    b4:3b:df:19:c5:9a:c5:54:a2:fc:b7:70:73:c9:45:
                    76:a3:82:92:cf:55:f4:a1:18:4a:2e:82:28:18:f7:
                    21:4d:47:3c:83:1b:df:e5:22:c6:9c:ab:54:ba:22:
                    e2:68:ca:0f:cf:0b:6b:18:d3:8c:25:6e:af:65:44:
                    7e:ce:10:cd:44:d8:43:08:94:ff:6b:fb:39:5d:31:
                    69:40:1f:fe:97:f8:97:06:88:d5:10:47:89:ae:d5:
                    52:e5:5b:00:e6:4e:64:73:0f:43:d3:8b:92:6b:8b:
                    c5:af:77:4c:7b:9a:5a:60:46:86:9a:f1:5e:2f:43:
                    ad:b0:e9:98:71:e4:f2:53:15:26:74:67:14:a6:9f:
                    8e:91:10:8c:be:bb:38:be:19:e2:c5:0b:96:70:5a:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BB:54:4D:8A:75:D8:B1:8B:2E:BA:D2:06:00:C1:38:06:45:A3:85
            X509v3 Authority Key Identifier:
                keyid:BE:2A:61:5D:EA:6A:54:EA:F2:7D:FE:99:C0:7E:3C:DC:8D:77:5F:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/viphXepqVOryff6ZwH483I13X74.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/3ba1e6-1fe2-49fa-b36e-fe5ab8111bf0/1/viphXepqVOryff6ZwH483I13X74.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:00:27:ca:b8:31:b8:47:e4:ce:68:23:8c:9f:bf:21:d9:bb:
         eb:b1:5b:fc:20:f9:a0:66:34:4e:df:dd:40:12:3b:16:14:f8:
         7f:79:ab:08:16:89:47:37:de:07:a6:c7:73:b8:ea:dc:36:ff:
         d7:f2:0a:28:d3:a5:94:70:22:73:ce:c8:ae:90:13:55:75:f5:
         1a:56:a1:49:55:ff:53:ae:58:4d:6e:45:fb:6f:f3:37:b1:1b:
         26:bb:78:cc:e3:fb:a5:58:a2:cd:79:c2:bb:15:7b:44:22:e9:
         eb:89:45:1e:15:2c:a1:b1:e2:04:ff:ed:60:f1:6a:65:5c:8e:
         dd:96:5e:4c:2a:fd:49:1c:41:cb:4c:b6:86:01:06:e9:da:ef:
         2f:69:1b:9e:2d:06:f6:7e:9b:dd:49:38:2d:59:11:12:0d:91:
         38:06:e5:35:6a:90:df:d0:62:c5:93:ec:3b:b0:82:74:68:67:
         2e:5d:e8:d9:c5:d3:72:7f:1d:87:04:75:32:b3:40:81:96:f4:
         a6:02:16:dc:7c:14:ed:34:0d:76:0c:28:82:43:58:31:46:ed:
         dd:75:1d:a6:60:2a:c4:4f:bb:b4:9a:fa:25:5f:d2:b9:90:77:
         03:57:22:f1:3e:58:77:5d:a0:a6:81:63:a6:f5:81:bf:87:ed:
         6b:f5:51:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 15:52:32 2026 by rpki-client