Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
File:                     VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft (raw, json)
Hash identifier:          Hr+VxGZtfU251ED55YhhaBXDukemT0p9ova9GvK7suo=
Subject key identifier:   16:FB:CD:A2:0B:70:2A:EE:89:92:68:B9:DA:FA:41:03:98:BA:90:BD
Authority key identifier: 55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB
Certificate issuer:       /CN=556828d62a5b893e22d5867f1a142d198e85e1ab
Certificate serial:       019F859F760313C5A75EFB93D7FC851C0396
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
Manifest number:          042B
Signing time:             Tue 21 Jul 2026 17:00:47 +0000
Manifest this update:     Tue 21 Jul 2026 17:00:47 +0000
Manifest next update:     Wed 22 Jul 2026 17:00:47 +0000
Files and hashes:         1: MdhTY8foQJKx0mdlP05igAT5a9E.roa (hash: 1qZJayac2vfyAfUyRCRfqXyKoeJ0mRVVfL/eLJWxk1s=)
                          2: VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl (hash: AMNS7A3S4tlQEUcWwzRouY/3s6crl+HPQk+y04hY1XA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:85:9f:76:03:13:c5:a7:5e:fb:93:d7:fc:85:1c:03:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=556828d62a5b893e22d5867f1a142d198e85e1ab
        Validity
            Not Before: Jul 21 17:00:47 2026 GMT
            Not After : Jul 22 17:00:47 2026 GMT
        Subject: CN=16fbcda20b702aee899268b9dafa410398ba90bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:92:f6:88:19:bf:3b:cb:16:88:d4:f1:9a:1f:
                    46:ad:85:9f:fa:a8:00:38:92:ed:80:9c:11:af:a9:
                    aa:01:bb:0b:7e:7c:ba:5b:12:01:17:f1:7c:17:e1:
                    c6:f7:a8:41:a8:b5:70:5d:65:08:8f:d2:0b:21:d0:
                    a1:48:7e:29:59:32:9c:f9:02:c6:3b:bc:c6:78:ed:
                    04:42:7f:7f:a5:a0:a7:1f:bd:5f:41:10:e1:c2:db:
                    73:b5:24:ab:78:26:fd:ed:79:66:92:8c:b7:bf:a4:
                    0d:ba:e9:5e:a6:31:23:af:a0:ba:0a:95:6e:b8:da:
                    d7:42:c3:47:5e:ae:81:1a:7d:b5:e5:a0:af:61:70:
                    de:d5:b3:8e:58:31:f7:b2:cd:86:4a:ee:d6:27:03:
                    a5:28:53:37:37:a6:fc:5d:3c:b3:3c:c1:5a:e2:46:
                    1a:8b:ff:4f:ce:9f:50:75:0a:ff:dd:2c:31:28:a3:
                    cd:7d:6b:da:eb:0d:9b:2b:77:9a:fe:a2:27:5d:be:
                    26:a6:f8:c9:37:8a:5a:0f:ce:3b:c4:88:e3:80:50:
                    5f:b1:19:d8:b8:62:ac:c4:c6:b7:54:ad:f6:4f:b7:
                    ab:a7:7c:38:f0:1f:ed:53:0c:ba:86:7f:f3:95:6c:
                    8f:b7:dc:4d:5d:3b:1c:8c:f3:58:23:1f:7f:d1:6d:
                    b5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:FB:CD:A2:0B:70:2A:EE:89:92:68:B9:DA:FA:41:03:98:BA:90:BD
            X509v3 Authority Key Identifier:
                keyid:55:68:28:D6:2A:5B:89:3E:22:D5:86:7F:1A:14:2D:19:8E:85:E1:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWgo1ipbiT4i1YZ_GhQtGY6F4as.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/63b875-0643-4724-928e-3d743980b6e2/1/VWgo1ipbiT4i1YZ_GhQtGY6F4as.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:75:81:83:d1:19:d6:51:0e:5e:35:ec:4e:a1:76:57:d1:41:
         0c:e3:ab:da:56:00:c9:f6:82:7b:46:09:a8:25:83:6d:b2:21:
         cf:f7:d5:ad:fb:6d:60:cc:1f:59:de:6d:e9:5b:78:dc:ae:86:
         75:d8:56:d3:05:bc:fe:43:d2:f5:fa:01:57:ed:03:cb:e8:99:
         11:56:6a:88:fc:6c:b5:3d:0a:0b:1f:71:b5:9c:d2:27:8a:cf:
         97:01:48:a9:d9:24:87:54:90:1a:0f:23:38:8b:57:a6:eb:b6:
         a1:c7:97:e2:e8:27:0b:37:53:7c:52:7b:55:61:3a:be:1c:78:
         f5:d7:b7:76:c8:ec:39:e9:d2:67:9b:7c:a3:d4:5e:b8:7f:a4:
         a1:66:b9:70:02:90:13:ca:0f:e0:31:c1:f2:f6:3f:60:33:f0:
         64:10:bf:92:fe:97:bd:3f:49:a9:66:ec:c9:1c:e6:5b:2d:c9:
         d0:d8:06:a0:8a:5a:37:8d:9c:1a:3d:08:5a:2e:22:f4:7f:4d:
         4d:78:c4:6c:80:f5:75:d8:30:0f:5b:e1:b6:a8:13:e9:fc:9e:
         54:b6:cf:65:4d:ac:e5:da:f0:91:17:40:0e:fe:32:9d:f5:66:
         df:0a:09:ae:54:07:af:26:f5:32:0d:c3:31:73:f0:3f:a0:bf:
         4c:bc:08:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:02:19 2026 by rpki-client