Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
File:                     vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft (raw, json)
Hash identifier:          bNfADQ7oexIeOE82tF9k7jPelqMrvMhngfHdDL9cJzc=
Subject key identifier:   FC:DE:C0:41:13:B6:42:11:76:38:8A:4D:4F:96:F1:5D:B3:8D:46:70
Authority key identifier: BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E
Certificate issuer:       /CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
Certificate serial:       019FA1F24FB8D146D6850E3A06C2A6AE1773
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
Manifest number:          1961
Signing time:             Mon 27 Jul 2026 05:00:39 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:39 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:39 +0000
Files and hashes:         1: _qrU1bCSPRoOOveg6cKRbdBRuMk.roa (hash: EuanKU6jP53XoKKJyuThtthL9JW99aO6nJOSR8TpqPE=)
                          2: vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl (hash: LqPcPIiFn6K5x3T+erEHGALIsZjW4lQDENkSdBOHp+M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:4f:b8:d1:46:d6:85:0e:3a:06:c2:a6:ae:17:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc184d30d1fd2fde50bea6f70fe2dbe20518a03e
        Validity
            Not Before: Jul 27 05:00:39 2026 GMT
            Not After : Jul 28 05:00:39 2026 GMT
        Subject: CN=fcdec04113b6421176388a4d4f96f15db38d4670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2d:b5:4b:db:88:4d:df:50:06:3e:a1:a6:f3:
                    77:e6:e1:85:e9:03:59:c3:13:63:5c:fe:12:e2:a6:
                    8c:7a:fd:c5:ec:a0:61:4c:3b:9c:b7:cd:4c:ce:0c:
                    17:d5:12:de:f1:60:26:f4:85:9f:73:d3:c3:6b:b1:
                    38:be:20:1a:ec:13:60:e5:7d:e8:eb:6b:b2:50:a1:
                    90:33:08:51:61:55:51:66:f0:f9:14:ab:5f:14:3a:
                    5b:d8:bc:db:e2:9c:98:df:3f:47:b2:b4:d1:27:a2:
                    fd:fb:a1:2e:87:89:e0:33:ad:ce:d2:f5:ab:79:b1:
                    6e:57:ab:a9:c9:2f:b1:d9:58:47:f3:9c:5f:1d:68:
                    30:e9:71:3e:27:75:ed:80:1b:d0:99:e0:0d:e9:96:
                    39:9c:3e:d4:29:c5:f6:e7:17:21:45:6f:8e:a1:14:
                    2e:35:e9:e3:24:ff:6e:46:96:cd:9d:82:8c:29:e9:
                    7f:10:8b:cd:57:cc:e1:79:41:90:93:6b:7f:4c:98:
                    a1:b9:22:fe:70:41:42:71:88:1f:00:06:bf:e0:54:
                    7f:ea:d9:92:5e:1d:3e:1b:62:e1:1c:ae:d2:71:e4:
                    ed:26:c0:76:55:b6:29:b7:2f:f9:53:9c:4f:1b:5a:
                    53:d7:0f:7d:51:63:db:2c:13:85:61:5e:c6:2f:21:
                    0c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:DE:C0:41:13:B6:42:11:76:38:8A:4D:4F:96:F1:5D:B3:8D:46:70
            X509v3 Authority Key Identifier:
                keyid:BC:18:4D:30:D1:FD:2F:DE:50:BE:A6:F7:0F:E2:DB:E2:05:18:A0:3E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/00/8cc47f-0265-407c-ba45-05d7bd4a741d/1/vBhNMNH9L95Qvqb3D-Lb4gUYoD4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:a0:51:b1:e4:9f:d3:c9:b1:b3:35:dc:53:d0:8e:46:6b:35:
         29:4e:82:94:87:ea:ce:f4:a9:7a:14:f7:43:7f:61:35:af:d1:
         87:d2:45:9a:16:43:34:f4:eb:56:d6:b3:5d:d4:e2:4a:c6:61:
         24:71:e1:9f:2c:43:e0:f9:ed:19:0f:9e:ae:b9:89:42:0c:3f:
         0d:9c:b6:c8:31:ac:c3:c1:de:e5:4c:a5:c6:a6:5b:e0:b6:ad:
         00:ae:8b:00:c0:79:2f:6e:6f:d3:b1:d9:2d:17:4d:00:85:ca:
         00:00:27:cf:cc:98:3a:7e:e7:0f:19:3b:24:b6:fb:90:f2:f6:
         ee:d1:94:74:e0:e7:2d:6b:05:41:ed:76:06:9d:40:86:35:89:
         1f:b6:88:90:94:db:a5:dd:66:8e:c8:e1:68:30:9f:e8:d6:a7:
         8f:ea:c9:db:1e:ce:5e:b7:9e:88:1b:51:a7:8b:60:02:d9:ed:
         a6:1f:c6:45:48:df:0a:8f:7e:4e:74:81:7a:be:b0:8c:40:ab:
         d0:8f:56:78:64:2e:aa:41:33:3a:38:ec:97:32:b2:f5:93:41:
         a8:02:f3:cb:47:5f:f7:34:cc:7f:9b:f4:32:d0:17:bf:4d:b2:
         ec:13:9f:06:48:15:2c:b4:89:d7:a1:70:d1:e1:e7:92:9c:5d:
         5a:83:27:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:08:20 2026 by rpki-client