Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
File:                     VzoAKcURHfnMLPUxgnfwEbwpEKk.mft (raw, json)
Hash identifier:          Nenzs8f6XPZUN/aQBxckLoY5M+xxnKp6cbwN69gdNE4=
Subject key identifier:   00:E7:D8:2E:88:B5:81:8B:5B:67:EF:B9:EA:39:28:43:3F:F2:52:C3
Authority key identifier: 57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9
Certificate issuer:       /CN=573a0029c5111df9cc2cf5318277f011bc2910a9
Certificate serial:       019FA2CED0C762B494CFEE11B5AD8733C802
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
Manifest number:          49
Signing time:             Mon 27 Jul 2026 09:01:30 +0000
Manifest this update:     Mon 27 Jul 2026 09:01:30 +0000
Manifest next update:     Tue 28 Jul 2026 09:01:30 +0000
Files and hashes:         1: Hw6fDQFRFN_Ls3115aFzf0vRck8.asa (hash: OsI8RtgpTzCj0b88FzzXfilbNxRb3Sb0tKlLzKAD5M8=)
                          2: VzoAKcURHfnMLPUxgnfwEbwpEKk.crl (hash: PEvATUue1xcLedWdsiVGueSj8ofU911K5FMYiUKLy40=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 09:01:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a2:ce:d0:c7:62:b4:94:cf:ee:11:b5:ad:87:33:c8:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=573a0029c5111df9cc2cf5318277f011bc2910a9
        Validity
            Not Before: Jul 27 09:01:30 2026 GMT
            Not After : Jul 28 09:01:30 2026 GMT
        Subject: CN=00e7d82e88b5818b5b67efb9ea3928433ff252c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:a1:db:18:48:e8:08:b1:5a:a6:7c:d5:db:
                    91:46:41:34:f3:8b:0c:80:9c:d1:ec:b7:83:26:61:
                    fc:2e:96:07:2a:4e:9b:a5:0d:2f:b3:a4:e0:6d:10:
                    ce:3a:8d:27:46:af:05:55:14:9d:43:ff:80:72:8b:
                    3d:c2:de:31:7d:47:ed:2d:d5:ae:c3:66:f8:53:34:
                    6a:f1:38:7a:76:49:eb:62:bf:ce:42:7f:a5:e6:67:
                    3a:6f:2c:8b:c9:c1:63:e8:0c:f0:b9:11:da:31:f5:
                    29:56:4b:b1:84:bb:8b:81:d2:03:28:a3:aa:bc:18:
                    1d:18:ea:f7:72:1f:51:1e:75:23:37:68:6f:bc:74:
                    c6:f6:de:9d:61:18:67:d8:2c:bd:3d:f6:90:7e:d4:
                    08:97:b6:98:5b:21:10:82:c3:21:24:a8:e6:c9:c9:
                    19:29:fe:6e:4b:f5:df:48:48:37:b4:f2:d5:e6:d4:
                    3a:51:46:77:00:f5:4a:43:8b:3f:76:c3:98:ed:3a:
                    c9:41:58:fc:75:9e:77:87:bb:4b:41:27:b5:3d:08:
                    df:93:20:38:cc:2b:81:34:fa:e1:17:56:c2:00:b7:
                    db:57:eb:60:c9:21:68:50:2d:02:86:cc:61:87:4a:
                    2b:e0:4d:cf:db:1a:c8:8d:1c:51:9e:f1:b0:bc:c3:
                    8b:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E7:D8:2E:88:B5:81:8B:5B:67:EF:B9:EA:39:28:43:3F:F2:52:C3
            X509v3 Authority Key Identifier:
                keyid:57:3A:00:29:C5:11:1D:F9:CC:2C:F5:31:82:77:F0:11:BC:29:10:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VzoAKcURHfnMLPUxgnfwEbwpEKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/06/9a98ac-fceb-43cb-ae18-209cf366b357/1/VzoAKcURHfnMLPUxgnfwEbwpEKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:bb:6a:42:75:25:5f:df:98:3d:02:c6:0f:84:da:cc:d5:
         c4:0f:5e:30:15:60:8e:90:83:b6:c8:7b:4a:f8:7b:ca:53:9a:
         ac:24:99:7b:e1:aa:05:2f:a7:be:d6:03:b5:fe:12:30:f0:63:
         69:72:b7:fc:d1:1b:d2:2a:cf:99:be:d6:02:c0:04:eb:12:be:
         64:ce:29:74:ad:56:ed:87:b6:f4:a7:25:69:f7:d9:b7:d3:55:
         76:36:57:87:fa:ac:c6:12:49:c9:c7:60:9f:f9:85:8d:3a:b5:
         5a:d5:91:7a:5f:42:8b:70:9e:91:dd:9e:df:f8:3c:0a:6f:28:
         67:3d:3a:1f:52:77:c9:5e:85:83:73:92:11:86:32:76:0d:5e:
         4a:a9:e0:b3:91:e7:b8:e6:f9:27:2d:2e:6e:84:ea:37:e1:4e:
         57:25:7c:fb:1e:2a:f3:5a:36:f7:ab:6b:60:c4:98:01:06:6f:
         b8:38:ba:e7:82:f0:b1:37:2b:39:8a:a8:c5:2a:7c:0a:4f:69:
         0a:8c:3e:48:50:0e:c4:cf:0a:68:a4:d2:36:fd:87:e5:ff:f5:
         79:8e:e9:21:24:d2:0f:b1:75:95:dc:fb:cd:13:53:74:26:08:
         15:7a:48:ff:87:60:d6:5e:c4:3d:3c:ca:d4:13:16:9e:70:21:
         f0:e5:73:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:31:16 2026 by rpki-client