Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
File:                     VVzAtghVz-FakevLDuWExhcRb7c.mft (raw, json)
Hash identifier:          OqDV6VWUMT8OLihVvXD8J/tzOATpkZuuIrD0PsCoijY=
Subject key identifier:   CD:81:FD:7B:DC:E0:46:C3:BC:71:B6:0A:B0:B2:6E:4C:82:AB:62:5E
Authority key identifier: 55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7
Certificate issuer:       /CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
Certificate serial:       019F190C671C492777A43978DB09DF6301A7
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
Manifest number:          074E
Signing time:             Tue 30 Jun 2026 15:01:10 +0000
Manifest this update:     Tue 30 Jun 2026 15:01:10 +0000
Manifest next update:     Wed 01 Jul 2026 15:01:10 +0000
Files and hashes:         1: MK2noUVGla3OTUx2ogGw2XUu6Gs.roa (hash: veceQ15vq5ia7EiqoqV8aOxRd8PGbXJRsqwiJKSo+Tg=)
                          2: PkSRo3CWKUx4NQN2EIynL2VXNY8.roa (hash: 7UyCEKaWuR4pgq0/Sue24UhPGmnjwf7e/JUg7VpH6TM=)
                          3: VVzAtghVz-FakevLDuWExhcRb7c.crl (hash: bhbdtnU6GJM9dInLAHZcUdHzeIEl/zAXmdInTqSkT8M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 01 Jul 2026 14:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:19:0c:67:1c:49:27:77:a4:39:78:db:09:df:63:01:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555cc0b60855cfe15a91ebcb0ee584c617116fb7
        Validity
            Not Before: Jun 30 15:01:10 2026 GMT
            Not After : Jul  1 15:01:10 2026 GMT
        Subject: CN=cd81fd7bdce046c3bc71b60ab0b26e4c82ab625e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2f:cc:d3:bd:22:a4:c4:46:cb:d1:29:89:62:
                    23:45:e0:0e:52:a3:2c:8b:46:06:20:a3:c9:8f:b8:
                    77:f1:4c:8b:fd:7b:93:e1:4d:41:0d:3b:b5:82:04:
                    08:10:fd:6a:81:7b:cd:4d:90:2f:87:91:1b:30:00:
                    68:a6:92:ae:be:fe:56:b0:84:dd:40:aa:09:57:16:
                    39:77:99:33:bf:f8:2b:ad:21:04:11:8d:f1:4e:6c:
                    3d:8c:d3:db:23:46:47:4b:b5:58:b3:f1:ea:17:8c:
                    34:fe:4b:f6:11:79:de:22:5f:b6:81:58:57:a4:53:
                    d8:4e:03:64:61:e3:63:f3:63:d3:41:6e:45:21:89:
                    24:d3:03:c6:46:f1:a8:9f:ec:39:42:fc:81:a7:26:
                    a4:22:90:6a:1d:23:6e:6f:38:4d:9a:0d:16:bb:ed:
                    1b:e8:28:a4:c3:20:83:b3:ad:6f:56:10:e3:1a:65:
                    23:12:a6:0a:02:2b:73:fa:8a:1e:c2:dd:9b:9e:4e:
                    df:c6:b5:29:b2:d7:80:ba:cc:8e:f5:c4:e1:69:8a:
                    dc:9e:7e:41:06:7d:29:ef:47:f4:ff:86:1d:e0:6e:
                    0c:cf:56:81:28:08:87:51:df:8b:65:cc:16:5f:59:
                    36:6f:25:fa:bd:78:21:eb:bd:a3:3f:6d:c6:de:cf:
                    d8:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:81:FD:7B:DC:E0:46:C3:BC:71:B6:0A:B0:B2:6E:4C:82:AB:62:5E
            X509v3 Authority Key Identifier:
                keyid:55:5C:C0:B6:08:55:CF:E1:5A:91:EB:CB:0E:E5:84:C6:17:11:6F:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VVzAtghVz-FakevLDuWExhcRb7c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/5e9ad7-a5f4-4cb4-a319-2f352d64aac8/1/VVzAtghVz-FakevLDuWExhcRb7c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:eb:ce:d9:c0:df:2f:a9:d9:ad:35:cb:aa:cc:d2:28:0f:
         b8:3d:52:cd:b7:95:8f:ca:7a:5b:7c:dd:a5:a4:43:5a:b1:61:
         50:ae:b6:6b:ab:08:4f:f2:3a:61:04:a1:b0:04:12:13:62:e8:
         c4:10:40:eb:f9:57:21:20:a6:2e:d5:5f:37:e0:68:78:3b:9e:
         85:91:1d:90:db:9e:87:65:85:ed:41:a8:59:74:dc:74:f4:80:
         e6:a6:50:67:74:c3:c2:61:f0:4d:a0:1a:5c:0f:3d:13:46:ba:
         05:4a:24:b0:af:7c:fd:b4:2b:cb:c6:a3:a2:92:dd:25:3d:a1:
         81:8c:95:5d:ea:c7:87:cb:65:65:6f:ed:08:3c:75:45:46:fb:
         92:11:71:94:0f:5c:e7:d4:10:5e:b7:dd:31:e6:7b:d8:4c:94:
         dc:f7:68:d4:ed:53:ed:e9:ea:66:1a:b5:f2:b2:5b:80:8f:5e:
         b6:ef:04:8a:4a:3e:96:ed:2d:a3:50:68:1d:09:7a:af:2d:8a:
         75:f7:c3:57:32:cf:6e:4e:e5:aa:d8:63:96:81:76:ae:ea:bf:
         73:20:bf:e6:43:4f:fa:94:b7:03:f0:ed:55:db:9e:1d:98:8b:
         89:3f:38:fa:97:11:c3:1e:b4:fc:2c:72:bf:06:78:3c:c4:ff:
         54:3c:92:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8ZDGccSSd3pDl42wnfYwGnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWNjMGI2MDg1NWNmZTE1YTkxZWJjYjBlZTU4NGM2MTcx
MTZmYjcwHhcNMjYwNjMwMTUwMTEwWhcNMjYwNzAxMTUwMTEwWjAzMTEwLwYDVQQD
EyhjZDgxZmQ3YmRjZTA0NmMzYmM3MWI2MGFiMGIyNmU0YzgyYWI2MjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhi/M070ipMRGy9EpiWIjReAOUqMs
i0YGIKPJj7h38UyL/XuT4U1BDTu1ggQIEP1qgXvNTZAvh5EbMABoppKuvv5WsITd
QKoJVxY5d5kzv/grrSEEEY3xTmw9jNPbI0ZHS7VYs/HqF4w0/kv2EXneIl+2gVhX
pFPYTgNkYeNj82PTQW5FIYkk0wPGRvGon+w5QvyBpyakIpBqHSNubzhNmg0Wu+0b
6CikwyCDs61vVhDjGmUjEqYKAitz+ooewt2bnk7fxrUpsteAusyO9cThaYrcnn5B
Bn0p70f0/4Yd4G4Mz1aBKAiHUd+LZcwWX1k2byX6vXgh672jP23G3s/Y5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2B/Xvc4EbDvHG2CrCybkyCq2JeMB8GA1UdIwQY
MBaAFFVcwLYIVc/hWpHryw7lhMYXEW+3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTkt
MmYzNTJkNjRhYWM4LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYi81ZTlhZDctYTVmNC00Y2I0LWEzMTktMmYzNTJkNjRhYWM4
LzEvVlZ6QXRnaFZ6LUZha2V2TER1V0V4aGNSYjdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGL/rztnA
3y+p2a01y6rM0igPuD1SzbeVj8p6W3zdpaRDWrFhUK62a6sIT/I6YQShsAQSE2Lo
xBBA6/lXISCmLtVfN+BoeDuehZEdkNueh2WF7UGoWXTcdPSA5qZQZ3TDwmHwTaAa
XA89E0a6BUoksK98/bQry8ajopLdJT2hgYyVXerHh8tlZW/tCDx1RUb7khFxlA9c
59QQXrfdMeZ72EyU3Pdo1O1T7enqZhq18rJbgI9etu8Eiko+lu0to1BoHQl6ry2K
dffDVzLPbk7lqthjloF2ruq/cyC/5kNP+pS3A/DtVdueHZiLiT84+pcRwx60/Cxy
vwZ4PMT/VDyS0g==
-----END CERTIFICATE-----
Generated at Tue Jun 30 22:40:22 2026 by rpki-client