Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File:                     vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier:          nGckfUaoL+d5+CYxJ1nKdlUTUzygSOCCHLYBoTniLx4=
Subject key identifier:   78:9B:2B:98:24:43:FE:06:2F:97:2C:18:E7:E5:D3:0A:8D:D6:DA:61
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer:       /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial:       019F860D903B19E40E5238391692FAF4F816
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number:          19C9
Signing time:             Tue 21 Jul 2026 19:01:03 +0000
Manifest this update:     Tue 21 Jul 2026 19:01:03 +0000
Manifest next update:     Wed 22 Jul 2026 19:01:03 +0000
Files and hashes:         1: WkGPkEWxN0_RrfuPNQgO0N4MQhs.roa (hash: 5wVXqrPSrqKVdR+urmJOtFFrRQbB86e2gIJHUQXpeMs=)
                          2: ZpN0yijt2wpkL7emNcxN7NHQv5U.roa (hash: 7AKRTkBuGx4aBG5hgRCQdpg0LTN298O1FTG+c5mwI1w=)
                          3: cWZaLUMWOmPgq02bbhCxvURTndw.roa (hash: IUClisGJXyKB6S1qDFcis+t1z82FqIpdlgwLkdscpmo=)
                          4: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: WGQ182oziGIu+NIKtSOZLZAGbYfxp7SnL2I1fCLHVfw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 22 Jul 2026 14:18:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:86:0d:90:3b:19:e4:0e:52:38:39:16:92:fa:f4:f8:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
        Validity
            Not Before: Jul 21 19:01:03 2026 GMT
            Not After : Jul 22 19:01:03 2026 GMT
        Subject: CN=789b2b982443fe062f972c18e7e5d30a8dd6da61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b5:ed:4a:e6:1e:64:03:91:3f:d2:fb:95:fc:
                    9d:25:b5:be:1d:d2:6b:41:ad:dc:8e:a2:cf:eb:6e:
                    1a:d3:f0:6c:bf:4c:e4:ed:f3:61:e1:0f:48:50:3c:
                    c3:b3:8d:09:e2:2c:b4:1e:c8:4b:03:f7:df:72:81:
                    80:79:f4:cc:50:fa:1f:ef:64:01:35:d0:59:56:4c:
                    b8:af:55:a4:26:21:46:95:6f:8a:a3:33:0a:a5:a5:
                    2a:cd:8b:15:9e:9f:d0:a0:19:a5:c6:7c:6a:99:b9:
                    ac:08:e1:c0:f7:de:59:ae:bc:25:db:90:c6:9a:b2:
                    7e:2f:5f:3f:3c:cc:ea:99:c7:8a:a0:84:77:79:ff:
                    6c:e7:f4:0f:18:29:94:dd:e2:63:bf:ee:5b:97:d8:
                    ba:42:96:83:a2:21:8b:b6:9b:7e:e1:2e:56:79:ea:
                    bd:d4:09:be:ec:6b:b0:3e:fe:fa:9c:e5:10:ed:3e:
                    c1:57:5d:c0:e4:82:9d:a4:11:24:2c:1c:7e:69:6f:
                    c1:ea:2b:2d:86:9f:02:0f:88:2d:78:90:5c:e5:53:
                    f8:dc:f0:9b:fc:cb:97:6a:95:10:a2:39:29:27:25:
                    1c:32:3b:95:45:73:d7:39:a6:fd:95:54:9b:fc:2c:
                    46:ef:ee:36:84:be:f3:11:46:7c:be:00:34:6f:24:
                    8a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:9B:2B:98:24:43:FE:06:2F:97:2C:18:E7:E5:D3:0A:8D:D6:DA:61
            X509v3 Authority Key Identifier:
                keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:e1:41:4b:24:7b:40:2c:24:f7:a9:d6:1c:14:26:5e:ef:b8:
         62:e7:e8:c8:26:9b:a7:85:07:17:c5:67:b6:7c:21:f4:b5:c6:
         0e:4a:d8:90:66:e5:5e:53:2f:2e:17:aa:24:ac:3a:75:d4:81:
         22:04:ad:cd:c9:72:bc:36:3a:b6:9e:19:db:b7:e8:d3:8d:0e:
         74:69:51:71:c5:b1:97:f4:61:7e:8e:ac:c6:cb:be:b8:42:5f:
         3b:43:4f:10:d0:08:ca:29:04:96:14:cd:b9:b8:f6:39:ff:c0:
         c2:f7:69:5d:80:98:9d:27:d4:b5:2d:8e:fd:03:d5:60:10:4d:
         90:d7:2c:4a:4f:65:4f:2d:95:6d:d9:5a:c3:02:1a:e1:2b:76:
         10:d5:47:75:06:5b:81:5e:8f:68:18:4d:8c:bb:26:6f:2f:9a:
         6d:ca:a7:2d:35:b2:09:3e:b8:bd:dd:a8:f6:ca:89:3f:16:60:
         0b:fe:9b:85:37:ee:91:65:13:3d:45:ae:29:b2:e5:e9:5b:81:
         63:3b:88:db:d9:30:00:65:02:2a:18:e3:bb:09:86:09:78:8e:
         06:9b:1c:60:5b:25:76:57:09:58:16:a4:c7:15:c8:10:4e:bf:
         b0:92:54:5c:a5:a7:2a:7e:94:60:5d:3f:0a:f6:55:e8:cc:b8:
         e3:b3:fc:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 23:15:35 2026 by rpki-client