Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
File:                     VbryaWdRCzxS5G0dxZOWfN8p-ck.mft (raw, json)
Hash identifier:          9y4aa2Usb9xoDkhFaJrcFDGJp3gJBY9JukV25hResqE=
Subject key identifier:   99:19:61:34:2B:E0:F2:AD:54:E7:9C:6F:52:CC:E0:75:23:A3:47:0F
Authority key identifier: 55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9
Certificate issuer:       /CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
Certificate serial:       019F811DB9D0A35BDF9D2FD9008EBDDD0B46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
Manifest number:          05E2
Signing time:             Mon 20 Jul 2026 20:00:36 +0000
Manifest this update:     Mon 20 Jul 2026 20:00:36 +0000
Manifest next update:     Tue 21 Jul 2026 20:00:36 +0000
Files and hashes:         1: 0SWMflMJJlOILq6C9nu-h1OKJN8.roa (hash: kcK4B39yPXgK0nHshs5JakDk15PknxxnhcLimNeC6n8=)
                          2: 1-kUcSo0TEpKw_YLYby0R4DVb4yg.roa (hash: FnVQZ/f6EWlkoWkdWzbkkjdOeMD2B5h8cDHMDm/NyV4=)
                          3: 11f9_EaW8zxcu9dcHLvxzqf38Lo.roa (hash: xnewyzlXOwnExIP64JF1ik9DrSmsUZyhmiA3DXOiK4o=)
                          4: 7l1lpGV4ptT8nml-DHhj2477v7w.roa (hash: WRbHwiD/xFwzAYS55X0p7yc8DSBKcmaVY7wgLqrnwZM=)
                          5: BWSDCyaaYztqf8x04OxukY8CPY4.roa (hash: U38FUPvoykxIjgiJPRxBdZlYvPSwyO1mNNGTzXNpiZU=)
                          6: Bson5QpUOFI1QdCm6xHzbdmNIvE.roa (hash: DZHq8ozgpPl0uQCPljJHruwM7dHQ/jyriOu62FT2zks=)
                          7: CVCeZZ_sa3H3p2DH33iHGdIyWEc.roa (hash: JqW6uDJ3RG9f6mu4pHvOKIPsSL2yj5yYpAboStI8ffM=)
                          8: F5t3iNFuoDTJdVcFFvhLuvZHnmk.roa (hash: onvtW2FhvquKskWb8kYzMP0qs7tpSTfSO5Ae7USIC5U=)
                          9: FMYHLE6DdmEpeVMePkQCK7G0jsA.roa (hash: U9W0uSh64vdUp2XVkXkHbBV/og/HtsBpfruoNhoMZbU=)
                          10: G6PfcTBBnGMmYTxAX2kEhfoKgDo.roa (hash: yy5VfaRyRkaXKFtJ7nRL6lqT6Vibse1ushGJE3d+Pjw=)
                          11: GfOWGiLPv2wccjOXnStMVeJn2AM.roa (hash: 4kXzqP7Ueen81fNYyTvCfhk/Yz0qWdHHeusnErlkgAI=)
                          12: GiE-4FOhwHtt-T-MQAvWYHhDqKE.roa (hash: hAGmhAwZhhoWhp04cLiGpWwuwXg8Kk2Qjb8VbTs9ZtE=)
                          13: JCOqWbRnRywHSsZh-fLz50m-PqY.roa (hash: aOTb2qew8LvghZhiTeoIMCTgriMUYXeo63zQWwudYXw=)
                          14: K_5UWL5IkQbpsAsxidIs-a910tQ.roa (hash: jfQdjzJB+uzffMoi8GywFxVevTRWSqD6hEzeDuvNmb4=)
                          15: KqWucH5sI4MugF5p4PjTBd1XImI.roa (hash: qMFzUBwuT4BEanu+eOpO2co0/ErViX4f8esF8yniEM0=)
                          16: PJmcxay0WtSRJnIDudY6DzRck9Q.roa (hash: g6fJ4GyCp1px6ym38QN41UvtwhfWNwAeKWC1qAkBcM0=)
                          17: VbryaWdRCzxS5G0dxZOWfN8p-ck.crl (hash: 2tZk5J6Yxry8TUExgJVNdmVSNo08ERlTRoPz4QuAtjo=)
                          18: Z9annEhNXJRKB9imLkUdPhT85Nc.roa (hash: oy85S0enUEY7wVVeRJQ4+FT2oH5OrnRX3IvS0Tb+dKo=)
                          19: Zbh0v3jIkeNHK_huafJIUWzUhjE.roa (hash: u5gxSyEmcqN6U6zIZdAUeM1zmLtdQN7lxXducAeyTVA=)
                          20: ekRgt1kJi2v662mflC7yokLhh34.roa (hash: 3lpPZiQnRkbCD6keXb41MVLx99s2aoWKQrtAqDsCux0=)
                          21: hs3h7Dj-b8z6Uxhv8HYqs7iBXD0.roa (hash: 5W1nhov/uvHu69XlxjaNWq1KRUFRi0VVoqIxSY+t7js=)
                          22: jNpTRZNm_bD5BiFoeh5OJnCcQAY.roa (hash: 1TgeIUZpeprmcZh4MLiiWQfSwXT8XyxkpN223zXb1O8=)
                          23: n-wdGNxhA3O26KGrsNj3L9h7eAw.roa (hash: 6R0f4WMAOxx3u7Zt38anUmVPSo1nBDSR8e8VksF4tmU=)
                          24: u-ddoqXehtb5m6JTXCSF4HyFY8E.roa (hash: UyjZhoeMOYj569cGU0irTIkbnK1IY9Bk6c1YVd6j+D8=)
                          25: u7SrUaeTfqqFlK6M8OkfEL87nc0.roa (hash: GsWYYAbN0tIazsbVktNVPeSXTKT3C0hkv53fF6GKkZI=)
                          26: u_2w56w9VDiTEhKc_ZitgndOhPo.roa (hash: hQUv7XEtV7+B7R0n+5Br9ftO2lm1ptUCoJiMKucjmPE=)
                          27: wXeQ_bqVYSAQNh8BsomXrKWEPnQ.roa (hash: DH+8dGO7ELMrzVWRl7HBCDYNR4gBReTuiDSGx/p0Ue4=)
                          28: wa5EsEjjf8dZLFe1smI8Mc7-Wac.roa (hash: hs9hA8TNugivRwbaXq2Cd+gZQT+LQBaaFDtqCrqGbck=)
                          29: ypSiLSto3RjwAtlvFMK5kNDrdzk.roa (hash: 0ZlVmf2An7RemdJ7LPaj0U4nO3qgfQ0MKBoflfLZxpM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 18:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:81:1d:b9:d0:a3:5b:df:9d:2f:d9:00:8e:bd:dd:0b:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55baf26967510b3c52e46d1dc593967cdf29f9c9
        Validity
            Not Before: Jul 20 20:00:36 2026 GMT
            Not After : Jul 21 20:00:36 2026 GMT
        Subject: CN=991961342be0f2ad54e79c6f52cce07523a3470f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:7d:77:1b:d3:76:2c:fe:14:56:74:cf:45:e6:
                    ec:c1:2c:88:03:75:e6:1b:c4:03:f6:60:9f:b5:03:
                    a2:75:d3:a1:ff:a7:48:80:4c:23:9f:c8:b9:7d:87:
                    93:e7:9d:ad:3b:1b:08:4e:d1:38:b9:cc:04:b0:3d:
                    9a:54:54:86:c9:d0:de:d6:78:e5:c1:e4:68:22:d1:
                    10:a4:9d:c8:ba:65:4b:59:14:cc:b3:07:94:b8:e2:
                    bb:16:75:3d:43:39:66:80:a2:80:ca:36:82:99:b6:
                    25:45:6b:af:90:6f:0f:62:6c:7c:05:3f:72:22:44:
                    80:0e:5c:29:fb:34:1d:7e:38:d8:10:ef:06:71:07:
                    02:d0:8c:67:5a:69:d1:df:1f:f5:98:2e:d2:ed:fd:
                    43:3f:dc:2d:e2:20:a0:91:5b:a4:39:f7:59:df:9b:
                    f1:2c:cf:ec:1b:d3:e3:0d:fd:6c:c7:17:e2:32:66:
                    54:97:76:9f:c1:58:b3:32:3d:a1:e7:45:fa:46:6e:
                    3a:94:03:74:3d:c5:5f:45:d7:36:1d:22:43:37:fa:
                    58:ac:94:75:3d:fc:66:65:b0:c0:40:84:69:80:80:
                    7c:fe:67:f3:aa:03:d7:a8:04:91:2d:b1:03:84:5f:
                    9d:a6:f6:a9:8e:14:47:0b:8c:2f:2d:9d:b6:60:dd:
                    eb:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:19:61:34:2B:E0:F2:AD:54:E7:9C:6F:52:CC:E0:75:23:A3:47:0F
            X509v3 Authority Key Identifier:
                keyid:55:BA:F2:69:67:51:0B:3C:52:E4:6D:1D:C5:93:96:7C:DF:29:F9:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbryaWdRCzxS5G0dxZOWfN8p-ck.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/5aa4dc-d184-4db4-9e10-49f981ee5981/1/VbryaWdRCzxS5G0dxZOWfN8p-ck.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:cc:e0:87:2f:fa:55:da:e0:d6:5b:80:91:ec:18:b2:3c:81:
         cf:3c:97:2a:c5:21:cb:a8:f3:98:af:ca:67:8b:6e:8c:89:ba:
         13:fc:5c:95:57:1e:5f:36:79:94:84:db:7d:68:81:75:92:d9:
         95:92:0f:63:b4:83:57:86:4f:f1:c4:11:76:d9:74:89:29:88:
         9a:fd:78:84:a7:22:6c:e7:7a:83:1c:f9:e4:40:49:a7:b4:d8:
         e5:48:ee:d1:dc:9f:d0:64:f9:a5:00:fb:f1:99:8f:c9:b4:8c:
         67:88:55:9c:99:cb:1b:37:f6:70:29:c7:b1:b5:d6:7f:b8:da:
         fb:23:aa:95:81:42:58:36:1f:91:4e:0b:83:31:24:4e:70:9f:
         82:8f:6b:fe:99:cf:ac:9b:dd:d4:f1:f6:97:11:e7:1b:f8:94:
         aa:34:a5:c5:05:06:34:7f:6d:51:62:3f:a7:e7:4d:7d:61:ac:
         83:78:c9:44:53:6b:61:2f:d9:af:87:c6:a2:d5:5c:f0:8e:8a:
         7f:8a:7a:37:ef:47:be:a7:6a:ea:7e:d5:12:27:90:a8:f2:80:
         ed:96:4d:58:9d:fa:05:ac:66:bf:5e:40:f4:2f:1a:21:b3:12:
         c0:6d:22:61:5e:8d:9c:38:19:d8:a5:08:18:b7:12:6f:b4:cc:
         33:85:62:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 03:24:22 2026 by rpki-client