Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          GRJKurEGqNfPVuFoHka6ucb7pbmis/zD5flizbJLFmY=
Subject key identifier:   C9:2F:E1:52:A8:54:B1:7A:BC:52:D4:EA:37:84:69:57:F7:18:90:69
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       019FA48555C237E1A5F3D76C9527AD7A0897
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          0889
Signing time:             Mon 27 Jul 2026 17:00:29 +0000
Manifest this update:     Mon 27 Jul 2026 17:00:29 +0000
Manifest next update:     Tue 28 Jul 2026 17:00:29 +0000
Files and hashes:         1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: 3mUd9dgrVhzMen1AiUbxqMI7v2lMkPtMiHzHw0fbOY0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 13:48:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a4:85:55:c2:37:e1:a5:f3:d7:6c:95:27:ad:7a:08:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Jul 27 17:00:29 2026 GMT
            Not After : Jul 28 17:00:29 2026 GMT
        Subject: CN=c92fe152a854b17abc52d4ea37846957f7189069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c9:68:a2:96:bd:97:e0:41:ec:d8:04:ef:27:
                    83:b7:7b:f7:36:1d:3c:34:c0:0e:85:cf:f6:7e:a6:
                    3a:14:c7:e0:ef:92:6f:3c:a8:65:31:c1:4b:5a:b0:
                    44:9e:f4:ce:2e:2d:e4:ab:2d:5c:5e:8b:fc:03:f0:
                    f6:00:84:31:51:67:a7:ef:7f:77:fd:2c:6b:15:c7:
                    58:c2:02:fc:a7:c8:e3:df:c3:d4:85:d7:4b:47:0a:
                    26:0b:2e:01:f4:f2:99:c7:b7:26:7e:a4:3c:59:72:
                    88:37:a3:e9:00:20:09:d0:1e:da:40:e9:da:54:14:
                    e2:b8:8e:9c:0d:dc:8e:48:96:42:cf:60:39:76:34:
                    f7:fb:ad:ab:78:9d:db:fb:b2:2e:23:2e:14:e9:95:
                    30:87:d4:54:b5:d9:0e:8c:10:0e:25:36:eb:76:57:
                    2e:b9:8f:77:a0:24:cf:6f:34:08:1f:19:7a:a2:0e:
                    4c:a2:1f:f5:52:14:8b:64:c8:d4:82:3f:4e:7f:23:
                    f4:3c:b7:3c:f9:fb:25:a0:7f:35:98:8c:0c:18:9d:
                    2c:2d:a0:ba:00:87:94:19:d3:2a:84:9b:f9:6c:c1:
                    78:34:f6:99:5d:1d:6e:21:c3:9e:49:c8:a8:7e:4d:
                    1e:ea:a1:6f:a7:b9:77:51:1f:37:27:cf:52:87:40:
                    1a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2F:E1:52:A8:54:B1:7A:BC:52:D4:EA:37:84:69:57:F7:18:90:69
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:16:14:bd:10:1f:7f:4f:8b:d5:29:24:95:e0:c5:f4:bf:4f:
         1d:d5:94:c6:41:54:97:1f:09:bc:10:5d:18:6d:e7:ef:45:26:
         b3:88:58:cf:58:57:61:82:d7:bd:b1:b1:ff:b4:43:d1:7c:91:
         2f:68:4d:2c:ac:9c:ac:06:9f:cf:c8:26:8e:12:27:44:67:f5:
         d4:55:bc:fe:22:55:f3:8c:a1:c1:ab:d0:45:87:c3:fb:ee:49:
         12:f6:fb:87:d3:9d:4f:e7:f7:8c:53:a1:d7:33:2d:c7:b1:ce:
         c2:9a:8b:51:03:bc:cb:7d:6a:ad:44:fc:ea:d5:d4:df:26:2b:
         18:a9:35:37:89:72:06:5b:48:c0:64:56:01:fe:e3:b1:6f:21:
         92:18:a0:71:2c:58:55:aa:fb:5c:86:9a:81:e0:c7:84:d5:b0:
         24:c1:3b:91:fd:ee:8c:95:f5:08:db:26:92:a6:1f:50:9a:ae:
         51:39:23:19:10:71:74:80:ce:5c:11:60:73:6c:7b:33:d4:3b:
         00:a9:3a:a5:7c:2b:66:35:7a:19:90:68:0b:e4:44:36:fa:a4:
         03:4b:65:5d:10:16:dd:7a:c7:f6:61:c4:5d:da:99:7b:3a:05:
         45:c6:87:c5:b5:f6:67:4d:f3:13:65:26:c9:e0:7b:88:d5:c8:
         86:28:24:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 18:29:47 2026 by rpki-client