Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
File:                     vxB-B5UsBpNYzT-CquzrTGlIPKk.mft (raw, json)
Hash identifier:          5Sld7JqOmt3mkgFYHqu7BYTsZ9GYWOdKEDChBS7q7yM=
Subject key identifier:   22:90:1E:C7:C6:3D:05:EC:ED:61:FD:70:82:9D:CE:15:9C:AA:37:69
Authority key identifier: BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9
Certificate issuer:       /CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
Certificate serial:       019F9D029C997D9D02DA159E9C81DBB02E03
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
Manifest number:          1565
Signing time:             Sun 26 Jul 2026 06:00:21 +0000
Manifest this update:     Sun 26 Jul 2026 06:00:21 +0000
Manifest next update:     Mon 27 Jul 2026 06:00:21 +0000
Files and hashes:         1: RUznmWpVOwsn60ESxl49L9Pmya8.roa (hash: w+iuAkKhACBI8hLL8gbBTdoCy2pV3p1PyD5BbJLahUI=)
                          2: awH60oe-svgud9tAzPtSBr2e0Is.roa (hash: E49S1U9H04hhz74C44mf8n/FfY+X0bAxESTRZmud7qI=)
                          3: dAyulPiI2CUkixVHAlwF-dxHMpM.roa (hash: dBhQznF+HydtzWKgrvogNVDV8rqVMIN/Q1p1oDL2qPk=)
                          4: fjMnvOiGz83hqmXIj9BHOJPy5ZY.roa (hash: QUpVQdLUPbUnz/RganhbAg7ijF8JoA119PqgQLRj7xg=)
                          5: vxB-B5UsBpNYzT-CquzrTGlIPKk.crl (hash: akDBVheiU+6aBmGJy9gZigzKTbnR9fi0aznz1a/uZSA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 06:00:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9d:02:9c:99:7d:9d:02:da:15:9e:9c:81:db:b0:2e:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf107e07952c069358cd3f82aaeceb4c69483ca9
        Validity
            Not Before: Jul 26 06:00:21 2026 GMT
            Not After : Jul 27 06:00:21 2026 GMT
        Subject: CN=22901ec7c63d05eced61fd70829dce159caa3769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:9a:a2:3d:f4:6b:64:e5:c2:4d:0b:50:16:a5:
                    7f:02:66:5d:14:40:ec:7f:da:2f:8f:42:2f:9e:a1:
                    ae:49:e2:9d:55:e8:b7:1c:a3:07:12:2d:d4:04:2d:
                    61:41:ec:80:0e:67:2d:8a:25:58:d5:7b:cb:8e:84:
                    11:b2:ad:49:77:0d:6e:92:a5:73:ca:13:fd:8f:d5:
                    2a:13:1c:3d:73:63:a3:a4:90:fa:09:87:b2:d9:8c:
                    7f:2b:11:60:95:06:fb:c9:ce:b6:b8:9f:e0:03:db:
                    18:8b:23:83:29:64:94:a3:75:cf:77:ce:07:ae:15:
                    a0:0e:ce:f3:5c:25:76:44:13:37:1b:27:ba:a8:1c:
                    18:3d:11:90:b0:9e:59:1a:28:ed:41:f5:8e:e3:72:
                    2f:02:d9:b5:04:82:f4:4d:fa:63:85:d0:29:76:48:
                    da:b9:c7:b5:5c:89:0e:c4:60:5d:26:3f:b4:8e:bf:
                    d8:b9:9c:0e:26:6c:1c:39:f4:1c:92:c0:89:07:41:
                    db:f7:b3:0a:49:89:29:6d:d3:c7:b7:b1:6c:47:3b:
                    23:13:56:0e:30:a2:83:0b:52:aa:4b:ea:7a:e7:85:
                    f5:7d:c7:76:fb:02:68:8f:97:b1:d6:30:d0:a3:ba:
                    10:49:4c:88:2c:c9:af:a5:2a:6f:fe:96:a4:6b:88:
                    5c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:90:1E:C7:C6:3D:05:EC:ED:61:FD:70:82:9D:CE:15:9C:AA:37:69
            X509v3 Authority Key Identifier:
                keyid:BF:10:7E:07:95:2C:06:93:58:CD:3F:82:AA:EC:EB:4C:69:48:3C:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vxB-B5UsBpNYzT-CquzrTGlIPKk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/7e28ee-c65d-4529-a47b-48633d718590/1/vxB-B5UsBpNYzT-CquzrTGlIPKk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:cf:0d:53:8a:31:b6:46:1e:2e:fd:32:ae:02:8b:07:aa:8c:
         8b:63:04:fb:14:73:c8:49:68:53:bc:85:8a:4b:27:ff:a0:2d:
         ff:2e:cd:11:dc:a0:ed:f4:d4:e5:f5:f4:09:46:9a:3c:cb:7a:
         f8:f2:92:86:71:29:a8:fb:d2:df:23:97:40:60:75:2c:20:54:
         d9:94:c9:12:db:c6:ff:0e:d3:74:a5:15:3a:2a:42:f2:f4:88:
         a0:54:32:fa:a6:1f:a9:0d:d2:29:d2:15:8c:44:66:32:f0:ab:
         93:c2:91:81:c2:6e:8d:73:1b:2b:c3:7d:96:f7:3c:81:e8:04:
         60:bd:4c:f0:2a:99:36:2a:0c:fc:67:31:f0:e2:1b:b3:ed:cb:
         8d:3c:0d:df:45:c8:56:45:b2:c0:db:5f:50:76:b0:38:08:ec:
         e8:e7:04:e0:10:37:4d:61:15:ff:d1:c3:67:e8:00:54:ce:be:
         72:8a:43:48:bd:b0:e9:a7:85:47:35:87:5a:a6:b0:f8:3f:f6:
         8a:4c:13:a3:df:50:7f:8a:43:23:cc:25:f3:ac:a9:72:50:bd:
         24:fb:4c:20:b6:10:1d:08:e2:7e:e3:42:b9:ba:73:4e:de:d5:
         0d:ae:84:49:a0:78:a2:20:f3:50:85:0e:4b:e1:95:90:ed:9e:
         77:d7:61:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 15:53:14 2026 by rpki-client