Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
File:                     VxoPwBLvuJZQp35vvRLcq9pCjLA.mft (raw, json)
Hash identifier:          CjK8uOt6UNs9i91YIQ5VLvwujDCFyfj0v+wTWQVoLro=
Subject key identifier:   F2:1B:53:17:6A:82:C5:B9:05:17:AB:1E:49:A4:05:D2:99:1E:2A:CD
Authority key identifier: 57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0
Certificate issuer:       /CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
Certificate serial:       019FA1F279571B1AF5670B0F1140F7B9DF7F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
Manifest number:          1960
Signing time:             Mon 27 Jul 2026 05:00:50 +0000
Manifest this update:     Mon 27 Jul 2026 05:00:50 +0000
Manifest next update:     Tue 28 Jul 2026 05:00:50 +0000
Files and hashes:         1: F-ogY8Ta0_wee_Msr6wXjLMMLdk.roa (hash: UNtwMKF8S5Lr7jUG500KlLAuDRJg8Q6dusBqXV40+W8=)
                          2: VxoPwBLvuJZQp35vvRLcq9pCjLA.crl (hash: cVttrkcjVFWWQkG491WJfkKRvhjazVKSPjjqGt4BWmY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 28 Jul 2026 05:00:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a1:f2:79:57:1b:1a:f5:67:0b:0f:11:40:f7:b9:df:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571a0fc012efb89650a77e6fbd12dcabda428cb0
        Validity
            Not Before: Jul 27 05:00:50 2026 GMT
            Not After : Jul 28 05:00:50 2026 GMT
        Subject: CN=f21b53176a82c5b90517ab1e49a405d2991e2acd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:78:9f:42:4d:66:8e:b9:69:0a:d0:3c:c7:c8:
                    ab:58:56:ed:1c:d1:2a:ec:64:4c:37:45:14:f7:ac:
                    de:24:e5:12:38:eb:06:32:37:72:14:33:33:05:0f:
                    71:39:7f:89:f7:56:df:26:65:59:57:91:04:14:71:
                    52:65:36:44:22:f6:1b:46:f0:24:03:e5:3c:ec:21:
                    b4:d6:b3:2b:74:4a:d4:76:59:09:8a:0e:54:75:3d:
                    b4:55:e9:22:d4:a2:a9:5c:01:b0:9f:4d:09:a0:d4:
                    e9:36:68:aa:b1:64:3e:81:ff:e8:73:dc:ec:3a:d7:
                    bd:a7:65:4d:b4:e9:7c:11:3d:d4:0f:1a:60:9f:42:
                    4b:3b:74:cc:64:f6:f9:73:e7:12:f1:c4:48:e8:b5:
                    f5:83:03:bc:c6:f7:ac:7e:98:47:33:df:f5:65:d3:
                    b1:9a:cf:10:45:8f:83:a7:ee:a0:e7:b0:4d:6b:72:
                    14:f7:f9:b0:c7:a7:4e:7d:51:89:78:51:51:b8:1c:
                    86:9b:e0:86:91:3c:ad:6e:a0:f1:20:21:5c:2d:00:
                    32:7f:6b:8b:a3:7e:2f:2b:9c:68:0d:6f:32:37:54:
                    ec:cc:4d:6f:6d:f5:0b:31:5c:64:ba:73:45:f0:20:
                    84:5f:c5:ed:38:88:a6:34:44:ee:81:7b:e8:36:fa:
                    10:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:53:17:6A:82:C5:B9:05:17:AB:1E:49:A4:05:D2:99:1E:2A:CD
            X509v3 Authority Key Identifier:
                keyid:57:1A:0F:C0:12:EF:B8:96:50:A7:7E:6F:BD:12:DC:AB:DA:42:8C:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxoPwBLvuJZQp35vvRLcq9pCjLA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/63/d67661-4324-4e7a-ac6e-8b49dab166a4/1/VxoPwBLvuJZQp35vvRLcq9pCjLA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a9:53:84:79:e8:49:1d:04:57:e3:a7:36:36:6f:53:22:68:
         34:c1:e7:90:98:4d:ee:46:2e:17:ff:d7:4a:09:38:66:dd:03:
         ec:11:b3:fb:84:e5:93:f0:7d:1d:2e:64:59:68:cd:ed:89:a8:
         71:e6:f5:90:9b:4e:4f:c8:53:89:17:f1:42:57:06:00:38:bf:
         cd:f0:a0:fd:91:66:1c:59:d8:59:da:a1:45:cb:9a:ff:d6:05:
         43:4d:96:cc:4d:24:8a:40:de:8d:ae:37:8e:3a:cf:8b:f0:b7:
         e4:0e:0d:53:1b:8f:3d:ee:3a:29:ce:40:7f:8f:08:e5:2e:dd:
         62:0e:ee:9d:b0:3e:14:d5:40:67:ea:67:e5:de:0b:f8:cf:e7:
         29:ad:4c:ea:f5:48:3a:ae:e3:b3:c5:4e:c0:2b:25:4f:db:d3:
         e3:07:60:3f:69:96:ee:b4:cb:51:82:99:32:61:35:9e:72:23:
         03:df:c2:78:53:a4:3c:3d:05:38:13:69:66:12:7b:11:99:c3:
         4d:36:7d:b7:c0:5d:39:01:46:0c:8c:e2:88:50:81:9c:ce:d0:
         03:5e:97:f9:22:54:19:7d:d1:0f:3b:31:f1:a7:da:0b:f8:15:
         c6:9e:dc:90:60:4d:14:86:91:9e:32:5a:27:66:51:e0:f8:fc:
         62:d8:e3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:37:25 2026 by rpki-client