Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
File:                     vlJx8OFYfBRDTySA-RQQGFUHz6E.mft (raw, json)
Hash identifier:          XoHUvevdqZPYCgQM1sRNIk/9hMhlLInYUh/xks+W58s=
Subject key identifier:   51:7A:B9:E2:D0:EF:80:72:46:67:7D:67:B2:73:B9:69:A3:6A:26:3A
Authority key identifier: BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1
Certificate issuer:       /CN=be5271f0e1587c14434f2480f91410185507cfa1
Certificate serial:       019FF7226B4D5BFE557EEA59947417DCC69B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
Manifest number:          198C
Signing time:             Wed 12 Aug 2026 18:00:55 +0000
Manifest this update:     Wed 12 Aug 2026 18:00:55 +0000
Manifest next update:     Thu 13 Aug 2026 18:00:55 +0000
Files and hashes:         1: PdCQtFo1MZdYsa-X6x_yCeQP7WM.roa (hash: YWw0xEJYfH26bXcOtAt0QTYng83/pphUu49fNcxHt/0=)
                          2: vlJx8OFYfBRDTySA-RQQGFUHz6E.crl (hash: zRoPJMTNY+sLGatm/HZJ6SuJi2iTCoNXLvWR1zhhLWc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 13 Aug 2026 16:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:f7:22:6b:4d:5b:fe:55:7e:ea:59:94:74:17:dc:c6:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be5271f0e1587c14434f2480f91410185507cfa1
        Validity
            Not Before: Aug 12 18:00:55 2026 GMT
            Not After : Aug 13 18:00:55 2026 GMT
        Subject: CN=517ab9e2d0ef807246677d67b273b969a36a263a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:37:08:08:06:33:9d:b6:52:2a:a6:f4:15:23:
                    cd:10:dd:45:fa:3d:24:9b:a4:4b:f7:20:36:c6:d1:
                    18:f3:3b:5a:c4:07:8c:a0:2e:f3:dd:48:dc:99:01:
                    e3:66:6b:c3:00:88:95:31:d7:7c:b0:f8:42:a4:da:
                    b6:25:b3:a5:3f:72:91:a6:01:16:ac:a4:96:ef:72:
                    6e:fa:90:e4:41:82:01:32:12:b9:4d:89:c9:0b:ab:
                    38:8c:88:07:55:6b:e1:9e:87:71:0a:b5:95:ee:f3:
                    e4:ba:be:c3:0e:e3:65:0c:0a:84:f2:11:b4:ec:2f:
                    60:68:63:13:63:dd:6f:6f:9b:24:cf:5f:2e:5f:5f:
                    b7:a4:57:6e:c0:41:7c:35:5b:07:09:f1:3a:32:1a:
                    f0:f8:24:ef:d0:a9:49:e0:e3:2d:4d:fc:f2:14:52:
                    fc:9b:16:10:df:c7:93:57:94:8c:ef:a1:92:f0:7b:
                    56:f8:6e:7e:4d:4f:ee:e4:64:c5:98:38:6f:fb:28:
                    5a:62:e3:6b:f8:71:04:4e:cf:a6:d8:19:e1:8c:35:
                    d6:10:9d:8e:84:62:01:16:b1:56:a6:b7:60:27:6f:
                    28:a5:4c:38:fc:7a:db:8d:5b:74:93:cf:d0:56:94:
                    a8:23:f1:1d:32:4b:26:ef:6f:4b:51:71:9b:94:4d:
                    ca:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7A:B9:E2:D0:EF:80:72:46:67:7D:67:B2:73:B9:69:A3:6A:26:3A
            X509v3 Authority Key Identifier:
                keyid:BE:52:71:F0:E1:58:7C:14:43:4F:24:80:F9:14:10:18:55:07:CF:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlJx8OFYfBRDTySA-RQQGFUHz6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/97/76dba0-d86b-4d84-b15a-4d6d1256bf9b/1/vlJx8OFYfBRDTySA-RQQGFUHz6E.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:44:5c:e4:d1:6a:0e:2d:01:c7:15:f9:2f:5f:70:c3:1d:8a:
         f1:71:c1:25:b5:32:e6:6f:f6:b3:bf:1d:00:c2:2e:fb:23:ff:
         64:7e:50:85:20:6a:c9:f4:c7:95:62:44:b2:c7:31:12:62:d4:
         cc:9a:fe:02:5c:d1:9f:78:d3:bf:01:22:ac:ab:d5:ca:33:0e:
         dd:e7:ec:84:06:56:e6:47:57:6f:18:43:4b:48:64:9d:9b:a5:
         2b:d3:07:bd:7a:07:cf:9e:dd:ad:d7:39:20:00:25:46:74:1c:
         9c:f0:b8:37:35:d8:27:26:a7:8f:b5:03:e4:78:a0:ea:ef:55:
         8c:ff:14:13:0d:ef:d0:43:11:c3:47:dc:d7:93:32:45:8f:45:
         26:9d:d7:09:aa:8b:b2:17:56:c4:bc:80:fc:02:04:21:38:38:
         4e:33:55:55:58:ee:19:39:19:42:af:3c:c1:da:4c:f2:c8:6e:
         44:7e:3c:37:c5:e7:96:70:29:7d:45:97:5c:48:3a:fd:cf:33:
         3b:71:e3:7d:c6:43:ba:82:1a:62:d5:ae:38:ff:c3:58:33:d6:
         ab:df:c7:a2:6f:be:d3:ce:a9:74:98:0f:b5:0c:26:af:cd:c8:
         0d:13:88:05:70:58:ec:43:9c:8c:62:3d:75:74:56:8f:6b:2f:
         e4:67:aa:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 01:32:13 2026 by rpki-client