Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
File:                     V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft (raw, json)
Hash identifier:          85395+5+hWwGxzjca28A6qR6wQG6WMYDHKHfU1l4gC8=
Subject key identifier:   CB:D0:6C:4F:9E:B6:5B:5D:54:01:64:EF:1B:40:3E:35:46:30:ED:D9
Authority key identifier: 57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0
Certificate issuer:       /CN=579d549a3316e42571cca5f8380e2df59c2b34a0
Certificate serial:       019FA0A8D677889C733609727EA37503A60C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
Manifest number:          36
Signing time:             Sun 26 Jul 2026 23:00:47 +0000
Manifest this update:     Sun 26 Jul 2026 23:00:47 +0000
Manifest next update:     Mon 27 Jul 2026 23:00:47 +0000
Files and hashes:         1: HXHjwpKZ0hUuhA-ecTFWovLriWw.roa (hash: /sTU1en73B/4P9sdmgCdOcbF8vhNLR8j5kj2wC8xqfE=)
                          2: V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl (hash: 8HibjzbHIM6icb3cPLoxSADwJZlDAyOCvt/ztb4QXQc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 15:25:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a0:a8:d6:77:88:9c:73:36:09:72:7e:a3:75:03:a6:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=579d549a3316e42571cca5f8380e2df59c2b34a0
        Validity
            Not Before: Jul 26 23:00:47 2026 GMT
            Not After : Jul 27 23:00:47 2026 GMT
        Subject: CN=cbd06c4f9eb65b5d540164ef1b403e354630edd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:da:0b:e8:f3:6e:91:c9:a5:ba:d2:12:56:e0:
                    4b:78:6e:10:ef:ab:48:a4:7b:d2:29:ff:74:83:e4:
                    42:da:f0:1a:75:9e:2c:d5:00:81:a8:6f:f1:6b:01:
                    fb:35:38:21:34:a6:59:8c:d5:a4:17:cc:de:08:51:
                    7e:ff:11:f0:23:18:ca:58:e0:a7:44:97:54:40:2e:
                    dc:bf:a7:0d:dc:8d:47:66:58:52:45:ab:b6:8f:6f:
                    76:d3:72:34:d8:43:ed:d5:03:a3:f7:db:98:38:f9:
                    e2:f3:7f:fc:8a:4f:6a:4f:b0:ec:35:52:84:2d:12:
                    f2:54:0e:64:7b:a0:a3:23:ea:59:59:f3:cc:6d:1d:
                    48:aa:3c:c4:a3:b7:fd:1e:cc:02:e7:e8:21:46:59:
                    85:f9:6d:b7:4f:fe:56:09:6e:3e:01:0a:7c:8e:65:
                    ec:64:4a:85:72:36:19:36:76:8a:79:49:5c:60:5d:
                    19:e2:2d:01:0a:8b:1a:fc:52:21:17:ff:62:89:89:
                    33:83:3d:bf:37:cf:e9:53:88:cf:01:c3:7d:c0:27:
                    37:ff:32:6d:d2:f2:24:0d:74:ab:87:bd:bd:4b:d2:
                    06:1a:71:51:59:29:62:f2:f1:27:c7:ce:fc:05:be:
                    1a:c7:24:28:b3:d2:5d:9b:06:08:e0:ba:40:18:de:
                    7e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:D0:6C:4F:9E:B6:5B:5D:54:01:64:EF:1B:40:3E:35:46:30:ED:D9
            X509v3 Authority Key Identifier:
                keyid:57:9D:54:9A:33:16:E4:25:71:CC:A5:F8:38:0E:2D:F5:9C:2B:34:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V51UmjMW5CVxzKX4OA4t9ZwrNKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/24145b-2324-430d-b02b-4a44eb0eaf86/1/V51UmjMW5CVxzKX4OA4t9ZwrNKA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:ae:88:b2:4d:1b:e4:90:e4:b4:30:6a:ac:c5:87:17:67:2c:
         b7:e8:7b:83:0a:90:a2:28:b0:11:1d:92:8c:78:bb:7b:5e:6e:
         31:57:d2:94:c4:7b:10:e7:cb:64:46:7b:49:91:da:19:46:1a:
         22:77:01:23:55:e5:b3:22:8a:98:01:f3:f1:ea:5d:19:e1:0a:
         1d:d4:4c:41:51:35:60:a5:b0:43:c0:e1:2b:30:f4:29:9d:62:
         90:dc:6d:d9:7f:50:f2:16:0a:e4:62:74:13:6b:1c:9c:47:b4:
         a7:1e:08:ee:7b:b2:cb:7d:fb:ec:ad:6c:6e:87:41:51:1e:c8:
         e1:e7:78:a2:ca:f4:19:61:89:79:f9:23:57:73:09:0e:3f:66:
         23:d3:81:4e:6a:38:2f:68:05:0c:c6:89:7b:65:2e:82:02:87:
         e8:a7:c2:1b:0a:e0:09:69:43:32:e2:ce:91:14:c7:5d:32:cf:
         c0:5e:dc:15:57:8a:03:a1:01:ee:bc:84:03:e8:49:09:04:f4:
         3c:d3:2b:29:eb:d9:3a:8b:02:93:85:49:24:68:ad:97:20:cd:
         18:ad:08:71:4a:90:54:7f:f1:e9:78:8b:01:b4:03:93:cb:83:
         38:1d:a1:00:e0:af:89:83:75:bc:77:11:ff:35:c6:ee:2b:6c:
         c9:ff:52:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 00:29:25 2026 by rpki-client