Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
File:                     VHhB7v8gx4sz1BHa5RppKtuJLjE.mft (raw, json)
Hash identifier:          mLQml9hrI8uowRGuO4wox77SFdhR0ZApLhn3LrxTwhk=
Subject key identifier:   58:AB:91:F2:EA:3F:89:63:06:ED:1C:5E:B4:B4:05:F5:32:A0:C9:96
Authority key identifier: 54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31
Certificate issuer:       /CN=547841eeff20c78b33d411dae51a692adb892e31
Certificate serial:       019F9E16009F0E05B0EE0B0829F90F39066B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
Manifest number:          0EDD
Signing time:             Sun 26 Jul 2026 11:01:09 +0000
Manifest this update:     Sun 26 Jul 2026 11:01:09 +0000
Manifest next update:     Mon 27 Jul 2026 11:01:09 +0000
Files and hashes:         1: M-FsfGOycf9jYfp9tqtSOE1tveg.roa (hash: KbWLzZCgilO6OBGCbfqwG+EF0N+c9KwghmXNtRevPUA=)
                          2: OC1nyRt0bfVZANX8lUlsmij_SRQ.roa (hash: Rdwkl90u1nSZHEd8rY7u8aTFZGWKHVXtuaJS4W++hPQ=)
                          3: VHhB7v8gx4sz1BHa5RppKtuJLjE.crl (hash: GXED2bkHDIjz97c7JntqvkC+iOwDEezrsxdNjt0tYzc=)
                          4: VdXuk6Srl_KiWlPIXVl9CuQOU5I.roa (hash: LHcWGrhhqmQEefD63qRAeICnBie6NA3TujUcOgPmo8Q=)
                          5: X8URGrQy5lQVgKZucRbyZdlIJ0A.roa (hash: v3GGPEKUSmn7q4SXBMTsOj2RRQGTLoKv6ZyqiXOL8do=)
                          6: tEALMFY5mRNnPeI1w2B4fh6s5fw.roa (hash: OpvOgmRGG0JJ9f1GQilIMwIzyL+4wnLk8rAzuKjlbwM=)
                          7: tM3rrLe-_dhZ0LqNTWbRHwcH0a0.roa (hash: mCMHaaXhfT9VeDu9M4tgELO+5HgeDqSNi4Gr5v6WmTA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 Jul 2026 11:01:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:9e:16:00:9f:0e:05:b0:ee:0b:08:29:f9:0f:39:06:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=547841eeff20c78b33d411dae51a692adb892e31
        Validity
            Not Before: Jul 26 11:01:09 2026 GMT
            Not After : Jul 27 11:01:09 2026 GMT
        Subject: CN=58ab91f2ea3f896306ed1c5eb4b405f532a0c996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dd:98:74:7c:fa:e8:b7:fc:e8:57:8b:a9:77:
                    e9:44:2d:62:1f:0e:43:5a:d5:84:e6:32:58:2a:74:
                    89:25:f2:ca:0d:80:0b:34:99:32:91:84:2e:43:53:
                    39:9f:17:69:60:6f:bb:96:f8:90:98:61:88:9d:62:
                    2a:ec:53:41:11:1a:43:b4:ac:cf:0c:37:45:81:b8:
                    e2:51:d2:0b:33:c8:6c:cd:29:5d:a5:07:c3:88:0e:
                    23:d3:ba:91:8a:db:26:76:a1:55:9f:94:f4:d9:f3:
                    ea:88:e0:2e:17:72:f7:04:1a:78:5a:5d:ff:34:23:
                    69:28:40:df:03:d3:e1:69:c1:69:8e:ec:d0:2d:64:
                    db:4d:0b:74:45:84:2e:ba:3e:9f:f4:2c:97:38:65:
                    f7:ce:58:6e:2c:f2:c4:19:55:b7:2d:bc:a2:c6:45:
                    c3:70:c7:e1:30:3b:1f:c4:ad:2c:be:29:02:6b:e0:
                    26:a5:99:38:09:01:cc:30:61:89:10:01:48:d6:61:
                    50:47:86:a3:e1:de:97:e2:1f:2e:6e:5c:95:0d:a6:
                    c3:4c:d6:f7:e5:cd:27:8e:83:8b:e0:87:bf:74:09:
                    a0:83:6a:4c:89:48:0c:67:7b:03:48:02:50:06:6b:
                    ce:b3:06:cd:48:d7:db:87:1c:c6:ff:84:c0:0c:88:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:AB:91:F2:EA:3F:89:63:06:ED:1C:5E:B4:B4:05:F5:32:A0:C9:96
            X509v3 Authority Key Identifier:
                keyid:54:78:41:EE:FF:20:C7:8B:33:D4:11:DA:E5:1A:69:2A:DB:89:2E:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHhB7v8gx4sz1BHa5RppKtuJLjE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/c8d393-3e28-4f07-996b-366ba1700fe0/1/VHhB7v8gx4sz1BHa5RppKtuJLjE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:b0:8c:7c:c3:05:a8:7b:4c:1a:26:70:08:44:64:39:80:fb:
         1c:ce:3b:a8:79:34:f6:3c:d2:35:4e:be:f3:d4:db:d1:dc:f8:
         62:68:17:dd:7f:41:ba:8f:1a:99:62:ae:2f:f1:25:e6:73:98:
         ae:de:b5:5e:6d:3c:1f:47:6c:a7:9f:f1:8a:1f:6e:9a:27:57:
         c6:5f:83:f7:15:3c:ab:60:34:fb:7c:9e:1b:95:bc:c4:53:99:
         f9:a1:62:9a:b7:58:50:f8:74:2a:5b:61:0d:ac:6a:6c:68:98:
         bd:3c:dc:92:83:f1:03:4b:86:c0:ce:68:8a:5c:ae:24:d8:60:
         9b:ce:ac:03:45:f5:f8:ac:05:33:7a:40:2a:8f:1d:a8:1f:c4:
         7f:81:e3:4e:bb:ae:26:33:45:91:51:54:87:38:b4:7c:f0:c9:
         d7:c6:65:6c:84:50:b8:86:f6:20:c2:25:9a:1b:2f:e7:8d:2b:
         11:31:ef:8f:53:5c:71:45:dc:bd:a4:96:49:cd:41:ba:37:5d:
         77:0c:69:cd:d5:ba:5e:6b:6e:12:8b:82:ff:9c:d1:3e:c0:4b:
         4a:e6:92:8a:10:61:b1:6c:12:0b:36:bc:20:9c:6d:01:04:5a:
         27:a3:23:91:b8:92:83:71:bc:a1:1e:53:d7:34:55:f3:25:2e:
         a8:f5:a7:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 26 20:33:17 2026 by rpki-client