Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
File:                     VsihcTx0duAO0rd_2Y_YkzA2XYc.mft (raw, json)
Hash identifier:          APKbQp3dfvP3JDnjaQw0mw5VsqbV7geA/eNQThlIXXA=
Subject key identifier:   79:B9:F9:12:CF:45:75:6B:4E:36:F4:88:3E:E6:10:9A:B3:6A:F4:0B
Authority key identifier: 56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87
Certificate issuer:       /CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
Certificate serial:       019FDEE337FC3AADFD168A70FDC66F72BF59
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
Manifest number:          19F3
Signing time:             Sat 08 Aug 2026 01:01:00 +0000
Manifest this update:     Sat 08 Aug 2026 01:01:00 +0000
Manifest next update:     Sun 09 Aug 2026 01:01:00 +0000
Files and hashes:         1: 2e5AvXlufc-kEczHhTECSJ-V-JQ.roa (hash: I9+kJ0K5wv3UioVKT0ZYctRfAuqgjg7khDoT9z5Qntc=)
                          2: GmiNV02KpRdxeBzvA-9_R7Rwp5k.roa (hash: 1nMmGCSVtG3D2xti3D/6NXcOSYqZ/aoCI5L5XEr0uig=)
                          3: VsihcTx0duAO0rd_2Y_YkzA2XYc.crl (hash: SGzrWFOS5iuj8it8TicPbZ/Jqg60xqdiVdz+RjIXeNI=)
                          4: g6Ux-iBqw5pRnRrg3U9EpW7v5Jc.roa (hash: KFBqHuaTNX9BJpnJ/kNbP6C31mWv4bvManEdzG/ajqc=)
                          5: mk7ttr1hKMruQA-V9YpclvWNi_0.roa (hash: DCTpzfyrUDoRJthmL9oXt5chUKx5z7hp5NsgIKGeX6c=)
                          6: nED_N4Z5sMwFkHHvEi4m_tZ34qY.roa (hash: rSNpNmuEFcV4WY8c8GVHoYC+wgLzVaYLe++ghwDQJig=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 09 Aug 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:de:e3:37:fc:3a:ad:fd:16:8a:70:fd:c6:6f:72:bf:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56c8a1713c7476e00ed2b77fd98fd89330365d87
        Validity
            Not Before: Aug  8 01:01:00 2026 GMT
            Not After : Aug  9 01:01:00 2026 GMT
        Subject: CN=79b9f912cf45756b4e36f4883ee6109ab36af40b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5b:2b:b9:8c:67:1a:ad:94:70:19:59:6d:e1:
                    05:20:70:7b:03:e7:7d:4b:28:90:e7:a9:a1:32:90:
                    9a:b6:3c:f5:fb:32:a3:ab:c2:a8:fa:2b:55:83:db:
                    2f:22:cf:d7:80:e3:1e:62:8c:c4:e1:65:1a:a9:d5:
                    a5:aa:08:a6:77:d7:e7:20:01:c5:19:f6:32:92:8b:
                    b2:e9:1f:73:f5:a6:39:e7:fa:38:05:86:3d:d8:33:
                    86:50:70:64:9c:83:7d:10:c6:c1:dc:44:e9:5f:45:
                    32:e6:a4:a7:8c:83:55:67:77:f6:bd:1e:24:cd:9e:
                    db:74:ee:53:97:be:c4:23:24:40:89:ee:8e:36:40:
                    18:d0:5d:e0:ac:2f:69:ab:8c:9f:40:dc:a5:cf:e6:
                    5b:20:37:a9:f8:b4:89:7d:75:06:3a:c7:1b:a9:57:
                    75:64:05:34:dc:26:77:e4:6f:03:4b:1b:bc:67:f0:
                    b3:21:6b:30:45:f0:53:cb:c9:94:7f:52:b1:a6:28:
                    49:10:69:a3:23:1f:ed:23:46:2a:7a:b4:e5:92:ec:
                    8b:f4:25:2a:f4:38:28:98:6a:8b:ae:d7:23:1e:0e:
                    2e:bb:17:93:78:b4:4f:48:17:12:26:88:67:0e:3d:
                    cd:90:86:2f:1a:7f:cb:d2:32:c3:63:d5:90:df:52:
                    fd:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:B9:F9:12:CF:45:75:6B:4E:36:F4:88:3E:E6:10:9A:B3:6A:F4:0B
            X509v3 Authority Key Identifier:
                keyid:56:C8:A1:71:3C:74:76:E0:0E:D2:B7:7F:D9:8F:D8:93:30:36:5D:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VsihcTx0duAO0rd_2Y_YkzA2XYc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/23d525-8296-4f9c-9de4-91e32c517152/1/VsihcTx0duAO0rd_2Y_YkzA2XYc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:34:8e:ca:d5:eb:c0:97:40:43:1d:db:a0:c4:a3:93:fc:ad:
         d4:8e:a0:45:2b:5b:d5:18:e2:59:f0:27:00:57:f8:fb:d1:af:
         23:7f:72:dd:19:0d:7b:c6:0c:fa:99:9f:3b:f8:4b:5d:33:2e:
         64:1e:42:d0:dc:e4:6c:9c:4c:bc:ff:a4:36:de:06:d6:f7:c8:
         f3:17:30:f5:ab:de:40:ae:a8:73:a0:37:17:54:e3:e9:d9:bc:
         14:0d:78:59:52:7f:89:c3:94:d5:84:3e:8a:ff:2d:cf:f5:3c:
         ac:bd:db:07:d8:58:84:45:10:ba:ed:86:01:88:47:42:f3:c2:
         2c:66:eb:c0:e4:2b:f2:55:1b:22:15:8e:6e:8a:f8:be:61:e9:
         ab:18:96:b5:18:60:bc:18:fc:bc:b2:41:2a:76:c7:1f:51:8f:
         15:70:35:54:14:b9:dd:43:bb:a0:bf:14:59:64:1d:49:74:3b:
         1d:17:63:4a:08:a6:98:47:ec:42:19:ad:fc:db:00:9a:12:7c:
         c8:50:60:13:ed:75:e6:1c:64:70:94:fd:8f:a5:e3:b9:2d:c1:
         7e:40:fb:0b:47:1b:ca:40:c2:6e:6b:65:69:5e:c8:3d:4a:d5:
         76:b3:cf:f0:6b:f9:b6:8b:94:4d:25:7c:e9:5b:96:e4:ee:8b:
         34:82:7e:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 08:57:24 2026 by rpki-client