Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
File:                     vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft (raw, json)
Hash identifier:          VwJEq/PQpYOtXREmqHa8UKiIbTobmCRiyP5LDFIgU70=
Subject key identifier:   04:4A:08:03:EA:E7:F1:B1:2B:6A:F0:64:B2:29:DD:04:65:BB:90:A4
Authority key identifier: BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC
Certificate issuer:       /CN=becec531e5c37756b828663f9cc20ad6217713ac
Certificate serial:       019F82D53A0CBA4F81898F09E20FA83F5392
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
Manifest number:          12EE
Signing time:             Tue 21 Jul 2026 04:00:39 +0000
Manifest this update:     Tue 21 Jul 2026 04:00:39 +0000
Manifest next update:     Wed 22 Jul 2026 04:00:39 +0000
Files and hashes:         1: OTRSO5_pHSeulNj4xXvHd4-oZGw.roa (hash: GumSyhlt9WpNHRYRGiGvb9zCBM/7gwLeOV+M6h7PvAY=)
                          2: YFFevfcb0MJ_yPF5gFWuiYNPaqg.roa (hash: lHBaBK2XvWUWSJ/Pzslgj1K8IVs6D38UMIfHsQwv/ik=)
                          3: rti6tjnaJyfv_Ylmdsnl4AB3DYs.roa (hash: RksYRj9xScfDwNjU2z8C2o8FShcQoua9yZqEvSMWJ+M=)
                          4: vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl (hash: aQpDAvIUJVBXZ5mEzS/wlRW4ESeHSN5VqRJW9G2AoDs=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 21 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:82:d5:3a:0c:ba:4f:81:89:8f:09:e2:0f:a8:3f:53:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=becec531e5c37756b828663f9cc20ad6217713ac
        Validity
            Not Before: Jul 21 04:00:39 2026 GMT
            Not After : Jul 22 04:00:39 2026 GMT
        Subject: CN=044a0803eae7f1b12b6af064b229dd0465bb90a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:1e:91:9f:28:c0:17:09:55:13:07:39:cf:9c:
                    0b:93:76:68:54:f9:c1:3a:84:cc:67:db:2a:eb:fb:
                    10:41:52:1e:36:74:76:36:c4:bf:e0:f0:a4:73:34:
                    8f:41:fd:3d:2d:af:bd:e9:da:14:42:9e:70:a9:4f:
                    ae:0c:c1:e3:9c:c1:cf:bc:c0:b4:7b:54:af:41:cd:
                    57:1e:87:95:3e:2d:de:89:90:dd:3c:aa:d5:7c:55:
                    18:a1:79:fb:10:31:fa:ab:d8:c1:15:40:4b:6e:fc:
                    a6:a2:1a:f0:90:74:3d:f0:7c:be:18:9c:4f:3b:b9:
                    da:db:2e:7b:df:87:2a:37:da:c8:81:a3:cc:2a:81:
                    a7:5d:b0:52:df:63:21:4d:33:81:7b:27:15:44:21:
                    8e:4c:c4:cf:77:48:92:57:27:78:5f:cb:b5:88:d2:
                    32:4c:f2:b7:7d:35:ca:b5:17:bd:74:1f:38:1b:2a:
                    10:5a:e1:57:0f:42:06:75:2b:75:a7:f7:9f:99:9a:
                    ed:8e:3d:19:7c:35:bf:41:46:5e:c3:c9:58:66:0c:
                    8d:fc:93:36:8c:46:9b:f3:aa:e1:dc:18:e0:20:26:
                    ce:ff:34:ef:a6:61:9b:b4:f0:f3:c7:8c:bf:9b:eb:
                    bc:c5:b4:14:36:36:07:ac:32:28:6b:e2:38:4d:2a:
                    b4:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:4A:08:03:EA:E7:F1:B1:2B:6A:F0:64:B2:29:DD:04:65:BB:90:A4
            X509v3 Authority Key Identifier:
                keyid:BE:CE:C5:31:E5:C3:77:56:B8:28:66:3F:9C:C2:0A:D6:21:77:13:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vs7FMeXDd1a4KGY_nMIK1iF3E6w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/1bcb8b-a3f8-48cc-8db9-3df9e21f4bcc/1/vs7FMeXDd1a4KGY_nMIK1iF3E6w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:78:38:15:03:fe:4d:5e:11:04:de:f0:1c:74:a3:a1:6a:ca:
         c3:90:02:21:a2:26:c2:a4:3f:c3:f3:41:e5:92:1c:28:e3:ba:
         23:27:4f:0b:3a:ad:79:64:94:9f:62:9b:a0:27:2b:73:fe:02:
         fb:0c:91:1e:14:ec:bf:05:51:78:84:d1:83:e9:04:be:a4:25:
         36:91:d0:d8:71:2d:e6:40:1c:bf:07:b5:ce:60:5c:5d:9c:fe:
         ab:42:23:61:cf:fc:d4:57:a9:53:18:b3:76:1e:2c:41:8a:58:
         cb:8c:af:28:05:4f:b0:99:fc:bf:09:a5:09:9f:bd:4b:b7:06:
         78:74:39:5c:4a:ce:aa:fc:2d:bb:51:4a:aa:c3:92:29:b0:5f:
         6f:09:36:f5:38:e8:36:ab:72:9d:93:0b:9a:12:e4:6a:ac:b1:
         8b:7e:04:bc:72:a4:c3:3a:10:a8:02:f7:ff:9a:45:f2:26:4f:
         1a:4e:0b:a1:39:00:61:91:d3:45:f4:eb:3f:01:25:a0:ed:bd:
         c9:bd:b1:6b:a3:66:37:9a:88:62:ae:02:c6:3f:89:fc:24:1b:
         b0:20:de:ea:8e:b4:86:db:09:19:15:c7:ba:2d:c9:9d:00:92:
         08:7b:3c:39:d9:e2:03:ae:de:50:74:6c:24:80:9f:1f:12:b0:
         a6:80:ee:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:01:08 2026 by rpki-client