Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
File:                     vfegoEi2jsz6TUnqtPFtx5LA0xg.mft (raw, json)
Hash identifier:          15WzqOlshE0G+tHQQvhEasXawCuaudHdjaBIdGva2n4=
Subject key identifier:   3D:A8:AD:80:77:B3:45:D2:79:77:50:F7:30:FB:59:31:0D:5B:D5:F6
Authority key identifier: BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18
Certificate issuer:       /CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
Certificate serial:       019EBFC8B93D68F7B5F3A901DD574FE5EE26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
Manifest number:          195C
Signing time:             Sat 13 Jun 2026 07:01:03 +0000
Manifest this update:     Sat 13 Jun 2026 07:01:03 +0000
Manifest next update:     Sun 14 Jun 2026 07:01:03 +0000
Files and hashes:         1: BnK2KHVLfXFYZprocbcqi0uWmvQ.roa (hash: E9L3OqObWs7fRhTRDrPVJdHDCL6JkfqY/gTeWnuyhvY=)
                          2: _4nu0JdctABQfG6P-XC3LzNhZBE.roa (hash: nSLbmSJTCheEJNMNCsMJ1fslUe1Nu1RBlbJFPSZy178=)
                          3: r5h7ruFvhJsuD7J8OUk1-vn3q88.roa (hash: I4bKCAT+IE6ObCvpX9HNYNvEnnDXSrifQq4q4NebNTw=)
                          4: vfegoEi2jsz6TUnqtPFtx5LA0xg.crl (hash: RHoxx9gOGRUn1f5+IBJl4zVXX2+oqqI1QkTsv5Ukba8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 01:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:bf:c8:b9:3d:68:f7:b5:f3:a9:01:dd:57:4f:e5:ee:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdf7a0a048b68eccfa4d49eab4f16dc792c0d318
        Validity
            Not Before: Jun 13 07:01:03 2026 GMT
            Not After : Jun 14 07:01:03 2026 GMT
        Subject: CN=3da8ad8077b345d2797750f730fb59310d5bd5f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:45:bc:d7:85:86:b1:9a:72:ca:cf:6c:3d:cc:
                    93:8d:c4:e7:fa:e8:14:d2:f8:8b:3c:7e:6c:72:9d:
                    3f:33:ae:0e:d0:2a:83:86:c6:c3:e9:09:d3:d3:e6:
                    3e:9f:fb:ed:74:b8:e4:18:64:a5:23:04:64:5e:4a:
                    c0:34:f5:ff:4b:20:8b:16:a5:3d:ef:91:81:6c:d3:
                    01:13:31:4b:70:c1:7e:ad:65:b6:c0:01:2e:7d:8f:
                    35:23:f5:81:c2:aa:a6:84:ae:d8:d9:1d:2b:cc:c9:
                    48:db:f5:05:4f:cc:df:0a:68:06:00:a6:1f:ec:d2:
                    20:9e:c7:67:f2:2a:a1:a4:2d:a7:59:b5:c5:fe:c2:
                    b0:f1:7a:03:8c:f2:c3:c5:7b:4a:c0:42:be:39:b5:
                    00:eb:2e:43:32:6c:51:17:35:a1:c5:77:9a:fb:2e:
                    d7:dc:d0:45:26:da:36:8b:6e:a3:4a:f6:f5:c6:44:
                    4d:ef:d1:e4:d4:99:ed:8f:30:48:d1:3b:9b:0d:93:
                    e1:80:96:20:a4:48:e0:94:a5:b6:0e:b1:cd:2f:7c:
                    72:94:c3:ca:40:b8:17:ba:64:f3:3b:f1:2e:22:d0:
                    b9:aa:93:df:e0:0c:ec:9e:a4:76:b0:37:21:bb:1a:
                    54:2d:f7:a1:5c:b1:2a:82:19:fc:b2:a0:b5:ba:17:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A8:AD:80:77:B3:45:D2:79:77:50:F7:30:FB:59:31:0D:5B:D5:F6
            X509v3 Authority Key Identifier:
                keyid:BD:F7:A0:A0:48:B6:8E:CC:FA:4D:49:EA:B4:F1:6D:C7:92:C0:D3:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfegoEi2jsz6TUnqtPFtx5LA0xg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/e16cb6-b454-48d6-bdc8-3516191a9d68/1/vfegoEi2jsz6TUnqtPFtx5LA0xg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:c2:0e:65:db:ec:06:e9:27:36:d0:f1:06:4a:1b:1a:19:33:
         94:79:0f:80:8f:3f:4d:f1:83:d5:e8:e8:36:39:c3:7c:f5:d3:
         c5:f7:09:43:92:cc:51:5c:ba:cb:45:e7:6a:6a:df:ac:3a:a4:
         80:15:20:b6:2a:9e:d8:ec:f1:d6:a4:66:42:19:e3:cd:ca:b7:
         b3:fb:b8:86:41:a1:f5:3a:49:d4:93:ca:70:76:66:1a:e0:ec:
         55:3f:2e:bb:01:5e:af:df:87:55:41:3c:3f:0d:5f:4f:78:ec:
         5c:e2:b4:d7:e0:c5:85:45:81:a4:30:44:fc:1e:7a:7f:3a:14:
         83:16:8c:a6:81:88:0e:6e:b5:d6:b6:87:8f:09:5d:4a:a1:3a:
         fe:42:e6:91:98:41:32:5f:7e:25:bc:79:36:0b:4e:90:d7:5c:
         6d:47:50:5a:2d:79:ff:a4:b9:0f:a3:0f:eb:b5:aa:89:d2:79:
         55:d1:76:2a:24:55:2a:78:2c:c4:62:2f:e0:ec:ae:63:41:01:
         40:65:b0:e0:00:90:96:49:a8:33:43:ba:2e:7c:71:99:2d:a1:
         82:d6:ce:b9:cd:d5:ff:e4:d4:5d:36:a4:5b:9e:06:e7:1b:3d:
         43:9f:8b:0c:81:fb:6e:c8:03:96:ec:43:72:a9:7f:d3:55:6e:
         f9:f9:8b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:50:14 2026 by rpki-client