Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
File:                     vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft (raw, json)
Hash identifier:          N0xIkeKkq3Z/b/nDIf0ekckMhtflHwSxlwxdJJVpG9Q=
Subject key identifier:   23:81:B3:4A:12:4F:5E:07:0A:1D:8C:DF:6E:F7:91:2A:3A:C1:B9:05
Authority key identifier: BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0
Certificate issuer:       /CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
Certificate serial:       019EC17FA42EFA0286383003EB2887BD1F46
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
Manifest number:          0555
Signing time:             Sat 13 Jun 2026 15:00:28 +0000
Manifest this update:     Sat 13 Jun 2026 15:00:28 +0000
Manifest next update:     Sun 14 Jun 2026 15:00:28 +0000
Files and hashes:         1: QcbxS7Mw8NbBuK9mNnK6HmsZQRw.roa (hash: w4kPZO+ZQt1G4XTx1vF54QBmA4+gouCZ4x1zUSlQXS4=)
                          2: vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl (hash: RSv+d7YagBaZ5vYM7kN66gWNUjES2bpBrbZb8Sc159s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 14 Jun 2026 08:43:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9e:c1:7f:a4:2e:fa:02:86:38:30:03:eb:28:87:bd:1f:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc5380d742bef2423fcfd6d303d73a67917aaec0
        Validity
            Not Before: Jun 13 15:00:28 2026 GMT
            Not After : Jun 14 15:00:28 2026 GMT
        Subject: CN=2381b34a124f5e070a1d8cdf6ef7912a3ac1b905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d9:11:96:ac:16:f4:db:f3:a7:66:3a:25:bb:
                    10:d3:4d:72:56:ef:3b:6b:79:ab:f8:bc:a9:e8:a8:
                    0a:41:14:64:0e:0b:61:1b:21:cb:e9:1b:6f:97:f3:
                    f2:7d:4b:99:97:db:fb:60:05:94:ab:75:e2:f8:0e:
                    5d:7d:9e:7d:59:61:de:1d:eb:5e:bd:9c:6a:30:76:
                    be:ea:c4:19:b1:ab:1f:aa:e9:96:fb:51:38:0c:5f:
                    79:3f:58:11:80:0d:a1:82:85:93:44:b2:38:79:7e:
                    9d:81:cc:6e:3e:3d:ee:40:7b:0e:a7:9f:ee:1f:47:
                    b1:35:19:cd:5b:c3:be:94:dd:c0:32:22:d7:de:3a:
                    04:ca:7d:20:c3:65:98:49:fa:29:f6:a9:b1:46:c1:
                    7f:7e:79:f1:7f:90:2e:ed:b0:22:9b:b5:bb:a3:17:
                    b7:d4:a7:98:8b:2b:90:4e:b8:ad:45:da:90:3f:35:
                    06:e2:38:35:72:6c:ec:a8:fa:47:9d:aa:bd:94:43:
                    92:70:a0:bb:cf:bb:07:93:72:0c:f8:65:5b:4a:c2:
                    7c:3b:d5:fe:d8:b7:f8:d6:73:f8:3d:f8:d6:31:db:
                    6a:3d:e7:3d:50:ec:06:bd:b7:72:c9:47:a4:5b:e4:
                    23:33:23:71:17:69:dc:00:0d:ed:69:97:95:8c:84:
                    7f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:81:B3:4A:12:4F:5E:07:0A:1D:8C:DF:6E:F7:91:2A:3A:C1:B9:05
            X509v3 Authority Key Identifier:
                keyid:BC:53:80:D7:42:BE:F2:42:3F:CF:D6:D3:03:D7:3A:67:91:7A:AE:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vFOA10K-8kI_z9bTA9c6Z5F6rsA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/23/686de6-b13c-4dac-aaae-d8fe2c085810/1/vFOA10K-8kI_z9bTA9c6Z5F6rsA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:a4:ce:2f:7b:a6:99:9a:64:2e:ae:01:c1:8b:17:0c:0a:e6:
         f9:78:91:bc:aa:e7:8c:e7:61:a1:a1:96:29:4d:54:9a:40:4b:
         0d:6d:6a:4f:39:8f:28:b5:72:dd:89:f3:07:85:18:a7:44:24:
         31:39:94:c7:ac:ee:6b:93:f9:60:1a:27:89:ef:f7:96:e2:fd:
         d8:be:31:04:40:f9:50:c9:7c:c1:0a:43:83:47:06:8c:2d:c5:
         48:c5:9d:8e:16:f0:ca:2e:91:77:c9:d0:86:ca:ab:81:b4:49:
         4e:82:fa:64:17:2e:71:38:74:45:7d:4c:48:f3:ee:6a:5b:ca:
         85:9f:4d:ff:ee:7e:dc:f0:33:ae:7d:78:61:df:c7:b1:0e:c5:
         cc:07:b6:48:31:ee:9d:fb:0a:3e:14:d3:c4:65:c5:47:7e:52:
         d0:83:58:97:96:64:fc:21:b1:4d:9d:4b:69:09:37:1f:ca:fd:
         38:04:15:a3:68:2f:d9:22:fd:2e:ae:28:e9:d7:7c:5d:08:81:
         11:a7:37:ea:5c:eb:6b:75:09:bc:bf:c1:8e:a2:94:88:da:39:
         55:3e:37:dd:0d:7a:96:09:ec:8c:ac:9e:ca:a9:08:75:56:0e:
         be:19:ad:f6:da:b7:bf:52:55:c4:1e:d4:10:07:54:46:c7:77:
         c4:d9:4d:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:42:10 2026 by rpki-client