Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File:                     vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier:          IpKYgkxLlI7k+k2YWTkBPMYwqbHbZaaxXSkYnCjvAjI=
Subject key identifier:   EF:D6:24:C4:3D:C4:C4:49:64:78:B7:1C:F1:C8:2F:94:07:39:FD:81
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       019D99999D9FF8CBDAD93D18E32382CC678C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number:          18E7
Signing time:             Fri 17 Apr 2026 04:01:14 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:14 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:14 +0000
Files and hashes:         1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
                          2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
                          3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
                          4: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
                          5: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
                          6: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
                          7: S7aKv_q0tDa7opJxCQ6myrERZA8.roa (hash: Uo1iMGWEBLYQiw+xllR1axWHCCwJA31+dccJblnLXsY=)
                          8: YbiVbFuXcTmnqDJPuqbutg5azlI.roa (hash: suv2Xv3nrxD/FlkPKIbbU1EFp7k8UcHgjFF/BnohR4s=)
                          9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
                          10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
                          11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
                          12: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
                          13: suxAld0eLCOMHsl_sLkjVKo7KkM.roa (hash: R5brUZBQQ1qEtVF7VhLeGcz1HOKovt9yr4Mr8Yt/ia8=)
                          14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: GAaDauWc93hAU1VOut82bVFHfKB7SAlvorK1axR9h5c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:9d:9f:f8:cb:da:d9:3d:18:e3:23:82:cc:67:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: Apr 17 04:01:14 2026 GMT
            Not After : Apr 18 04:01:14 2026 GMT
        Subject: CN=efd624c43dc4c4496478b71cf1c82f940739fd81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7c:99:1d:31:8c:24:b6:bf:e4:23:37:91:9c:
                    1c:2d:93:b1:fa:93:06:93:74:0a:ea:fa:c3:68:48:
                    83:70:b3:3c:40:6f:7f:bf:f2:dd:e2:53:3e:60:1f:
                    22:5e:fd:12:a6:24:a9:8f:9d:01:dd:e0:b0:f0:a1:
                    9c:bc:fc:49:9d:b2:b9:d4:c6:df:d5:63:df:5c:6d:
                    16:ab:77:94:cc:b6:d6:a7:8b:d5:33:c9:02:47:35:
                    a6:fb:b8:02:73:c9:49:ed:8e:1b:a9:02:15:d6:c3:
                    2f:48:17:5d:01:e7:18:9a:a5:d5:d7:b5:1f:1f:e3:
                    db:1c:d5:70:c4:d5:ab:29:ed:02:d6:ab:ed:83:49:
                    e3:a2:87:76:bb:78:81:95:37:b5:49:7b:e8:a8:5c:
                    71:2b:23:e1:ed:d0:d3:f7:54:6a:b0:d4:7d:f8:4a:
                    73:59:4d:86:0d:be:f8:1f:c5:ab:3d:25:43:22:04:
                    88:22:26:c4:e1:53:66:42:83:74:08:c9:61:da:36:
                    ef:62:94:ed:b1:31:79:8f:e5:23:3f:97:42:b5:12:
                    1a:1e:79:d2:14:b0:d3:9d:f7:5e:f0:79:1e:52:c8:
                    de:bd:82:f9:cd:16:01:5b:30:2a:e5:f2:b8:4a:54:
                    99:4f:0d:fb:66:3e:d3:29:d7:d3:7e:f3:7b:44:91:
                    e8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:D6:24:C4:3D:C4:C4:49:64:78:B7:1C:F1:C8:2F:94:07:39:FD:81
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:29:a5:a5:b8:62:88:88:0e:c4:29:cd:93:f0:3a:3d:6a:b5:
         02:65:01:26:8f:67:ad:80:25:dc:27:16:1e:78:85:71:df:06:
         15:86:92:04:21:37:db:c0:2b:c2:69:53:cd:27:ad:39:bb:3c:
         16:2c:a5:02:e9:6e:05:a8:48:4e:5a:36:05:2f:cf:cc:c7:6a:
         16:73:7a:55:84:34:49:09:d6:fb:68:9f:a5:99:e5:5c:e5:95:
         34:f0:9a:31:d6:c4:e5:1c:6e:e0:1d:8c:ea:22:6d:0a:c3:47:
         71:29:22:38:7d:d0:00:68:22:5a:70:1b:51:1b:be:5b:90:e6:
         1e:7f:3a:43:f9:f7:50:47:86:56:c4:26:7b:64:92:89:6a:62:
         59:61:cf:20:05:5c:36:95:0b:ff:67:44:1a:6b:7e:75:2a:bb:
         67:51:db:be:58:bd:b7:96:f2:9a:cb:38:fb:00:9f:b8:00:30:
         72:53:5c:81:5a:e6:ad:7f:be:b2:db:c5:94:20:bb:a4:3e:46:
         7c:37:34:9f:5e:91:96:75:67:b2:af:54:41:1d:8b:9e:4e:81:
         d5:cb:a7:30:38:91:6c:b7:0d:0d:1e:ad:2e:fc:ee:75:a0:5d:
         1a:34:12:d8:af:7d:80:4c:15:75:c2:e3:24:8f:e2:17:d2:ed:
         84:be:ad:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:48:43 2026 by rpki-client