Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File:                     vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier:          anvYrjhLhdlFEg995nLpIIzQaCS1dx3XN4GII92eMLs=
Subject key identifier:   1A:FE:6B:F8:67:10:76:76:13:02:D6:63:FE:95:4D:09:F4:23:46:ED
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       019FAD1AE5FB85500B4846AC5411B0354921
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number:          19FE
Signing time:             Wed 29 Jul 2026 09:00:48 +0000
Manifest this update:     Wed 29 Jul 2026 09:00:48 +0000
Manifest next update:     Thu 30 Jul 2026 09:00:48 +0000
Files and hashes:         1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
                          2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
                          3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
                          4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=)
                          5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
                          6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
                          7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
                          8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=)
                          9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
                          10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
                          11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
                          12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=)
                          13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
                          14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: GxLOG9ZDzmVZ/ebYEVla5MKV3sooYdWYQQSlSiiCPzg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 30 Jul 2026 08:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:ad:1a:e5:fb:85:50:0b:48:46:ac:54:11:b0:35:49:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: Jul 29 09:00:48 2026 GMT
            Not After : Jul 30 09:00:48 2026 GMT
        Subject: CN=1afe6bf8671076761302d663fe954d09f42346ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0e:3e:34:5e:f7:40:5f:1d:e5:22:be:09:21:
                    71:16:37:e1:4e:49:33:8b:2f:2e:c8:53:88:ff:dc:
                    4f:b7:d5:f5:7c:02:21:c0:63:dc:b3:fe:16:71:45:
                    9d:ed:7c:ad:f8:60:e2:4c:a0:8b:b5:63:29:3a:fc:
                    5a:a1:df:eb:e3:1d:fe:ce:3c:9b:2e:6e:4c:10:68:
                    ab:db:f9:e3:c4:e3:af:e7:6c:6f:32:00:d1:85:65:
                    95:b4:e8:70:7a:d5:4c:dc:a9:fa:6e:4f:fb:79:56:
                    fe:6f:28:b0:b4:24:c3:9b:59:e9:54:2a:7b:ff:9a:
                    c4:c3:5f:ce:62:ab:59:07:c5:66:d2:3b:4c:ef:9d:
                    bf:3c:5c:e9:1a:5d:3f:67:f1:97:4d:52:48:c6:fb:
                    55:d6:21:42:e6:86:83:e0:41:8b:43:8a:c4:c4:f8:
                    f7:47:24:76:ff:a0:1d:dc:88:b4:6e:44:ae:42:3d:
                    e9:83:ac:f5:5a:ad:e7:98:72:3c:13:1e:2d:71:c4:
                    2c:a6:38:a3:eb:ce:a9:f6:78:ce:f0:ee:f6:47:fc:
                    dc:3b:70:f1:c2:6a:65:36:39:22:7d:5a:22:96:59:
                    6d:89:90:74:d3:97:08:be:18:a6:67:8a:1e:c8:27:
                    05:bb:3a:e7:87:c9:10:a1:ed:ba:c4:a4:b2:6b:47:
                    8b:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:FE:6B:F8:67:10:76:76:13:02:D6:63:FE:95:4D:09:F4:23:46:ED
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:06:05:8a:79:d6:aa:0d:a6:1b:13:ff:88:10:d2:39:d0:33:
         59:d1:96:32:5c:15:73:45:f8:28:e6:5d:86:65:ac:f8:a8:49:
         71:41:9d:30:a8:be:ec:32:d6:f2:99:c7:f7:d0:66:1e:64:99:
         12:3e:bd:cb:e1:77:90:16:d3:c9:1a:aa:ef:91:84:ab:4c:f7:
         3c:1b:df:0a:00:41:c7:5c:6c:c2:c0:b0:c2:d4:9d:71:b7:78:
         22:e2:c0:93:a1:1c:2c:43:f6:e0:68:46:9c:3b:93:e3:42:53:
         75:8b:14:84:c3:50:65:02:fa:4a:7d:33:2b:e3:81:d6:81:95:
         b5:b9:4d:b8:32:87:4f:43:95:58:8e:22:e4:bd:63:8f:d1:ca:
         b7:ab:42:65:54:5d:15:49:d1:49:68:ce:8b:9c:e9:c9:0b:7d:
         e2:89:b7:11:2e:82:52:64:e4:dd:da:b5:b7:88:aa:6d:53:bc:
         c4:f8:21:cb:e6:24:6a:6e:ea:3f:fa:0c:2c:44:62:22:d0:e2:
         74:6b:4f:67:7f:9e:1b:88:96:55:f6:49:6e:f1:7d:02:d8:bb:
         15:14:ff:9c:a1:c9:fc:73:04:85:a3:e1:95:38:af:30:42:95:
         ae:4e:c2:e3:fc:be:4b:51:10:30:f3:9e:60:4d:cd:a0:88:e1:
         46:b2:d9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 13:28:04 2026 by rpki-client