Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
File:                     VDxcNKYv--2PwPDsAbQsDFDufvc.mft (raw, json)
Hash identifier:          u1UAvxQQrx8QPJ8ppC87/l4QYf2pfXdjzMrhczRH9TA=
Subject key identifier:   A3:D5:78:CF:78:A0:D4:79:24:D8:65:36:40:2F:1E:C2:B1:53:5B:47
Authority key identifier: 54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7
Certificate issuer:       /CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
Certificate serial:       019FA9AC3C50C0D934E7E7EE0E523914E931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
Manifest number:          0BEF
Signing time:             Tue 28 Jul 2026 17:01:04 +0000
Manifest this update:     Tue 28 Jul 2026 17:01:04 +0000
Manifest next update:     Wed 29 Jul 2026 17:01:04 +0000
Files and hashes:         1: 44eS9htfDegZUnC2w7wAUmZuaWA.roa (hash: 6w+zcuKEWJgbCaB6Bdw72Y4/uXhHkVUunNc7dMXW0G0=)
                          2: 60wJ4Ifb12thZkTYydBMGCHyhjU.roa (hash: loGVk4GY7PqMyMndtxYwq4ib8ZW1ZuV/iu1LnLyoy/k=)
                          3: BP73BKF5mJwPLLJxOSLVxLOWrtk.roa (hash: Ld3t48e3ZQBGQXb3cT/E5oe6b14FRU/wgq1qRxepE/s=)
                          4: HMrWWr_GpU-7TilUWTszNhM4XF4.roa (hash: ZxbJ+8rmhmPIZSt+dx++l6IVbkPcuwgYpg8+JSAPwH4=)
                          5: KjnHPRF-cTfafr7GSVcAiCyWeb0.roa (hash: 3qGWJTyestuh3mdWTHBj0z2W00hoEy0Lbm5OnbjIxk0=)
                          6: LW7rb0AaEUjbPH9dnaOyHTBi76E.roa (hash: p1ZkXmO8OLBHzuVbdIzp+e8cKBOvTv26ZXhPyk/iQ9g=)
                          7: VDxcNKYv--2PwPDsAbQsDFDufvc.crl (hash: 1aSq2f6livskXVXRYVw1h9hkwO07Fo/RwVljXzBotTQ=)
                          8: iCDpMweR3UnjQ3t5pDnJ4r1H_Z8.roa (hash: p7eqJ/28CY3BrDo7BINDBAyzyYyfthKUBP0i3u+PKTY=)
                          9: zSQVk9Uctt-RfcBSveyCr38CFfA.roa (hash: tRgRAlHE1zW+KtCt3216eqpIBlefLEs1R+bVPcz6sq0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 29 Jul 2026 17:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:a9:ac:3c:50:c0:d9:34:e7:e7:ee:0e:52:39:14:e9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=543c5c34a62ffbed8fc0f0ec01b42c0c50ee7ef7
        Validity
            Not Before: Jul 28 17:01:04 2026 GMT
            Not After : Jul 29 17:01:04 2026 GMT
        Subject: CN=a3d578cf78a0d47924d86536402f1ec2b1535b47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:03:69:2b:7f:a9:d3:63:3a:ec:f7:23:8b:ba:
                    09:6f:6c:f3:fb:0e:85:18:cc:3e:c6:c7:7d:13:49:
                    67:d8:17:81:9b:25:2a:3d:b9:c2:d9:77:48:43:fb:
                    53:c9:3f:ca:c3:2c:aa:47:c0:d7:95:dd:ad:57:e3:
                    cd:c3:df:df:c2:96:47:6d:1a:96:c7:71:4f:ca:c9:
                    d3:28:7e:3f:1d:7e:0e:28:b4:49:57:3c:a0:f0:8f:
                    5e:cc:66:bf:a9:e2:8b:c4:7d:ac:d1:fe:cc:cf:cc:
                    50:bc:42:60:f8:f0:6c:dd:20:f3:30:15:6f:97:01:
                    1a:94:02:7a:33:e7:9e:d1:48:4e:b1:d8:46:1f:02:
                    89:b8:a7:34:6d:b7:c4:49:c8:06:9e:b0:3e:e5:8a:
                    b0:f2:92:fe:1c:75:0a:14:b8:40:e1:f2:9a:e5:04:
                    b4:47:bc:17:d7:9c:44:1f:eb:25:1a:88:d8:ae:85:
                    4e:d9:f8:18:a8:36:b7:4e:e0:ec:a2:d8:6f:48:85:
                    3b:32:6d:11:b5:ee:f5:43:76:89:6a:ec:a7:bc:e9:
                    93:97:16:39:7c:44:73:84:04:38:3b:42:be:a4:de:
                    63:de:00:46:ea:14:d7:95:1f:7d:8f:2d:75:2f:72:
                    eb:78:65:31:10:e2:77:1a:bf:da:6d:d9:7b:be:0e:
                    b9:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:D5:78:CF:78:A0:D4:79:24:D8:65:36:40:2F:1E:C2:B1:53:5B:47
            X509v3 Authority Key Identifier:
                keyid:54:3C:5C:34:A6:2F:FB:ED:8F:C0:F0:EC:01:B4:2C:0C:50:EE:7E:F7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxcNKYv--2PwPDsAbQsDFDufvc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/de/16e022-4da8-4684-85e6-f4f1f93e0467/1/VDxcNKYv--2PwPDsAbQsDFDufvc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:a5:1b:9f:f4:ac:0c:a3:ee:04:91:22:fe:63:b2:ad:54:05:
         a6:dc:77:34:fe:b0:a5:18:91:18:1f:cd:ad:f8:7a:83:41:c3:
         43:d2:a4:57:79:70:75:e6:ad:15:ce:eb:33:eb:ed:63:24:44:
         4a:b5:f6:a1:a2:89:a5:46:c8:9b:7e:2e:48:09:99:66:42:a6:
         05:cc:e4:13:05:d4:bd:03:a3:c7:11:da:5b:b6:09:69:e1:3d:
         8b:b2:80:b9:d0:87:b5:43:8b:71:a0:1e:67:3c:64:4e:17:87:
         0a:74:4a:8f:3c:15:a3:12:80:c6:9d:3c:2e:ae:57:1b:63:5d:
         f2:5b:69:bb:23:1e:df:99:a7:d5:7c:0f:8f:6f:be:b2:54:dd:
         ba:41:2b:50:ba:36:8e:c4:f6:4f:3c:5f:a4:ba:41:02:fd:53:
         2d:b0:ac:85:3d:1b:f9:41:c0:fa:d3:8b:07:b5:37:85:53:dd:
         c9:68:1f:fe:73:62:1d:46:ba:42:ce:14:0e:8e:65:85:df:9e:
         16:6a:94:7a:23:c0:26:40:3c:ec:5f:17:62:f3:e3:47:1a:b4:
         ab:db:4b:e0:60:6c:57:ea:43:fd:0f:48:a7:78:12:b4:42:bf:
         54:5f:32:9f:81:e9:24:b8:92:92:fe:18:77:fe:1a:ac:fa:b5:
         01:de:b5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 01:45:35 2026 by rpki-client