Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          A8/wOceag8LRSbXPVdQFbcrHIxjcu1LpSSbApZiaBPo=
Subject key identifier:   99:C2:42:51:47:8B:63:A9:D7:D7:3D:85:85:87:DC:1C:93:39:50:E4
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019F8FEBE18911AA1EA6F57B60F6E9B00404
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          1253
Signing time:             Thu 23 Jul 2026 17:00:28 +0000
Manifest this update:     Thu 23 Jul 2026 17:00:28 +0000
Manifest next update:     Fri 24 Jul 2026 17:00:28 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: Co76zipVV1uyuAIR6ApA1BbZqecyg8Yn5jlYCAAIhag=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 14:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:8f:eb:e1:89:11:aa:1e:a6:f5:7b:60:f6:e9:b0:04:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Jul 23 17:00:28 2026 GMT
            Not After : Jul 24 17:00:28 2026 GMT
        Subject: CN=99c24251478b63a9d7d73d858587dc1c933950e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a8:7a:b7:e5:db:0a:ff:d4:13:03:53:3c:21:
                    3d:88:48:ec:e5:5d:19:04:63:3a:e6:76:39:fb:02:
                    83:db:5c:6f:0f:e5:da:cb:46:b8:6a:77:fd:52:5e:
                    a7:79:59:d3:2c:b3:09:e1:30:20:3d:78:e0:a0:42:
                    49:d5:05:43:59:46:a9:9b:8c:9a:30:49:ef:de:c8:
                    f2:91:79:ec:55:95:1c:c9:01:4e:40:05:6a:42:70:
                    86:01:3f:34:19:eb:15:31:ee:2f:46:98:f5:e3:ad:
                    37:0d:97:e1:d7:6d:bd:8d:91:c2:b7:da:5a:01:a4:
                    8f:ac:3e:db:f3:88:2e:b6:e8:e2:09:49:59:3d:a6:
                    09:52:25:aa:24:d3:40:1a:c4:5a:a1:09:1a:2c:ae:
                    8e:46:51:ae:62:82:2e:7b:09:07:ab:56:c6:a1:09:
                    af:46:4b:e2:0e:79:12:96:18:d9:18:bc:30:b0:5f:
                    dc:99:d9:c4:fd:92:2a:35:d7:51:c5:b8:46:53:ee:
                    cd:2b:99:ea:0f:a4:e1:71:92:62:f0:2b:f9:0d:4d:
                    02:ec:ce:bf:8c:e9:b6:7e:79:3f:3a:19:0a:58:5f:
                    b0:83:34:1e:de:8e:58:e1:13:b4:06:06:49:fc:bb:
                    ae:e2:71:61:bb:50:78:bc:f6:40:9e:0e:2a:14:21:
                    fa:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:C2:42:51:47:8B:63:A9:D7:D7:3D:85:85:87:DC:1C:93:39:50:E4
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:6a:4f:7c:5c:ad:9e:3a:e1:2c:ca:94:30:6f:9c:42:c0:1a:
         96:70:b9:51:7f:32:72:f6:56:72:3a:27:82:f9:80:8e:a8:33:
         a7:ca:c2:99:8d:c3:cd:3a:b3:fb:62:2c:17:4b:5c:e9:10:0b:
         06:bd:8e:5a:8a:64:3a:00:c7:8c:15:90:db:95:16:27:18:d6:
         bf:1f:a8:81:3b:44:ed:fc:27:93:cb:31:1e:4c:1c:4c:a7:d9:
         7c:e5:81:c9:08:26:f5:29:f7:99:01:02:78:07:87:98:0c:d4:
         18:55:c3:fd:91:0a:e1:fd:60:04:51:ae:f3:2a:a9:48:d9:33:
         6e:a6:13:8c:71:bd:22:78:6e:03:f4:cd:24:4a:07:b6:21:20:
         7a:72:e5:a6:7d:8c:b8:da:50:a2:66:9e:08:b0:3d:2c:a2:fd:
         70:33:3a:11:74:b7:9c:2c:9f:a8:18:57:e3:26:20:5b:25:91:
         6f:d7:d3:3c:94:c1:1c:68:72:5c:21:e1:03:3a:f8:0e:d2:2f:
         07:2d:3d:81:a9:44:db:02:8a:8f:7c:7c:4e:4f:b3:40:4b:de:
         98:ed:ea:be:94:1a:7b:d1:67:ef:85:f0:91:c4:a5:80:d3:35:
         0f:cf:9a:81:36:9a:c9:fd:7b:5a:9f:db:fe:7c:37:3c:b5:18:
         ba:cc:51:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+P6+GJEaoepvV7YPbpsAQEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmQyZGE1NDQ3ZDAwNzYxNmViZGRjMmE3MGZlYWM1ZTc3
YzRhOGIwHhcNMjYwNzIzMTcwMDI4WhcNMjYwNzI0MTcwMDI4WjAzMTEwLwYDVQQD
Eyg5OWMyNDI1MTQ3OGI2M2E5ZDdkNzNkODU4NTg3ZGMxYzkzMzk1MGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuKh6t+XbCv/UEwNTPCE9iEjs5V0Z
BGM65nY5+wKD21xvD+Xay0a4anf9Ul6neVnTLLMJ4TAgPXjgoEJJ1QVDWUapm4ya
MEnv3sjykXnsVZUcyQFOQAVqQnCGAT80GesVMe4vRpj14603DZfh1229jZHCt9pa
AaSPrD7b84gutujiCUlZPaYJUiWqJNNAGsRaoQkaLK6ORlGuYoIuewkHq1bGoQmv
RkviDnkSlhjZGLwwsF/cmdnE/ZIqNddRxbhGU+7NK5nqD6ThcZJi8Cv5DU0C7M6/
jOm2fnk/OhkKWF+wgzQe3o5Y4RO0BgZJ/Luu4nFhu1B4vPZAng4qFCH68QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnCQlFHi2Op19c9hYWH3ByTOVDkMB8GA1UdIwQY
MBaAFLz9LaVEfQB2FuvdwqcP6sXnfEqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQt
YmJmZTIxOTZjNmFmLzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQtYmJmZTIxOTZjNmFm
LzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuWpPfFyt
njrhLMqUMG+cQsAalnC5UX8ycvZWcjongvmAjqgzp8rCmY3DzTqz+2IsF0tc6RAL
Br2OWopkOgDHjBWQ25UWJxjWvx+ogTtE7fwnk8sxHkwcTKfZfOWByQgm9Sn3mQEC
eAeHmAzUGFXD/ZEK4f1gBFGu8yqpSNkzbqYTjHG9InhuA/TNJEoHtiEgenLlpn2M
uNpQomaeCLA9LKL9cDM6EXS3nCyfqBhX4yYgWyWRb9fTPJTBHGhyXCHhAzr4DtIv
By09galE2wKKj3x8Tk+zQEvemO3qvpQae9Fn74XwkcSlgNM1D8+agTaayf17Wp/b
/nw3PLUYusxRpQ==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:06:36 2026 by rpki-client