Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
File:                     vPVGNoDRS2RYax1bRlZjvLV35pM.mft (raw, json)
Hash identifier:          vWQiAAuWXnIYlc3cSqZQbJBADCLfCvzjcySrL3ke4Bc=
Subject key identifier:   6D:E1:46:E5:E4:79:01:A4:9F:82:1F:09:9B:8B:33:8E:26:A5:F3:D9
Authority key identifier: BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93
Certificate issuer:       /CN=bcf5463680d14b64586b1d5b465663bcb577e693
Certificate serial:       01A0F568F25F43D2A888E148301C1B49FA23
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
Manifest number:          1A81
Signing time:             Thu 01 Oct 2026 03:01:30 +0000
Manifest this update:     Thu 01 Oct 2026 03:01:30 +0000
Manifest next update:     Fri 02 Oct 2026 03:01:30 +0000
Files and hashes:         1: 473COPKd9olJMqE4kR25XOWDFnY.roa (hash: monMcaQ2KeRWOvX/C8J08SlGKpHbfXIEgRkLvwPSBPI=)
                          2: vPVGNoDRS2RYax1bRlZjvLV35pM.crl (hash: kUwhhTCa/iRt/KjvVsL+opPgaieJWQETuhgC2QDHKOY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 01 Oct 2026 20:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:f5:68:f2:5f:43:d2:a8:88:e1:48:30:1c:1b:49:fa:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcf5463680d14b64586b1d5b465663bcb577e693
        Validity
            Not Before: Oct  1 03:01:30 2026 GMT
            Not After : Oct  2 03:01:30 2026 GMT
        Subject: CN=6de146e5e47901a49f821f099b8b338e26a5f3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:25:c0:6e:fd:6c:9d:65:b9:15:14:1d:48:db:
                    e9:dd:2c:8b:e7:03:c9:3f:0d:11:39:c2:b7:aa:ce:
                    50:46:1d:f3:fb:5c:9b:28:81:a2:a4:39:dc:05:08:
                    bc:4f:24:63:37:02:68:99:ff:88:36:2a:a8:a8:38:
                    bd:b0:73:92:fa:b2:38:40:5a:fe:42:b8:af:83:41:
                    40:74:5f:61:24:82:a3:21:84:24:19:d2:f0:22:5b:
                    be:d3:1c:cc:cb:f8:28:38:d5:40:68:50:97:18:a4:
                    d6:2b:d2:01:30:c5:44:99:ce:6e:04:a3:e4:f5:f4:
                    93:18:21:93:1d:79:1d:bd:39:5c:69:d9:0e:96:e4:
                    ed:dc:0f:53:35:b8:04:a2:75:ec:05:f7:5f:82:18:
                    5f:42:aa:e1:db:3b:27:7e:6d:7b:24:33:f0:72:74:
                    bd:3c:44:f5:2f:7d:93:e1:d2:1f:cd:ae:a6:25:fa:
                    11:81:e4:7f:f7:39:6a:b8:60:29:46:a8:19:20:10:
                    1b:59:ea:10:05:6c:d5:6c:30:45:1a:2b:bc:f8:90:
                    db:5a:c5:59:55:93:e7:50:6d:ab:7c:6d:a6:e1:d7:
                    aa:10:13:05:7a:dd:f7:33:3b:8a:39:ad:a3:49:21:
                    59:31:c8:ab:08:b3:3e:1a:29:23:e6:d7:ce:67:d3:
                    c4:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:E1:46:E5:E4:79:01:A4:9F:82:1F:09:9B:8B:33:8E:26:A5:F3:D9
            X509v3 Authority Key Identifier:
                keyid:BC:F5:46:36:80:D1:4B:64:58:6B:1D:5B:46:56:63:BC:B5:77:E6:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPVGNoDRS2RYax1bRlZjvLV35pM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/f5fc76-5016-4968-829b-473045a93a05/1/vPVGNoDRS2RYax1bRlZjvLV35pM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:09:0b:3e:df:14:19:26:f6:a1:11:50:73:31:d7:e8:5b:41:
         60:8e:4a:81:85:e7:6b:ef:db:66:95:cd:a3:80:c8:8e:0e:9c:
         86:b3:39:08:1a:35:63:36:6c:0a:fe:12:2a:22:fb:2e:47:ff:
         8d:87:d8:7b:78:7d:97:e1:d7:7e:3d:26:c4:ef:2a:d0:7e:98:
         a7:61:2c:64:74:3d:40:1f:cf:19:85:3a:61:fb:f0:04:2d:44:
         42:20:d2:e4:a7:cf:e3:bc:7c:ce:e4:eb:02:62:b8:88:ad:20:
         e1:19:dd:2b:4a:62:c1:00:92:8c:09:72:4f:fd:a7:4a:9b:f8:
         30:f8:9b:4f:81:79:ae:eb:75:31:c2:c4:77:c8:18:2c:1f:34:
         53:40:58:ec:ff:40:49:72:0b:bc:d8:97:9f:39:84:3a:7c:bb:
         b9:7e:97:69:de:72:c2:1c:73:12:8e:90:70:98:89:f5:3d:e0:
         ce:ae:6d:3a:c4:24:c9:c4:f3:6a:b2:d5:84:2f:0a:e2:f7:ec:
         c8:94:4d:cb:e8:9b:53:bc:27:a6:b4:fd:79:0b:79:cc:39:bc:
         bb:c5:80:31:70:cd:e3:c8:33:42:ef:4b:da:ad:a3:d2:31:d9:
         16:07:71:56:a0:14:74:8a:71:42:59:7d:5c:57:10:d4:61:b3:
         12:21:df:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaD1aPJfQ9KoiOFIMBwbSfojMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZjU0NjM2ODBkMTRiNjQ1ODZiMWQ1YjQ2NTY2M2JjYjU3
N2U2OTMwHhcNMjYxMDAxMDMwMTMwWhcNMjYxMDAyMDMwMTMwWjAzMTEwLwYDVQQD
Eyg2ZGUxNDZlNWU0NzkwMWE0OWY4MjFmMDk5YjhiMzM4ZTI2YTVmM2Q5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwSXAbv1snWW5FRQdSNvp3SyL5wPJ
Pw0ROcK3qs5QRh3z+1ybKIGipDncBQi8TyRjNwJomf+INiqoqDi9sHOS+rI4QFr+
Qrivg0FAdF9hJIKjIYQkGdLwIlu+0xzMy/goONVAaFCXGKTWK9IBMMVEmc5uBKPk
9fSTGCGTHXkdvTlcadkOluTt3A9TNbgEonXsBfdfghhfQqrh2zsnfm17JDPwcnS9
PET1L32T4dIfza6mJfoRgeR/9zlquGApRqgZIBAbWeoQBWzVbDBFGiu8+JDbWsVZ
VZPnUG2rfG2m4deqEBMFet33MzuKOa2jSSFZMcirCLM+Gikj5tfOZ9PEvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3hRuXkeQGkn4IfCZuLM44mpfPZMB8GA1UdIwQY
MBaAFLz1RjaA0UtkWGsdW0ZWY7y1d+aTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWIt
NDczMDQ1YTkzYTA1LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi9mNWZjNzYtNTAxNi00OTY4LTgyOWItNDczMDQ1YTkzYTA1
LzEvdlBWR05vRFJTMlJZYXgxYlJsWmp2TFYzNXBNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlQkLPt8U
GSb2oRFQczHX6FtBYI5KgYXna+/bZpXNo4DIjg6chrM5CBo1YzZsCv4SKiL7Lkf/
jYfYe3h9l+HXfj0mxO8q0H6Yp2EsZHQ9QB/PGYU6YfvwBC1EQiDS5KfP47x8zuTr
AmK4iK0g4RndK0piwQCSjAlyT/2nSpv4MPibT4F5rut1McLEd8gYLB80U0BY7P9A
SXILvNiXnzmEOny7uX6Xad5ywhxzEo6QcJiJ9T3gzq5tOsQkycTzarLVhC8K4vfs
yJRNy+ibU7wnprT9eQt5zDm8u8WAMXDN48gzQu9L2q2j0jHZFgdxVqAUdIpxQll9
XFcQ1GGzEiHfig==
-----END CERTIFICATE-----
Generated at Thu Oct 1 10:45:45 2026 by rpki-client