Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File:                     vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier:          LmWAECiaQj/Vecv6tdzIvY3WeBG3AoWQlW1PaXRNCMs=
Subject key identifier:   17:71:C7:CB:EE:EB:AA:3C:AC:91:DA:A4:82:E7:31:BB:9E:C0:32:89
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       019F921159B01B8F30452DB64DD1E7B71B02
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number:          19F0
Signing time:             Fri 24 Jul 2026 03:00:38 +0000
Manifest this update:     Fri 24 Jul 2026 03:00:38 +0000
Manifest next update:     Sat 25 Jul 2026 03:00:38 +0000
Files and hashes:         1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
                          2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
                          3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
                          4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=)
                          5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
                          6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
                          7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
                          8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=)
                          9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
                          10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
                          11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
                          12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=)
                          13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
                          14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: XiQNmHkrOvnV8i3BIL/bDzGBA/pRxXnqX3r3QS4NIYQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 24 Jul 2026 23:00:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:92:11:59:b0:1b:8f:30:45:2d:b6:4d:d1:e7:b7:1b:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: Jul 24 03:00:38 2026 GMT
            Not After : Jul 25 03:00:38 2026 GMT
        Subject: CN=1771c7cbeeebaa3cac91daa482e731bb9ec03289
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d7:de:36:e9:49:df:39:2d:8e:6a:e4:fe:93:
                    28:e2:4e:3c:76:a5:cd:79:c4:1d:93:41:66:25:78:
                    de:13:4a:d6:e6:78:e7:51:04:91:5d:f5:08:22:da:
                    fd:92:2e:d6:48:e4:91:ed:a5:ec:c2:a5:c4:58:2e:
                    1e:7d:a8:b5:49:54:d5:95:44:25:d3:96:24:0f:c6:
                    a6:73:ee:ae:2d:08:28:31:73:fb:9d:ac:f5:96:06:
                    60:9d:1c:02:eb:26:f9:44:f6:d1:3b:63:b9:3a:92:
                    53:c4:54:e5:29:6c:73:d7:8b:3e:33:ca:07:2b:2f:
                    9c:f1:7d:3f:d6:46:b7:bc:e1:f8:57:80:12:2e:22:
                    72:d5:19:9d:06:1a:db:fc:7e:65:b9:7c:d7:9d:25:
                    a5:9b:44:ff:82:a6:36:2c:5a:c6:7a:e9:3e:06:c9:
                    b1:9b:fe:02:35:82:83:c9:c6:f6:ac:48:a5:31:2f:
                    b6:ea:99:99:f2:e0:2a:4d:2d:a8:08:40:8e:09:cd:
                    11:5e:b7:39:1a:fc:ff:2a:0f:ed:da:87:98:d6:4d:
                    cf:df:b5:48:4b:df:47:ce:c2:c8:b3:f3:fa:fd:66:
                    38:24:a2:f3:82:9c:6c:35:20:ea:49:fa:12:1d:c9:
                    8e:fe:1d:1a:bc:08:aa:82:fa:5a:d2:b2:21:c7:b5:
                    dc:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:71:C7:CB:EE:EB:AA:3C:AC:91:DA:A4:82:E7:31:BB:9E:C0:32:89
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:04:d6:6e:4c:4d:e1:db:9f:5e:a3:c4:c8:57:e9:13:61:a5:
         44:31:b5:8d:36:9d:4a:61:21:a8:19:6b:92:38:2e:a4:8e:3f:
         27:27:8f:a3:ce:30:d1:c0:d6:c0:12:13:a8:dd:b3:1f:c5:f9:
         fc:4e:59:29:33:c9:bc:07:e5:2c:0a:cb:49:35:51:d1:eb:3d:
         6d:be:13:0e:f5:0b:cc:15:a5:cb:d6:8b:6d:11:04:c8:ce:bf:
         2e:94:5d:6c:2f:c6:9a:34:f0:f8:d0:c1:6e:dc:46:0a:e4:9d:
         9e:ec:fc:14:99:d2:c6:32:64:18:f2:42:b9:d6:4c:22:59:73:
         bc:f1:e1:cb:7d:4d:ad:90:2a:40:6d:6c:b0:50:f2:ab:f8:2b:
         ad:dc:9c:ae:81:ed:47:14:05:71:80:d5:21:b6:86:47:cb:08:
         4c:76:a4:07:a9:18:e7:9c:60:45:2a:8c:97:dc:3f:af:69:58:
         b5:bc:81:71:fe:19:ce:07:87:ac:47:78:6b:9a:bd:bc:80:ad:
         ca:70:0d:88:f2:5b:b2:54:6f:79:b7:cd:be:a3:27:36:40:83:
         3f:6c:39:ee:9d:2d:ec:31:64:2d:55:4e:d0:58:8d:f4:59:77:
         c3:22:9c:a4:05:22:c9:a6:8b:14:9c:f2:bc:49:af:73:2d:b1:
         63:ef:d2:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+SEVmwG48wRS22TdHntxsCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2
ZjFmZmYwHhcNMjYwNzI0MDMwMDM4WhcNMjYwNzI1MDMwMDM4WjAzMTEwLwYDVQQD
EygxNzcxYzdjYmVlZWJhYTNjYWM5MWRhYTQ4MmU3MzFiYjllYzAzMjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlNfeNulJ3zktjmrk/pMo4k48dqXN
ecQdk0FmJXjeE0rW5njnUQSRXfUIItr9ki7WSOSR7aXswqXEWC4efai1SVTVlUQl
05YkD8amc+6uLQgoMXP7naz1lgZgnRwC6yb5RPbRO2O5OpJTxFTlKWxz14s+M8oH
Ky+c8X0/1ka3vOH4V4ASLiJy1RmdBhrb/H5luXzXnSWlm0T/gqY2LFrGeuk+Bsmx
m/4CNYKDycb2rEilMS+26pmZ8uAqTS2oCECOCc0RXrc5Gvz/Kg/t2oeY1k3P37VI
S99HzsLIs/P6/WY4JKLzgpxsNSDqSfoSHcmO/h0avAiqgvpa0rIhx7XcQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBdxx8vu66o8rJHapILnMbuewDKJMB8GA1UdIwQY
MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt
NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0
LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqgTWbkxN
4dufXqPEyFfpE2GlRDG1jTadSmEhqBlrkjgupI4/JyePo84w0cDWwBITqN2zH8X5
/E5ZKTPJvAflLArLSTVR0es9bb4TDvULzBWly9aLbREEyM6/LpRdbC/GmjTw+NDB
btxGCuSdnuz8FJnSxjJkGPJCudZMIllzvPHhy31NrZAqQG1ssFDyq/grrdycroHt
RxQFcYDVIbaGR8sITHakB6kY55xgRSqMl9w/r2lYtbyBcf4ZzgeHrEd4a5q9vICt
ynANiPJbslRvebfNvqMnNkCDP2w57p0t7DFkLVVO0FiN9Fl3wyKcpAUiyaaLFJzy
vEmvcy2xY+/SEw==
-----END CERTIFICATE-----
Generated at Fri Jul 24 05:40:09 2026 by rpki-client