Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          sKDinaaV8MoC5KKGcd1c/S5bLUDQrphhtzvskTPP/xY=
Subject key identifier:   E7:9C:4A:3C:B3:CE:32:94:7D:B8:4C:C5:6E:05:F1:5F:A0:E6:09:07
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019F126521CFE500A507C33724B3A62B8EDD
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          1212
Signing time:             Mon 29 Jun 2026 08:00:45 +0000
Manifest this update:     Mon 29 Jun 2026 08:00:45 +0000
Manifest next update:     Tue 30 Jun 2026 08:00:45 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: Pg+Npea1C9/ShLM86v3XLkDzdaoODapR/RzqNu8RDmk=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 30 Jun 2026 02:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:12:65:21:cf:e5:00:a5:07:c3:37:24:b3:a6:2b:8e:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Jun 29 08:00:45 2026 GMT
            Not After : Jun 30 08:00:45 2026 GMT
        Subject: CN=e79c4a3cb3ce32947db84cc56e05f15fa0e60907
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:75:02:fd:e7:f9:96:a5:cc:85:0c:07:d0:c6:
                    13:6f:f5:b5:86:26:ba:35:6b:dc:fc:7b:fd:1f:de:
                    49:74:c8:62:44:2a:d5:21:29:75:2e:35:b8:8d:23:
                    93:02:e8:35:89:b0:77:33:f9:be:a3:2b:23:c4:7b:
                    b3:c4:84:5f:a2:56:d1:c4:24:76:1f:2d:e6:0c:5a:
                    a4:08:e2:e7:12:66:1b:5a:58:64:60:8f:9e:e4:ba:
                    ac:49:a1:e3:ab:0d:04:e5:ab:eb:2c:bd:9c:89:6c:
                    7d:64:32:36:f4:16:2d:ca:f9:a8:6b:5b:b8:9b:23:
                    a2:75:1a:44:c2:4d:21:b7:03:e7:4c:f8:31:c4:05:
                    c6:73:c0:ea:1b:4e:1d:27:b4:93:8b:29:99:b4:2c:
                    75:7a:3f:c3:75:b5:d3:22:83:62:e1:f5:f5:97:a1:
                    e3:2e:82:4d:e3:fb:1e:db:4f:65:47:31:64:02:6a:
                    b2:4c:38:e1:76:ab:ad:3d:f9:42:05:73:5e:50:1e:
                    8d:1e:99:4f:7a:25:7e:d4:63:5d:63:bd:eb:f5:80:
                    34:ab:74:6c:64:7a:32:25:fa:0c:d4:9c:f7:b5:f9:
                    0a:73:44:0e:c7:0b:b6:43:93:f9:8c:36:d3:5b:be:
                    a4:d0:7c:16:7f:2a:df:c2:87:85:e3:1f:b2:5c:66:
                    89:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9C:4A:3C:B3:CE:32:94:7D:B8:4C:C5:6E:05:F1:5F:A0:E6:09:07
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b6:8f:cb:67:8b:9f:a0:ba:2f:91:f7:79:43:45:f8:c5:47:05:
         b3:4f:ef:cc:2b:79:27:39:ef:42:22:ee:39:e5:af:18:8f:41:
         56:17:75:13:0a:2b:06:36:0b:83:b1:94:47:21:dd:59:2b:c6:
         07:e9:d6:c1:60:9f:b9:3a:90:0e:97:b2:1b:0b:46:9b:f2:c8:
         7d:94:fd:6b:71:ec:17:cb:62:67:b7:8e:69:84:66:fd:2b:17:
         4d:2d:9b:88:d5:97:0b:91:39:3b:de:32:52:82:00:93:bb:95:
         64:0d:a2:af:35:b2:13:38:fb:86:45:c8:67:ac:d3:b8:20:95:
         17:a0:43:c5:45:53:5b:b0:e2:0d:83:c8:b8:d6:90:f3:c2:44:
         de:66:27:51:12:a3:70:88:93:0a:05:68:24:7d:1d:71:e2:32:
         a4:74:24:ea:9b:a5:ec:2c:f7:ce:2d:a6:fb:d4:07:7c:cd:9f:
         90:87:3a:61:d6:6b:dc:b6:e7:da:fc:5e:48:61:fc:5d:76:60:
         cb:63:fd:91:69:68:91:1d:23:7b:d9:b8:1b:2c:0a:4e:f2:81:
         ac:a0:d6:aa:f4:2e:23:dc:a9:e9:0d:04:1c:df:9c:4e:78:be:
         87:0b:76:3d:c7:91:4b:82:72:93:0c:7f:67:48:a4:04:d9:61:
         fa:91:93:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ8SZSHP5QClB8M3JLOmK47dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmQyZGE1NDQ3ZDAwNzYxNmViZGRjMmE3MGZlYWM1ZTc3
YzRhOGIwHhcNMjYwNjI5MDgwMDQ1WhcNMjYwNjMwMDgwMDQ1WjAzMTEwLwYDVQQD
EyhlNzljNGEzY2IzY2UzMjk0N2RiODRjYzU2ZTA1ZjE1ZmEwZTYwOTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw3UC/ef5lqXMhQwH0MYTb/W1hia6
NWvc/Hv9H95JdMhiRCrVISl1LjW4jSOTAug1ibB3M/m+oysjxHuzxIRfolbRxCR2
Hy3mDFqkCOLnEmYbWlhkYI+e5LqsSaHjqw0E5avrLL2ciWx9ZDI29BYtyvmoa1u4
myOidRpEwk0htwPnTPgxxAXGc8DqG04dJ7STiymZtCx1ej/DdbXTIoNi4fX1l6Hj
LoJN4/se209lRzFkAmqyTDjhdqutPflCBXNeUB6NHplPeiV+1GNdY73r9YA0q3Rs
ZHoyJfoM1Jz3tfkKc0QOxwu2Q5P5jDbTW76k0HwWfyrfwoeF4x+yXGaJcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOecSjyzzjKUfbhMxW4F8V+g5gkHMB8GA1UdIwQY
MBaAFLz9LaVEfQB2FuvdwqcP6sXnfEqLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQt
YmJmZTIxOTZjNmFmLzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS85MTlmZmYtMjUyZi00NzIwLWFkZTQtYmJmZTIxOTZjNmFm
LzEvdlAwdHBVUjlBSFlXNjkzQ3B3X3F4ZWQ4U29zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAto/LZ4uf
oLovkfd5Q0X4xUcFs0/vzCt5JznvQiLuOeWvGI9BVhd1EworBjYLg7GURyHdWSvG
B+nWwWCfuTqQDpeyGwtGm/LIfZT9a3HsF8tiZ7eOaYRm/SsXTS2biNWXC5E5O94y
UoIAk7uVZA2irzWyEzj7hkXIZ6zTuCCVF6BDxUVTW7DiDYPIuNaQ88JE3mYnURKj
cIiTCgVoJH0dceIypHQk6pul7Cz3zi2m+9QHfM2fkIc6YdZr3Lbn2vxeSGH8XXZg
y2P9kWlokR0je9m4GywKTvKBrKDWqvQuI9yp6Q0EHN+cTni+hwt2PceRS4Jykwx/
Z0ikBNlh+pGTGg==
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:37:52 2026 by rpki-client