Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
File:                     vIwagDL1fyKwFFSmXvMt6ndJbQs.mft (raw, json)
Hash identifier:          6G52kFDI+iG6v/lKdehaiEoQc339TFhf0z06UTnbcMI=
Subject key identifier:   8C:08:5C:0D:DB:4A:33:F1:8B:EA:6D:75:86:24:F4:07:49:67:F7:9E
Authority key identifier: BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B
Certificate issuer:       /CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
Certificate serial:       019FCCDE213F55C8DFD2ACD02D292025B41B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
Manifest number:          0D1A
Signing time:             Tue 04 Aug 2026 13:02:17 +0000
Manifest this update:     Tue 04 Aug 2026 13:02:17 +0000
Manifest next update:     Wed 05 Aug 2026 13:02:17 +0000
Files and hashes:         1: dk1G9hz2trfq5CaaUBMe9RcS93I.roa (hash: lH6gfT8/HMNpYY4aojCo2W76iGRxmIa0HJsfcgDAePE=)
                          2: qhONGSd5IFYRbbwCnUUSYxuM4Dg.asa (hash: BCb8sB5GLTFmhhkMyQdRLvCPQMUaxGs/b1hsVb1eovk=)
                          3: vIwagDL1fyKwFFSmXvMt6ndJbQs.crl (hash: VGStoHmeGqAUg0C3LqUDJdB8cjD4yaYnr9/MvOYdUb0=)
                          4: zYtzyTWTnlnucMc3LvFfSuz8nK0.roa (hash: AGCVB7kNqblaiA5QTuc5I1MPwcbOpyt71G2YpLmroRI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 08:00:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:de:21:3f:55:c8:df:d2:ac:d0:2d:29:20:25:b4:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc8c1a8032f57f22b01454a65ef32dea77496d0b
        Validity
            Not Before: Aug  4 13:02:17 2026 GMT
            Not After : Aug  5 13:02:17 2026 GMT
        Subject: CN=8c085c0ddb4a33f18bea6d758624f4074967f79e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:bb:e8:10:9c:7f:40:9e:99:12:b9:77:6b:a4:
                    39:e1:ad:66:0c:46:b1:5b:a3:2b:9f:bb:12:e9:93:
                    3c:be:2a:ea:88:76:c4:22:f1:54:a7:a2:0e:d3:d2:
                    23:62:eb:a9:db:8e:d3:63:0f:da:21:4b:64:c1:6c:
                    b1:5d:8f:8e:fc:3d:1d:63:77:10:67:6e:2c:3f:11:
                    8a:c6:48:9e:ee:1c:54:e7:17:ff:5f:60:a1:ff:c2:
                    a5:30:c5:fa:b9:15:bb:34:21:7f:26:ea:1b:9c:4e:
                    14:62:9c:7b:01:9a:c2:ff:f5:58:6e:b1:f9:30:80:
                    44:82:f7:ff:a7:86:aa:40:d9:dc:12:69:ec:59:4b:
                    a0:5a:b8:8f:db:cf:10:77:1c:e8:77:23:08:be:21:
                    e7:7e:73:35:8b:4d:17:fd:6b:67:52:86:c2:ad:da:
                    c6:ed:29:17:8a:d9:aa:58:68:80:3d:5b:6d:35:73:
                    29:94:5d:98:17:13:50:c3:d0:f1:12:99:92:eb:11:
                    6b:81:2f:6d:c8:02:83:47:72:8d:b2:d7:09:85:ec:
                    7f:bc:89:de:2b:fd:e8:49:8f:c2:40:9c:42:2a:da:
                    a7:35:2c:e7:8e:35:33:67:7d:85:ed:4c:6c:e2:ae:
                    d1:e1:98:11:ad:48:83:2d:ca:bd:1f:59:84:dd:e2:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:08:5C:0D:DB:4A:33:F1:8B:EA:6D:75:86:24:F4:07:49:67:F7:9E
            X509v3 Authority Key Identifier:
                keyid:BC:8C:1A:80:32:F5:7F:22:B0:14:54:A6:5E:F3:2D:EA:77:49:6D:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIwagDL1fyKwFFSmXvMt6ndJbQs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/54/9f4282-dfeb-40c1-af84-a564ec011c5d/1/vIwagDL1fyKwFFSmXvMt6ndJbQs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:08:3d:78:c0:c5:d2:ae:db:cc:35:fb:0d:b6:4f:1a:b2:2a:
         86:71:94:5f:46:3b:90:d4:3b:6f:ee:62:b6:d5:f3:a0:b5:d4:
         d0:35:97:19:9a:5a:b7:af:dc:ff:03:1d:5f:4c:4c:05:fa:ac:
         54:eb:4a:9d:71:c7:a8:79:84:f4:6d:74:82:21:7c:27:1f:0c:
         20:95:c3:dc:f0:f8:10:19:06:db:2b:0d:7f:99:5e:ba:10:37:
         f1:ee:b3:56:df:19:ff:c1:8c:24:b3:94:89:3f:1b:fd:2f:b3:
         d5:33:b5:5c:4d:bb:1b:35:4d:6a:cd:64:63:fd:2b:5b:2a:ff:
         1c:8a:12:e8:75:de:25:83:a1:8b:5b:e0:4d:80:a5:94:3e:8c:
         16:1a:e9:f3:2f:1a:fb:97:a3:16:ba:c9:26:ae:3e:73:9f:6e:
         ba:bd:d2:cd:9d:31:3d:a0:92:ac:6c:dc:72:df:8b:4d:6c:e6:
         a0:00:1a:26:95:3c:73:b7:62:e1:a3:57:20:24:97:cb:e7:91:
         3e:25:a3:6a:e9:02:e3:f3:a8:3b:8b:05:d4:80:95:b6:21:fc:
         45:ac:f4:e4:e8:0f:51:ff:25:f2:68:12:8f:35:68:d9:e0:15:
         f0:37:4b:9c:ee:8a:48:52:11:88:28:56:da:d3:ce:de:ac:b1:
         9c:1c:d6:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/M3iE/Vcjf0qzQLSkgJbQbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGMxYTgwMzJmNTdmMjJiMDE0NTRhNjVlZjMyZGVhNzc0
OTZkMGIwHhcNMjYwODA0MTMwMjE3WhcNMjYwODA1MTMwMjE3WjAzMTEwLwYDVQQD
Eyg4YzA4NWMwZGRiNGEzM2YxOGJlYTZkNzU4NjI0ZjQwNzQ5NjdmNzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5LvoEJx/QJ6ZErl3a6Q54a1mDEax
W6Mrn7sS6ZM8virqiHbEIvFUp6IO09IjYuup247TYw/aIUtkwWyxXY+O/D0dY3cQ
Z24sPxGKxkie7hxU5xf/X2Ch/8KlMMX6uRW7NCF/JuobnE4UYpx7AZrC//VYbrH5
MIBEgvf/p4aqQNncEmnsWUugWriP288QdxzodyMIviHnfnM1i00X/WtnUobCrdrG
7SkXitmqWGiAPVttNXMplF2YFxNQw9DxEpmS6xFrgS9tyAKDR3KNstcJhex/vIne
K/3oSY/CQJxCKtqnNSznjjUzZ32F7Uxs4q7R4ZgRrUiDLcq9H1mE3eJdpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIwIXA3bSjPxi+ptdYYk9AdJZ/eeMB8GA1UdIwQY
MBaAFLyMGoAy9X8isBRUpl7zLep3SW0LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQt
YTU2NGVjMDExYzVkLzEvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC85ZjQyODItZGZlYi00MGMxLWFmODQtYTU2NGVjMDExYzVk
LzEvdkl3YWdETDFmeUt3RkZTbVh2TXQ2bmRKYlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATwg9eMDF
0q7bzDX7DbZPGrIqhnGUX0Y7kNQ7b+5ittXzoLXU0DWXGZpat6/c/wMdX0xMBfqs
VOtKnXHHqHmE9G10giF8Jx8MIJXD3PD4EBkG2ysNf5leuhA38e6zVt8Z/8GMJLOU
iT8b/S+z1TO1XE27GzVNas1kY/0rWyr/HIoS6HXeJYOhi1vgTYCllD6MFhrp8y8a
+5ejFrrJJq4+c59uur3SzZ0xPaCSrGzcct+LTWzmoAAaJpU8c7di4aNXICSXy+eR
PiWjaukC4/OoO4sF1ICVtiH8Raz05OgPUf8l8mgSjzVo2eAV8DdLnO6KSFIRiChW
2tPO3qyxnBzWEA==
-----END CERTIFICATE-----
Generated at Tue Aug 4 15:04:19 2026 by rpki-client