Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
File:                     vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft (raw, json)
Hash identifier:          Ad2C4YKQRyjHl7jOe40Tn6hspl8HP+9/UvQ9pdobJdA=
Subject key identifier:   CF:CD:3F:A4:D2:8E:59:AF:82:55:EE:4A:E9:89:72:C5:B5:82:8E:1A
Authority key identifier: BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
Certificate issuer:       /CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Certificate serial:       01A02621933DCE05D05180438656253122DC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
Manifest number:          8D
Signing time:             Fri 21 Aug 2026 21:02:09 +0000
Manifest this update:     Fri 21 Aug 2026 21:02:09 +0000
Manifest next update:     Sat 22 Aug 2026 21:02:09 +0000
Files and hashes:         1: sMBS9OzucQLYRw4kO5MEHGEFHUU.roa (hash: tUsaSUdwGiplp3q5jaJRxYUheCxbRt91fnz6Ktk8t8A=)
                          2: vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl (hash: SMN8lD9nHJ/4ridrNPyroGUVBWTUofGhdr7MCxQKC1M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 22 Aug 2026 21:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a0:26:21:93:3d:ce:05:d0:51:80:43:86:56:25:31:22:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
        Validity
            Not Before: Aug 21 21:02:09 2026 GMT
            Not After : Aug 22 21:02:09 2026 GMT
        Subject: CN=cfcd3fa4d28e59af8255ee4ae98972c5b5828e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:37:87:09:35:90:e5:5b:b5:4d:7d:2a:ff:0a:
                    0c:49:d5:8b:5c:04:38:b0:3c:3c:bd:d0:01:74:35:
                    80:5b:b2:9b:04:66:c4:5e:71:73:6a:61:96:6d:08:
                    05:2e:d9:c3:68:2e:c8:10:97:61:ba:7e:e9:cd:e7:
                    72:f3:82:ee:75:52:22:6a:c5:85:2e:c8:02:a7:7d:
                    72:3b:03:75:42:4d:dc:22:5d:b2:6a:c7:44:6d:ec:
                    ca:c3:83:17:b0:c2:42:86:41:6b:40:91:e7:13:c5:
                    08:42:76:8d:45:46:d9:cd:b7:00:f4:37:1b:28:69:
                    fb:d4:ff:b9:34:27:78:6a:f1:ef:35:f8:ad:05:fa:
                    07:c5:33:4a:9a:c9:62:62:b6:76:3f:f0:82:47:02:
                    7c:76:76:b9:6c:94:73:a3:a2:9f:bb:29:a1:0b:eb:
                    ca:21:f2:51:22:08:ac:a0:a1:9e:ca:ae:39:17:cf:
                    31:3e:15:37:d0:19:ad:ee:94:ab:4f:32:41:a5:12:
                    01:96:f8:c8:77:b2:05:74:0d:34:2e:a7:f8:7d:bc:
                    49:81:cb:c2:d0:ac:c2:93:6c:06:ee:16:9a:56:f7:
                    bc:ea:96:34:82:2e:e3:dc:f6:2f:a8:30:6a:f5:5e:
                    d9:84:f3:48:c2:2f:37:1c:25:35:d2:92:0c:95:80:
                    fb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CD:3F:A4:D2:8E:59:AF:82:55:EE:4A:E9:89:72:C5:B5:82:8E:1A
            X509v3 Authority Key Identifier:
                keyid:BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:19:78:a4:02:85:3d:38:2f:fe:e8:d2:39:c9:80:9b:74:
         db:95:86:6f:66:83:72:b0:27:c9:48:61:f5:00:d6:c2:b8:29:
         bf:a6:5a:59:69:08:25:24:36:91:79:8f:d5:67:16:ce:3b:2d:
         9a:ea:df:03:78:54:b8:0d:a9:3f:b5:f5:a5:99:32:dd:de:07:
         2e:e5:cc:a6:dd:0a:73:b7:9e:89:c9:89:1f:ed:5a:7b:7f:75:
         71:80:42:d7:4a:a9:9b:85:ec:3a:e7:73:cc:1a:8e:ae:f6:cf:
         c5:d5:39:5d:ac:cd:d9:bd:d0:cd:8e:fa:2f:83:2c:83:0a:44:
         be:7a:35:66:9a:03:7b:f9:3e:53:24:2f:c0:fd:65:43:70:87:
         bc:c3:8c:18:eb:43:d3:fd:e9:67:f0:8a:3a:ca:b6:fe:4b:82:
         6d:61:c8:be:e0:f6:6a:74:c5:d1:11:e9:34:e2:43:85:48:76:
         66:55:07:51:61:8d:0c:6a:a6:63:10:e1:38:d6:c3:9d:fc:8d:
         ed:a7:c1:81:81:5f:2c:4b:7e:26:8d:46:58:5d:4e:ed:0a:e0:
         73:f2:d1:5a:d4:43:cd:ca:b9:65:7c:b6:73:30:a9:31:4f:6a:
         eb:9f:ff:48:88:e2:4e:10:23:b5:38:f6:08:b4:ce:37:07:18:
         ee:90:61:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAmIZM9zgXQUYBDhlYlMSLcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmM2E2ZjY3YjYyMjQ0M2IzNzE4YmE1ODBkZjE2ZGQ1YmU4
YTEyYmIwHhcNMjYwODIxMjEwMjA5WhcNMjYwODIyMjEwMjA5WjAzMTEwLwYDVQQD
EyhjZmNkM2ZhNGQyOGU1OWFmODI1NWVlNGFlOTg5NzJjNWI1ODI4ZTFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApTeHCTWQ5Vu1TX0q/woMSdWLXAQ4
sDw8vdABdDWAW7KbBGbEXnFzamGWbQgFLtnDaC7IEJdhun7pzedy84LudVIiasWF
LsgCp31yOwN1Qk3cIl2yasdEbezKw4MXsMJChkFrQJHnE8UIQnaNRUbZzbcA9Dcb
KGn71P+5NCd4avHvNfitBfoHxTNKmsliYrZ2P/CCRwJ8dna5bJRzo6KfuymhC+vK
IfJRIgisoKGeyq45F88xPhU30Bmt7pSrTzJBpRIBlvjId7IFdA00Lqf4fbxJgcvC
0KzCk2wG7haaVve86pY0gi7j3PYvqDBq9V7ZhPNIwi83HCU10pIMlYD7dwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM/NP6TSjlmvglXuSumJcsW1go4aMB8GA1UdIwQY
MBaAFL86b2e2IkQ7Nxi6WA3xbdW+ihK7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgt
OGQxZGE5ZjM4YTBiLzEvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi8yNzhmZjctOTRhNy00ZmMyLWFlZDgtOGQxZGE5ZjM4YTBi
LzEvdnpwdlo3WWlSRHMzR0xwWURmRnQxYjZLRXJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJ0ZeKQC
hT04L/7o0jnJgJt025WGb2aDcrAnyUhh9QDWwrgpv6ZaWWkIJSQ2kXmP1WcWzjst
murfA3hUuA2pP7X1pZky3d4HLuXMpt0Kc7eeicmJH+1ae391cYBC10qpm4XsOudz
zBqOrvbPxdU5XazN2b3QzY76L4MsgwpEvno1ZpoDe/k+UyQvwP1lQ3CHvMOMGOtD
0/3pZ/CKOsq2/kuCbWHIvuD2anTF0RHpNOJDhUh2ZlUHUWGNDGqmYxDhONbDnfyN
7afBgYFfLEt+Jo1GWF1O7Qrgc/LRWtRDzcq5ZXy2czCpMU9q65//SIjiThAjtTj2
CLTONwcY7pBhgw==
-----END CERTIFICATE-----
Generated at Sat Aug 22 07:02:41 2026 by rpki-client