Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
File:                     vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft (raw, json)
Hash identifier:          YMSfR1tqqyVVlPtlx0RI7ORiW8nZ+ggr0aKR5w3zDt0=
Subject key identifier:   85:73:AD:D3:EB:27:BB:5E:9E:55:67:DD:F4:DC:A7:04:78:3A:70:6C
Authority key identifier: BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB
Certificate issuer:       /CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
Certificate serial:       019F2924896B4D21A7131BBCD25A2C6ECADF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
Manifest number:          0A
Signing time:             Fri 03 Jul 2026 18:01:28 +0000
Manifest this update:     Fri 03 Jul 2026 18:01:28 +0000
Manifest next update:     Sat 04 Jul 2026 18:01:28 +0000
Files and hashes:         1: sMBS9OzucQLYRw4kO5MEHGEFHUU.roa (hash: tUsaSUdwGiplp3q5jaJRxYUheCxbRt91fnz6Ktk8t8A=)
                          2: vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl (hash: NEhJg7JKbF8PCqpFoREkyFZk7gTCYkrHdyquzEK4VDc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 04 Jul 2026 18:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:29:24:89:6b:4d:21:a7:13:1b:bc:d2:5a:2c:6e:ca:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3a6f67b622443b3718ba580df16dd5be8a12bb
        Validity
            Not Before: Jul  3 18:01:28 2026 GMT
            Not After : Jul  4 18:01:28 2026 GMT
        Subject: CN=8573add3eb27bb5e9e5567ddf4dca704783a706c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:49:69:9d:ac:e8:35:83:58:ae:89:89:ef:05:
                    ac:e7:dc:ae:81:9c:a5:9f:92:92:cb:19:0f:c8:9a:
                    cc:1f:3d:ab:4c:cc:76:26:83:c9:b7:f8:80:64:c6:
                    04:ef:20:4e:37:2f:7a:7f:c2:5e:15:4a:97:ba:c9:
                    1d:2c:83:4b:cf:39:3c:b2:d9:f8:56:8b:24:13:bd:
                    c5:0e:a9:81:cc:86:16:c6:2c:ea:c3:0b:22:33:09:
                    f9:f2:d5:9d:e6:fe:a2:cc:b5:1f:ca:e6:d8:d3:e3:
                    41:38:33:cf:14:c6:1d:f8:19:84:67:53:d0:8c:09:
                    5b:82:83:f6:4d:f3:49:58:e7:34:32:6a:d2:09:44:
                    d4:86:a0:ff:55:aa:26:59:a0:d3:55:0e:01:64:52:
                    93:97:08:4c:0f:0d:56:2d:6d:be:2f:63:3d:fb:67:
                    b6:23:09:a6:84:fb:e1:80:02:11:48:68:ea:4f:d5:
                    7d:82:e0:8a:57:c3:fb:cd:d6:10:0f:14:a1:4a:11:
                    74:80:ee:59:ff:37:c8:7b:90:74:38:38:6f:22:ad:
                    a1:43:d9:11:6a:43:2f:40:46:6c:1d:1c:b3:f5:c4:
                    a7:7d:88:31:23:82:c9:a4:49:b4:c8:27:b2:9f:48:
                    0f:26:2a:de:55:af:b1:d1:37:ca:68:c8:0c:f7:af:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:73:AD:D3:EB:27:BB:5E:9E:55:67:DD:F4:DC:A7:04:78:3A:70:6C
            X509v3 Authority Key Identifier:
                keyid:BF:3A:6F:67:B6:22:44:3B:37:18:BA:58:0D:F1:6D:D5:BE:8A:12:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vzpvZ7YiRDs3GLpYDfFt1b6KErs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/62/278ff7-94a7-4fc2-aed8-8d1da9f38a0b/1/vzpvZ7YiRDs3GLpYDfFt1b6KErs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         66:20:e8:60:65:b2:9e:3d:74:f6:a4:cb:eb:7c:c9:7e:00:a9:
         0b:ce:57:4e:70:be:ca:09:28:42:8e:5d:5c:38:2d:42:c2:a0:
         ab:59:56:4e:f1:cd:e5:17:27:55:8b:00:ff:cd:10:e2:86:b6:
         ae:23:0f:fe:74:76:14:45:50:0f:1c:11:85:58:ec:62:96:eb:
         89:2e:e3:f9:3c:89:46:ad:f0:a1:f4:02:e9:39:5d:1c:c2:f6:
         12:22:f7:07:0e:0b:cb:08:82:0d:65:c9:98:2f:1c:2b:97:bf:
         dc:8d:c4:71:e5:67:c4:c4:13:17:00:58:dc:88:fa:23:db:d1:
         b3:33:da:29:e4:e5:39:2a:7f:b3:4c:2d:6c:ae:27:b3:80:f8:
         77:8e:4e:68:c2:ab:21:83:d8:f0:7f:f0:c3:6d:6e:58:3d:bb:
         16:c3:fb:94:bb:62:3d:8f:5c:67:45:51:f0:c2:05:e1:29:7b:
         6a:d2:24:a6:76:61:60:b6:3d:cd:5c:13:87:ae:b0:8e:58:f9:
         5f:ed:7f:98:6e:e7:c6:92:53:1c:58:d6:ef:ab:41:17:a3:bf:
         47:33:25:7a:77:71:5f:e9:40:45:83:d5:9f:15:4e:47:f4:9d:
         d9:e3:dd:60:cc:19:68:85:fe:06:de:e8:32:47:9e:02:1a:c8:
         4d:dc:aa:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 21:43:28 2026 by rpki-client