Manifest

$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          sSvotG3NNJZYyQbk3RQXTXRA+Duv+szAxs0CEGwk4V0=
Subject key identifier:   89:39:FA:95:CC:0E:45:A3:BD:0E:11:89:84:8C:8E:58:97:D9:76:D1
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       01A17EF3974AA83983781C50E4E0FEB17D42
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          1AE9
Signing time:             Tue 27 Oct 2026 20:00:55 +0000
Manifest this update:     Tue 27 Oct 2026 20:00:55 +0000
Manifest next update:     Wed 28 Oct 2026 20:00:55 +0000
Files and hashes:         1: 08NmMRpJD2zt3WazEnsyTB_Ye4k.roa (hash: zB3H5rR/NPY6rGjN6AMY7X/SudshlN0CJSGXrW66c0A=)
                          2: 3btPlVNt-9V3h0nDX1hmyNU-es4.roa (hash: UOOVRebO8hxwXhif146SOalpOHtKt+t/e0b3RTeySOk=)
                          3: 6OgeBpOxtfgQyEB86iphi2VexbY.roa (hash: AIzVnTdMqdCcm9+FTQmPBDByjxPqs4d7QdzgmmWOHOY=)
                          4: 6nJmNvqHPKYnTqS91TUGx-uWrDk.roa (hash: RRphozWpbLi7NV0kIIUQ1f1km+z6VfKYnl6CVzy1hJs=)
                          5: AheddCRqw5oD_ZQISh9qDiIpLT0.roa (hash: YLQMmuXSON8Z/tAuKZzHEOQJoZzsSRHhHCgRT8RlJOo=)
                          6: MRcsgIhIgnr1q2_TU7f16T0f648.roa (hash: lxu206bSCIwPGq8kGz0IE+UmHoKoYjWgcdADheUh47s=)
                          7: PChmMikyZo9DqcoxqYgfS9Hx-Yw.roa (hash: ahpY54VR2fvsYJbt343bir68wVfXsUrZtfHtm2rKFEg=)
                          8: PdkevrpF3oUdP6NYf__qRu2eJGQ.roa (hash: 6/Jf7bWiwH8GcWaq82/QO3p1jndML4uQsI4DJpc/gzU=)
                          9: Pj9mwrBkm4xnWPsm_TLu1MVUsEA.roa (hash: 0uzhIrUoYP2JhkA58C6oxLsYNe9TaHvzus1beE0Tbrw=)
                          10: YqSoAdF6iqyu833zm4BfrIMOBwM.roa (hash: jTKv2FDAxa4EBsIxkr3l8kxA1mMBCrCYiLqashreHAg=)
                          11: aDegwWvye6xH4pmAOVSGlkhOo7Y.roa (hash: oA2mPD3VBewpY8NjOctImemeYajL2gX/qF4AUNPv5JY=)
                          12: e4QlHRn4c5ydgsYxtMqMe-cdd4k.roa (hash: vt6R5TL9alQtbqgJa/O/JGU+YCZm6nOgD0WFNRyVb9g=)
                          13: emGgIQ-xmgCz8P72gkT0Si2n-IY.roa (hash: rV3ZI2902oBE03NEz2asQLt1I8iQ/Cv7eftYbg62quc=)
                          14: gNrrInj4TRkyT5jbGMxPLgwvoNo.roa (hash: LtFaL+a8b2RZpTnUDoFwiB+T+gXZwVn6JNY1LMqOvUg=)
                          15: gs33457HrytGNraew7JyyH9-pVE.roa (hash: zCAnu9J9yeWGBo1p4no2ccDB+d1jvhqIfXLFfwE1F0o=)
                          16: hMYm9e8BNUMHL00M5rbkR4HXWqI.roa (hash: ge1867rWqQ285UC/FlVpl37XPU9yXofdfeXY425JJF0=)
                          17: lJsbBXLg_uWqYLX--KLHtMBviXU.roa (hash: PhLEwHd59fOcvbQh+xXBryMID3Ta479cbQK9NwBrmRM=)
                          18: nGAG0Ct8TUXf5y01oQ9KZhT02a8.roa (hash: 9PkF8rRPPMMollTYaWWx5iE8QRu3Lr0DvQUiFJdAOrY=)
                          19: r57Hp-sjdnStVWxCsycmoumb7yM.roa (hash: NDXymAugnG/6nvYU9yP//Ix+vW4I3MtpbHjkvKHOeZU=)
                          20: rgdKBb0QvEUxg3Tcz4iHyOJMEfM.roa (hash: m/E6wXREY8txe01ZbMHD3RyXiwdLtKvyfaRGYJdAv3E=)
                          21: udnCbOKkxFL5JqA3lC_jwe4JSZE.roa (hash: B3SEhVMVlr8GcNEdoUlxzf6VIwAReMkAjboOakELRq4=)
                          22: vFmuetBZqj5zpom7OIPEuRwpxlc.roa (hash: cP0QLGljZLCJzP6o76pszZkHn3foXTVJA0Uz8E3w60w=)
                          23: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: +GLUGztn2u4ZSRYx6wcjNI0W9H+YweRBKezAtjIUxWY=)
                          24: xp9lwElJ7lKSGyadPR5WSsT08-A.roa (hash: 3IgJqQGnVnNZVf1WsRAURNBmKHWOQXN2j3OD8mFbrHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 28 Oct 2026 13:57:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a1:7e:f3:97:4a:a8:39:83:78:1c:50:e4:e0:fe:b1:7d:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Oct 27 20:00:55 2026 GMT
            Not After : Oct 28 20:00:55 2026 GMT
        Subject: CN=8939fa95cc0e45a3bd0e1189848c8e5897d976d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:f8:01:3d:3f:72:eb:f6:99:89:7b:a1:5e:ef:
                    b6:f5:e2:f7:2f:6d:29:2f:d3:89:d2:d7:48:7c:d7:
                    65:35:16:c3:25:8a:d0:aa:3d:0f:9f:ad:b6:01:1c:
                    f7:28:12:0e:2e:70:45:7d:96:cf:46:7b:5a:c3:b3:
                    27:a9:56:d0:90:d7:c2:28:cd:a2:d6:c8:7e:70:90:
                    ec:14:b8:3b:43:0a:1a:88:45:e9:2c:fe:07:9c:2c:
                    3b:c7:41:c3:f8:a6:89:0a:d1:c6:d9:4b:b5:24:68:
                    13:b5:84:e0:8f:59:d5:74:22:e2:10:81:c7:0b:81:
                    18:20:3c:74:cd:25:a3:5a:26:60:98:e6:aa:f0:bf:
                    f7:1c:13:5e:3a:16:a2:45:78:36:d6:4b:5a:f1:9c:
                    02:7b:b1:2c:21:68:d8:b7:f4:55:3a:dd:f2:a7:1b:
                    fc:85:37:16:92:82:2e:d4:cc:5b:18:c5:cc:a9:ea:
                    f8:6c:61:5c:7b:20:99:ea:0b:a5:5b:3c:eb:55:f6:
                    02:0b:1a:6d:bf:00:71:ee:8c:49:81:96:0a:a2:ef:
                    d1:a5:6a:bb:3a:57:91:c9:17:03:06:1a:10:28:cb:
                    1c:20:55:20:9c:64:97:e9:d3:15:a9:6a:04:68:53:
                    83:0f:74:70:2d:e8:4c:87:5d:aa:88:a3:c5:99:af:
                    80:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:39:FA:95:CC:0E:45:A3:BD:0E:11:89:84:8C:8E:58:97:D9:76:D1
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:01:17:9f:30:06:55:9a:3b:e6:b4:01:fa:e5:81:14:f3:69:
         05:6b:8c:61:4e:59:6f:a0:41:a6:93:19:d1:f4:ef:8a:90:50:
         aa:76:06:6f:a6:0d:be:3a:42:26:8c:4b:5c:8a:73:0a:51:2c:
         e7:d3:4e:54:59:5c:c0:49:ae:f3:11:11:19:51:37:c4:d1:b4:
         8f:17:c9:be:a7:4e:13:3e:31:d4:64:b5:bb:67:71:2f:33:d9:
         88:31:42:bf:b7:0f:9c:bf:25:2f:b4:c7:e4:01:79:a0:ac:e8:
         7d:ea:f7:cd:06:85:f5:95:0f:f0:13:25:4c:80:de:b0:69:b3:
         ae:78:0d:90:ac:59:ad:73:67:19:04:06:46:de:f9:81:52:ce:
         9a:a4:fc:52:29:76:ff:5d:fe:09:0a:27:ea:f1:77:78:34:3f:
         ca:b7:2a:82:3c:da:9a:3f:af:84:6f:d7:c3:e1:1a:84:ce:66:
         f0:12:2c:41:c8:18:8a:dc:1a:3b:9a:5e:92:8a:f0:d3:f5:da:
         75:17:e7:16:60:f7:cf:2d:1b:68:e4:5d:2a:0a:1d:f9:66:48:
         fe:83:c9:b6:38:7e:fa:4c:89:c5:0a:93:b4:dd:cb:bb:da:c1:
         08:d4:6b:56:1a:5d:82:0d:48:38:f2:72:77:84:10:7b:9c:0e:
         ab:18:db:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:41:25 2026 by rpki-client