Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
File:                     vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft (raw, json)
Hash identifier:          HlkSBjbjTrEbOaKkWFsUu4DukvI2DjPucBxhH+cjNq4=
Subject key identifier:   5F:70:4A:37:1B:37:C0:59:89:69:79:B7:92:C5:68:A3:72:E1:1D:E7
Authority key identifier: BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D
Certificate issuer:       /CN=beba48c7e2c9e05eda546d899146b89f799df85d
Certificate serial:       019CE2C704BEC8E160754DC2EA3D65BA53BB
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
Manifest number:          1885
Signing time:             Thu 12 Mar 2026 16:00:19 +0000
Manifest this update:     Thu 12 Mar 2026 16:00:19 +0000
Manifest next update:     Fri 13 Mar 2026 16:00:19 +0000
Files and hashes:         1: 08NmMRpJD2zt3WazEnsyTB_Ye4k.roa (hash: zB3H5rR/NPY6rGjN6AMY7X/SudshlN0CJSGXrW66c0A=)
                          2: 3btPlVNt-9V3h0nDX1hmyNU-es4.roa (hash: UOOVRebO8hxwXhif146SOalpOHtKt+t/e0b3RTeySOk=)
                          3: 6OgeBpOxtfgQyEB86iphi2VexbY.roa (hash: AIzVnTdMqdCcm9+FTQmPBDByjxPqs4d7QdzgmmWOHOY=)
                          4: 6nJmNvqHPKYnTqS91TUGx-uWrDk.roa (hash: RRphozWpbLi7NV0kIIUQ1f1km+z6VfKYnl6CVzy1hJs=)
                          5: AheddCRqw5oD_ZQISh9qDiIpLT0.roa (hash: YLQMmuXSON8Z/tAuKZzHEOQJoZzsSRHhHCgRT8RlJOo=)
                          6: IR69owtZmR5Fw8ymGUacHCi6F9M.roa (hash: E8A7l8T7M5NMnyj5TeQKcO9RA4EdA0Yrc9i1OKKkoXE=)
                          7: MRcsgIhIgnr1q2_TU7f16T0f648.roa (hash: lxu206bSCIwPGq8kGz0IE+UmHoKoYjWgcdADheUh47s=)
                          8: PdkevrpF3oUdP6NYf__qRu2eJGQ.roa (hash: 6/Jf7bWiwH8GcWaq82/QO3p1jndML4uQsI4DJpc/gzU=)
                          9: Pj9mwrBkm4xnWPsm_TLu1MVUsEA.roa (hash: 0uzhIrUoYP2JhkA58C6oxLsYNe9TaHvzus1beE0Tbrw=)
                          10: YqSoAdF6iqyu833zm4BfrIMOBwM.roa (hash: jTKv2FDAxa4EBsIxkr3l8kxA1mMBCrCYiLqashreHAg=)
                          11: aDegwWvye6xH4pmAOVSGlkhOo7Y.roa (hash: oA2mPD3VBewpY8NjOctImemeYajL2gX/qF4AUNPv5JY=)
                          12: e4QlHRn4c5ydgsYxtMqMe-cdd4k.roa (hash: vt6R5TL9alQtbqgJa/O/JGU+YCZm6nOgD0WFNRyVb9g=)
                          13: emGgIQ-xmgCz8P72gkT0Si2n-IY.roa (hash: rV3ZI2902oBE03NEz2asQLt1I8iQ/Cv7eftYbg62quc=)
                          14: gNrrInj4TRkyT5jbGMxPLgwvoNo.roa (hash: LtFaL+a8b2RZpTnUDoFwiB+T+gXZwVn6JNY1LMqOvUg=)
                          15: gs33457HrytGNraew7JyyH9-pVE.roa (hash: zCAnu9J9yeWGBo1p4no2ccDB+d1jvhqIfXLFfwE1F0o=)
                          16: hMYm9e8BNUMHL00M5rbkR4HXWqI.roa (hash: ge1867rWqQ285UC/FlVpl37XPU9yXofdfeXY425JJF0=)
                          17: lJsbBXLg_uWqYLX--KLHtMBviXU.roa (hash: PhLEwHd59fOcvbQh+xXBryMID3Ta479cbQK9NwBrmRM=)
                          18: nGAG0Ct8TUXf5y01oQ9KZhT02a8.roa (hash: 9PkF8rRPPMMollTYaWWx5iE8QRu3Lr0DvQUiFJdAOrY=)
                          19: r57Hp-sjdnStVWxCsycmoumb7yM.roa (hash: NDXymAugnG/6nvYU9yP//Ix+vW4I3MtpbHjkvKHOeZU=)
                          20: rgdKBb0QvEUxg3Tcz4iHyOJMEfM.roa (hash: m/E6wXREY8txe01ZbMHD3RyXiwdLtKvyfaRGYJdAv3E=)
                          21: udnCbOKkxFL5JqA3lC_jwe4JSZE.roa (hash: B3SEhVMVlr8GcNEdoUlxzf6VIwAReMkAjboOakELRq4=)
                          22: vFmuetBZqj5zpom7OIPEuRwpxlc.roa (hash: cP0QLGljZLCJzP6o76pszZkHn3foXTVJA0Uz8E3w60w=)
                          23: vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl (hash: H+TWpDY0auPDFGiPVbd+FIgajmSKHBtaENy5mSWhoOQ=)
                          24: xp9lwElJ7lKSGyadPR5WSsT08-A.roa (hash: 3IgJqQGnVnNZVf1WsRAURNBmKHWOQXN2j3OD8mFbrHY=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 13 Mar 2026 16:00:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9c:e2:c7:04:be:c8:e1:60:75:4d:c2:ea:3d:65:ba:53:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=beba48c7e2c9e05eda546d899146b89f799df85d
        Validity
            Not Before: Mar 12 16:00:19 2026 GMT
            Not After : Mar 13 16:00:19 2026 GMT
        Subject: CN=5f704a371b37c059896979b792c568a372e11de7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:fe:63:f7:9d:9a:82:9a:0e:bd:ab:cb:13:d6:
                    04:32:a8:3e:2f:2a:f8:f7:4c:32:45:df:59:35:c1:
                    83:9e:29:0d:73:c5:25:c0:ca:bb:ce:b8:a4:df:8b:
                    d9:b2:49:82:70:c8:3d:a6:d2:a1:27:6b:05:ce:f5:
                    4b:c4:af:ef:75:8f:1c:90:23:e2:a3:77:08:05:49:
                    8b:79:d6:49:3f:07:43:12:58:ac:15:9d:9a:a4:8a:
                    ff:08:ba:cb:0b:bf:19:2a:6c:6d:c8:60:26:65:02:
                    95:6f:a6:5a:ca:94:f1:f7:1a:d0:bb:f4:3f:6f:c5:
                    15:59:fd:6f:75:06:f5:eb:03:ec:4a:bd:06:0f:99:
                    df:61:b0:b1:a6:16:33:0b:f1:f5:f8:72:ef:74:d2:
                    a6:39:55:89:c4:84:58:ef:55:85:4f:73:ff:2b:6a:
                    f5:77:3b:87:a8:9e:ba:bf:e7:ec:3b:77:92:a2:b6:
                    30:42:b3:e7:dc:c0:11:01:5b:db:08:ec:bf:89:9e:
                    5d:3c:3e:cb:bd:bd:ec:e4:35:15:ca:9c:9e:29:8e:
                    7f:75:b4:ba:3c:39:52:85:e3:11:e0:59:c9:43:f6:
                    64:02:3c:64:6f:c8:06:09:a4:9d:29:a4:ec:8b:b3:
                    ee:43:98:43:0e:cc:a5:90:71:7b:cc:ab:77:cf:ef:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:70:4A:37:1B:37:C0:59:89:69:79:B7:92:C5:68:A3:72:E1:1D:E7
            X509v3 Authority Key Identifier:
                keyid:BE:BA:48:C7:E2:C9:E0:5E:DA:54:6D:89:91:46:B8:9F:79:9D:F8:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vrpIx-LJ4F7aVG2JkUa4n3md-F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/7f8821-1566-43f4-ab26-3d522181a2c4/1/vrpIx-LJ4F7aVG2JkUa4n3md-F0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:da:db:bb:47:b1:49:3f:33:76:a9:09:b3:36:19:29:fc:b9:
         08:ef:41:d6:e8:a2:2d:71:d1:ce:5b:81:64:ca:ea:d0:94:84:
         ae:a0:27:18:4a:63:fe:47:38:60:18:95:c8:b1:bb:22:fa:0f:
         88:b2:d0:20:15:06:c6:ed:f5:fe:b3:3e:9a:d8:0e:9b:0a:22:
         38:41:50:97:a0:04:ec:b1:07:44:dc:83:92:23:19:d3:85:c7:
         30:e3:c5:00:58:ea:f2:71:4f:3d:0d:ba:8e:f2:76:a1:14:95:
         00:a5:f0:92:2f:fc:68:33:7c:b5:d0:66:e3:a7:df:e3:1c:c8:
         70:81:20:d7:c4:71:f6:93:c3:f6:74:ad:02:42:3b:c4:1e:32:
         44:8f:12:43:11:d5:91:96:0f:43:bb:af:dd:bf:b8:c7:78:19:
         79:b1:82:41:59:27:29:dc:e1:2c:97:f9:56:38:35:d9:8b:52:
         ad:03:20:69:e0:07:d3:69:06:2c:b8:d3:ca:d0:e2:ba:52:d9:
         03:0b:de:be:ad:c4:97:03:02:c7:1c:3c:cb:68:0a:6f:03:cb:
         9c:9b:34:a5:f0:7a:60:e7:08:d6:7a:3b:c4:56:63:d5:a8:10:
         dd:a4:e7:5e:e6:fd:59:30:eb:1b:27:a8:dd:ca:e9:52:20:de:
         8e:dc:c9:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 02:16:11 2026 by rpki-client