Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
File:                     vfo6-DmqHc51j0ieLTGuIgkvyZo.mft (raw, json)
Hash identifier:          hc+3Pekrv2pSai1At0ymu2U4wgWcxoauC/as7y5+0sU=
Subject key identifier:   0C:57:0F:F8:DF:3D:AF:D2:7B:AC:AC:25:48:1E:D8:62:6E:90:98:50
Authority key identifier: BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A
Certificate issuer:       /CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
Certificate serial:       019FDBABE194BCA3F739F59A4708110A83D4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
Manifest number:          19F1
Signing time:             Fri 07 Aug 2026 10:01:42 +0000
Manifest this update:     Fri 07 Aug 2026 10:01:42 +0000
Manifest next update:     Sat 08 Aug 2026 10:01:42 +0000
Files and hashes:         1: BgsKeB31VXHMATBr99GvZxAD6LE.roa (hash: JiKvS9bV+6H9nQ9YSMIo96/vZsQgIkUF+T9itNOZVio=)
                          2: LnQ-zPzgqVgXUijx46r1d0YDiYg.roa (hash: KK6oyN4swqYMOPL8Gp/QIITc1me7ju9UH/GTlCJypo0=)
                          3: OIEYZhMWNxTqwPFPtrJQP_P_8kc.roa (hash: oh65h6lMRU5dPAsjnmn6axHzKgGM8bi/szblqT+O4Kc=)
                          4: SDgL2DcW067zsQwIkMGp0Q7DumQ.roa (hash: M7FnxKdjUg7dQJ1DNiK4qvZZAUkfItNkGPtKgFWqy4Q=)
                          5: vfo6-DmqHc51j0ieLTGuIgkvyZo.crl (hash: IEDEMyzyVnitMTHDc2KJJIMjx4To0cEsApeksiQM7nk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 08 Aug 2026 07:00:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:db:ab:e1:94:bc:a3:f7:39:f5:9a:47:08:11:0a:83:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfa3af839aa1dce758f489e2d31ae22092fc99a
        Validity
            Not Before: Aug  7 10:01:42 2026 GMT
            Not After : Aug  8 10:01:42 2026 GMT
        Subject: CN=0c570ff8df3dafd27bacac25481ed8626e909850
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bd:a9:2a:e4:e9:4e:92:ff:69:54:60:7e:96:
                    8c:fb:59:90:91:e8:40:82:20:34:3c:92:a6:82:b4:
                    f1:dd:34:ef:7b:78:d5:b3:2d:42:6b:c1:4c:51:2c:
                    3c:a1:86:07:23:c9:d7:ed:50:80:97:42:e3:e1:15:
                    03:d6:1c:2a:4a:0a:db:1d:9d:03:82:5f:56:7b:d6:
                    61:4f:01:83:d5:a9:72:8d:85:79:38:05:85:1c:4d:
                    74:1c:93:36:2b:46:0f:db:1b:10:35:1b:e9:39:05:
                    53:2b:be:d5:9e:60:85:86:fb:d8:a7:7d:60:e0:f8:
                    c3:a6:74:2b:0a:17:d1:8e:0a:3c:80:1d:a2:71:e0:
                    38:7c:28:3d:f2:d0:13:d5:16:8a:2b:7e:2c:0f:c1:
                    1a:ca:cb:1b:f2:e2:b5:27:94:19:68:b4:bf:e5:14:
                    fd:aa:20:fc:91:63:89:28:06:c3:f4:a1:ac:d7:f7:
                    f5:de:25:09:c1:4d:d2:06:42:75:d3:67:36:a0:24:
                    b9:1e:d4:9a:32:ae:0c:e0:14:3c:ad:44:77:71:11:
                    57:c9:8e:50:06:61:af:98:82:ab:ca:fd:dd:d1:0a:
                    b0:55:0d:a8:18:df:19:9f:91:c1:a7:81:60:5a:ff:
                    18:ca:66:85:10:4f:b3:47:5d:dc:f4:d3:71:71:b6:
                    92:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:57:0F:F8:DF:3D:AF:D2:7B:AC:AC:25:48:1E:D8:62:6E:90:98:50
            X509v3 Authority Key Identifier:
                keyid:BD:FA:3A:F8:39:AA:1D:CE:75:8F:48:9E:2D:31:AE:22:09:2F:C9:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfo6-DmqHc51j0ieLTGuIgkvyZo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/8cdbc5-9365-4a0c-b9a3-ae7746f09630/1/vfo6-DmqHc51j0ieLTGuIgkvyZo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:5b:56:cf:68:fc:76:53:57:2b:c5:3c:a3:1d:a3:3c:b2:e0:
         5c:fd:fd:bf:a4:1a:bb:d6:fa:c9:94:2e:16:7f:01:fb:61:d5:
         a5:14:9b:9b:84:ff:d0:2f:1a:32:44:12:45:47:a1:d4:39:c3:
         8d:79:44:f7:36:13:9d:8f:dd:ae:47:e5:7e:59:50:d9:5a:12:
         aa:a8:20:51:70:11:61:a9:77:48:e9:31:7f:81:88:7d:c5:5f:
         43:7a:24:1d:06:80:3d:bf:6f:13:df:84:0b:dc:7e:7b:20:0d:
         8e:e9:2a:a1:f5:05:fb:a7:e4:11:01:cf:bd:dd:70:a4:73:7f:
         b4:c6:0b:27:78:8d:02:42:cc:12:90:92:90:3d:6f:1b:70:86:
         90:a6:32:c2:8b:c0:06:27:2b:1d:fa:19:a9:6f:ea:db:bf:f2:
         2d:45:68:34:e4:85:07:c1:35:dc:78:91:08:d7:1b:c4:70:e1:
         ba:a3:ce:60:93:df:21:61:79:81:66:0b:e7:8e:4d:47:dc:f3:
         8f:13:cf:34:0c:55:1e:eb:51:c1:53:8f:a8:b7:9f:b1:53:47:
         24:f4:9a:db:33:c7:e6:37:84:22:b9:37:36:58:ca:f2:12:23:
         8a:6b:90:07:df:92:ad:c5:d9:07:43:e8:5e:5b:6b:c3:cc:85:
         fa:c7:75:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 7 13:33:31 2026 by rpki-client