Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
File:                     vfrSPhHPDSSkd1lOugn5msxvH_8.mft (raw, json)
Hash identifier:          pKMPkuEym7EkSaDYFwoepATISXUe5d3+HdLl1YJWwWc=
Subject key identifier:   9B:0F:2C:78:A6:BE:DA:8A:B5:CD:CF:75:AB:5B:A4:2F:88:A9:F7:8E
Authority key identifier: BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF
Certificate issuer:       /CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
Certificate serial:       019FCC01BD6F99F34C83CA9C605A35B1FEE8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
Manifest number:          1A0E
Signing time:             Tue 04 Aug 2026 09:01:33 +0000
Manifest this update:     Tue 04 Aug 2026 09:01:33 +0000
Manifest next update:     Wed 05 Aug 2026 09:01:33 +0000
Files and hashes:         1: 1iDFebRz9nqE-gCoEJYcXr0Xi2c.roa (hash: 3deytW4/ZXSJAhpBR2yRtgKjYBtL7YhvUx7LzCi+0YI=)
                          2: 7sPrb7r6Wy8uPvEBWargP4rupus.roa (hash: +2Id5rt613qaytwLMb0HTOHjHFwJxeYQxhjfTHDMFN4=)
                          3: CuzAAU3h0OTBOr_2mEv4ROvCnGk.roa (hash: dqMeXt6hwH6UbfD9PiktyADu+OjSBWYeAaImDVDPydU=)
                          4: F2xEbeIAkcAPyh0e3ltj-rj9eOw.roa (hash: ZxjcHW/x0pQR0hwLPPsZsPvzwQS05l4bLGzkALrvzrE=)
                          5: FsVFJYO1evTaMiV2u4HcgttdYQ0.roa (hash: Q4C8zb+GeEUY9HeZrqKMaBkZLRk/aflBfwGItd6CJCY=)
                          6: Lh4K36VgJ-aXt9Ieo8ltBypTfc0.roa (hash: V01uN1AjvyhlvkZLg1g1pMucFyjkP2xiHYnE3d3pTnM=)
                          7: QCchS0EcjhmA9j9N9_sgkyn1la4.roa (hash: 2sVf5iZNzMWW56Gf/0tr9a8RcVPStz+hQAwFXwg3Nhg=)
                          8: W2OrB0j0-nYPTzXGx8wglEsSrTg.roa (hash: VYxarI+ue3iiKP2yq3ncIk9PFzz9Y9KND/jO/nEButo=)
                          9: cqhGYMObSa-V5uXdS3cRPivUtdk.roa (hash: rEhEkXajrTTzVePBY0074veOZ52nqnDPs8A9Ei1DDrY=)
                          10: nzU1DUcc-wuwFiW-a7zKPZ7kUFM.roa (hash: ZJNzG5B9h6XB/iR0ZipMVdzJWZ4JmXR61rO3sO/aC34=)
                          11: oK58pFhfnLO3eVdrDTtGCDvGNFg.roa (hash: ACsaP0wYF3KWsMzuKUurhwT/9j9cqeM4fZqjDioMqp4=)
                          12: opsbT1mZiajN6yKjwmpQed2xKN0.roa (hash: hfDxL07Rn37mmDA9+6FxaXHlpTPNLOMYJcCFIz8V60Q=)
                          13: r-rPvt4RjS7P54f8K6qRfwSOxvQ.roa (hash: Yy1vfbZbjc2/WlNaYme/4x9PZq2Z/ZqjjZd0yHo1hWQ=)
                          14: vfrSPhHPDSSkd1lOugn5msxvH_8.crl (hash: nmgKnJTjKfQaejm1grEAYP8s4FL89Dd7r6VD/vYBBNM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 05 Aug 2026 09:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9f:cc:01:bd:6f:99:f3:4c:83:ca:9c:60:5a:35:b1:fe:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdfad23e11cf0d24a477594eba09f99acc6f1fff
        Validity
            Not Before: Aug  4 09:01:33 2026 GMT
            Not After : Aug  5 09:01:33 2026 GMT
        Subject: CN=9b0f2c78a6beda8ab5cdcf75ab5ba42f88a9f78e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:e4:55:04:5f:98:58:95:e0:93:f5:11:23:e2:
                    95:b9:fd:87:ec:80:ae:5c:ff:ad:3c:2a:1f:1c:91:
                    36:64:3f:7c:d1:f8:38:7e:f9:05:a9:12:0d:6a:f1:
                    b9:7e:4f:c1:cd:a7:75:e8:9c:6c:92:ab:30:7e:38:
                    29:79:b7:25:22:1f:59:de:f8:9f:64:b2:03:12:e9:
                    e1:38:ad:1d:51:ca:f2:7c:9f:fc:83:d8:51:19:ae:
                    7a:1d:ee:ea:7e:83:f4:6a:30:45:13:cd:28:a3:b5:
                    cd:00:a8:76:92:96:ac:63:cc:96:b9:55:79:71:13:
                    e4:1f:09:26:ab:54:90:b8:cc:a8:7e:49:38:65:1a:
                    48:1d:26:d3:98:11:12:22:1a:eb:7a:4b:a4:05:89:
                    96:10:f2:58:a8:ef:b5:74:c2:27:87:04:6f:c2:cc:
                    45:87:5c:b7:2f:74:ab:e6:8a:d7:4a:54:65:ab:a2:
                    32:fa:f8:50:ce:39:a9:d2:a3:3c:c9:f7:c9:ad:c8:
                    bf:37:4d:ec:bf:dc:3a:64:19:ec:1e:47:73:9c:f6:
                    6e:c5:cc:2a:46:10:cb:67:8c:96:89:45:d8:28:7a:
                    fa:d5:01:2f:fa:0b:35:10:0c:35:ca:11:b9:8c:5a:
                    19:51:fb:f9:8e:b9:14:21:aa:45:e0:66:36:1c:7b:
                    78:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:0F:2C:78:A6:BE:DA:8A:B5:CD:CF:75:AB:5B:A4:2F:88:A9:F7:8E
            X509v3 Authority Key Identifier:
                keyid:BD:FA:D2:3E:11:CF:0D:24:A4:77:59:4E:BA:09:F9:9A:CC:6F:1F:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfrSPhHPDSSkd1lOugn5msxvH_8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/e25239-6ab0-4919-a76a-4f4e71e32084/1/vfrSPhHPDSSkd1lOugn5msxvH_8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:04:16:af:ee:16:72:ba:8c:8e:b6:3f:fb:f1:22:2e:e7:
         6c:e5:d6:9b:de:c6:8a:e7:df:bb:ec:3b:da:10:5d:1c:fb:fe:
         da:c2:ed:8e:64:d8:dd:74:a0:1f:e9:7b:da:a4:9b:f3:4c:5c:
         82:a4:bc:92:fa:43:d2:0a:92:ca:83:52:fe:46:b8:68:d9:45:
         c1:cc:35:a3:b9:0a:53:a6:39:cb:0b:36:d6:ad:3f:b3:6c:86:
         d0:35:96:0b:69:d1:65:48:21:26:0f:02:5c:aa:57:b1:c8:41:
         cb:31:71:a5:15:26:5d:19:4d:8a:2d:ee:59:8a:6d:c5:bf:07:
         11:98:ef:32:45:b9:83:f7:90:0a:5b:df:f6:48:5b:7e:61:d1:
         9a:a2:2b:8b:2a:1c:17:64:b9:1d:c3:a8:45:ea:54:b0:40:f6:
         76:9d:79:de:da:a2:0c:5a:00:6e:73:48:2b:e7:58:41:2c:fa:
         70:dd:21:17:17:3e:87:67:0a:b6:b1:44:61:45:6d:af:2f:28:
         7f:8b:bf:3e:0c:7f:7d:8d:76:5a:aa:55:f1:72:79:a8:87:37:
         ac:1e:eb:b8:61:c4:54:f3:f6:f2:5d:5a:c1:e0:d2:94:13:a7:
         ac:3f:6f:b1:bd:13:95:4a:5b:08:f5:eb:17:24:1a:ef:95:31:
         0a:a1:fb:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/MAb1vmfNMg8qcYFo1sf7oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmFkMjNlMTFjZjBkMjRhNDc3NTk0ZWJhMDlmOTlhY2M2
ZjFmZmYwHhcNMjYwODA0MDkwMTMzWhcNMjYwODA1MDkwMTMzWjAzMTEwLwYDVQQD
Eyg5YjBmMmM3OGE2YmVkYThhYjVjZGNmNzVhYjViYTQyZjg4YTlmNzhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1uRVBF+YWJXgk/URI+KVuf2H7ICu
XP+tPCofHJE2ZD980fg4fvkFqRINavG5fk/Bzad16JxskqswfjgpebclIh9Z3vif
ZLIDEunhOK0dUcryfJ/8g9hRGa56He7qfoP0ajBFE80oo7XNAKh2kpasY8yWuVV5
cRPkHwkmq1SQuMyofkk4ZRpIHSbTmBESIhrrekukBYmWEPJYqO+1dMInhwRvwsxF
h1y3L3Sr5orXSlRlq6Iy+vhQzjmp0qM8yffJrci/N03sv9w6ZBnsHkdznPZuxcwq
RhDLZ4yWiUXYKHr61QEv+gs1EAw1yhG5jFoZUfv5jrkUIapF4GY2HHt4OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJsPLHimvtqKtc3PdatbpC+IqfeOMB8GA1UdIwQY
MBaAFL360j4Rzw0kpHdZTroJ+ZrMbx//MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEt
NGY0ZTcxZTMyMDg0LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9lMjUyMzktNmFiMC00OTE5LWE3NmEtNGY0ZTcxZTMyMDg0
LzEvdmZyU1BoSFBEU1NrZDFsT3VnbjVtc3h2SF84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFJ4EFq/u
FnK6jI62P/vxIi7nbOXWm97Giuffu+w72hBdHPv+2sLtjmTY3XSgH+l72qSb80xc
gqS8kvpD0gqSyoNS/ka4aNlFwcw1o7kKU6Y5yws21q0/s2yG0DWWC2nRZUghJg8C
XKpXschByzFxpRUmXRlNii3uWYptxb8HEZjvMkW5g/eQClvf9khbfmHRmqIriyoc
F2S5HcOoRepUsED2dp153tqiDFoAbnNIK+dYQSz6cN0hFxc+h2cKtrFEYUVtry8o
f4u/Pgx/fY12WqpV8XJ5qIc3rB7ruGHEVPP28l1aweDSlBOnrD9vsb0TlUpbCPXr
FyQa75UxCqH74w==
-----END CERTIFICATE-----
Generated at Tue Aug 4 18:54:41 2026 by rpki-client