Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
File:                     VSyaHJxP95PoiL1YPcqYFcxFdMA.mft (raw, json)
Hash identifier:          cJqmq02Y2QQ23pSCSQgMBI/Z183DHPbiZtktOMEECwo=
Subject key identifier:   F1:FC:17:06:4E:3C:D5:99:DB:7F:E6:0F:6E:EF:CD:18:CE:D9:E7:13
Authority key identifier: 55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0
Certificate issuer:       /CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
Certificate serial:       019D9A3E6FFE41A46247B1C7EA77BE88975E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
Manifest number:          1853
Signing time:             Fri 17 Apr 2026 07:01:16 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:16 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:16 +0000
Files and hashes:         1: 6X4Jk6qo75EQY5AqZ7LyaMmPOj4.roa (hash: mTjThBJAOSa8qyri48cjOYYkA9lZErxqgqTP6n0jrYU=)
                          2: VSyaHJxP95PoiL1YPcqYFcxFdMA.crl (hash: +CJQ34D0bgoOerrEXd2hau5AgmUneIcGk7IYfxKOijA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:6f:fe:41:a4:62:47:b1:c7:ea:77:be:88:97:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552c9a1c9c4ff793e888bd583dca9815cc4574c0
        Validity
            Not Before: Apr 17 07:01:16 2026 GMT
            Not After : Apr 18 07:01:16 2026 GMT
        Subject: CN=f1fc17064e3cd599db7fe60f6eefcd18ced9e713
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ec:78:9a:6d:46:91:17:dd:61:1b:45:47:b6:
                    4a:2a:bf:28:19:e3:12:72:55:99:4b:a6:87:f2:ec:
                    dc:6c:cd:e8:d6:73:1d:06:8d:e0:e6:9b:7b:34:9e:
                    80:3a:09:88:cb:db:21:79:11:6c:2c:ba:1c:c9:1d:
                    4b:94:61:26:8e:80:10:15:06:e2:50:f3:9b:6d:6c:
                    60:49:06:aa:e2:ec:aa:d2:f6:2b:bc:4f:14:82:16:
                    21:5b:82:b4:ba:21:43:4b:1a:e5:d0:24:54:72:8f:
                    39:af:af:d3:a9:87:50:18:3a:2d:2a:0b:57:1b:2c:
                    f1:3a:78:b7:bc:16:36:a5:37:a5:08:94:d8:73:e4:
                    ba:41:55:d1:2b:a6:22:bb:bd:05:8f:97:86:4c:24:
                    3e:fc:93:fc:2d:8a:50:8f:2c:91:ec:0f:18:ad:bf:
                    bb:42:5a:f7:2f:c2:87:9d:b6:91:90:53:db:31:29:
                    e1:0b:27:6e:62:d3:10:1e:e1:42:49:7e:08:b5:a0:
                    2c:fd:c1:7c:d5:d9:aa:3a:48:03:83:5f:4c:45:50:
                    eb:80:7e:24:7d:33:46:32:a8:c3:c6:c0:bc:4e:e4:
                    13:2a:03:59:2c:70:2e:8f:7d:d4:ab:9c:96:99:b8:
                    17:ca:33:51:7f:93:87:68:1b:37:2a:94:06:d4:a5:
                    2d:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FC:17:06:4E:3C:D5:99:DB:7F:E6:0F:6E:EF:CD:18:CE:D9:E7:13
            X509v3 Authority Key Identifier:
                keyid:55:2C:9A:1C:9C:4F:F7:93:E8:88:BD:58:3D:CA:98:15:CC:45:74:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSyaHJxP95PoiL1YPcqYFcxFdMA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/02/5bcea5-8e45-458a-b031-b78ff80a8027/1/VSyaHJxP95PoiL1YPcqYFcxFdMA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:57:55:be:1f:5c:22:e2:48:fd:bc:97:b1:34:bb:50:4a:33:
         29:aa:cb:47:07:ef:a4:d1:41:a9:8c:b2:82:63:87:22:b1:20:
         7a:f7:ba:7d:ed:e5:7a:c0:6d:18:ef:74:f8:9b:4c:a8:47:0e:
         3b:f2:7d:0d:3c:93:0c:c2:9c:cf:0c:da:4a:44:2c:73:1f:05:
         96:e5:95:4f:47:cf:5a:ec:45:bd:19:f7:18:bf:02:57:74:54:
         0b:a6:4f:9a:fa:a1:50:57:23:2d:dd:88:a1:48:38:21:02:36:
         98:73:ab:3c:46:c4:77:fd:d4:d1:e7:66:a4:ec:54:79:d3:44:
         2f:9f:64:4e:a5:73:7a:73:81:aa:a1:5b:d6:d9:95:eb:76:19:
         e5:ea:7f:c3:aa:e1:1e:51:a7:27:68:d6:ec:47:85:46:fb:28:
         c3:16:cb:af:a9:5d:60:ed:7b:37:fa:6f:2b:a8:f3:50:58:c0:
         96:51:d4:fe:7f:7d:c2:26:1e:cc:a8:3d:80:c9:f6:ee:94:12:
         d7:ac:f7:93:21:6c:e2:2b:1e:3b:47:65:ec:7d:b2:b5:19:6b:
         a6:60:a8:af:19:d4:08:84:ec:13:18:2d:10:7e:96:f1:2e:00:
         39:d3:3d:eb:b4:0f:de:aa:a4:98:5b:56:7b:52:6e:40:99:6f:
         ad:3b:1d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:53:03 2026 by rpki-client