Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
File:                     Vacs_0G9t8fgGFXTkHba9yF0LHA.mft (raw, json)
Hash identifier:          BT15YjTLsBQGGg1qYKoeRckLWGWvMGmgMV/cNB5UBxc=
Subject key identifier:   48:21:3B:8B:04:8E:AA:26:6D:49:1D:63:0D:7A:6E:E5:38:B1:52:08
Authority key identifier: 55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70
Certificate issuer:       /CN=55a72cff41bdb7c7e01855d39076daf721742c70
Certificate serial:       019D9A3E998B6DC8EE2218B06DBF8BE59EC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
Manifest number:          14BA
Signing time:             Fri 17 Apr 2026 07:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 07:01:26 +0000
Manifest next update:     Sat 18 Apr 2026 07:01:26 +0000
Files and hashes:         1: Vacs_0G9t8fgGFXTkHba9yF0LHA.crl (hash: 4BvnhHKegGSnolppdo0C3k/YSQivedihJ6pjivbYO6E=)
                          2: gid3PHY7_WHPVtbluwSuNieeZ-Q.roa (hash: 4gqwUBOsuCwNSypnwWO7WCLX7NlTT/vUufoeKcrMUME=)
                          3: ziiqrtMgnlnu-hPLFOMONS1-3pU.roa (hash: 8ZnAKWsJ3RNRSyRqd1uds5FxjmnKS3VN0RT4iyIYFXM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:3e:99:8b:6d:c8:ee:22:18:b0:6d:bf:8b:e5:9e:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55a72cff41bdb7c7e01855d39076daf721742c70
        Validity
            Not Before: Apr 17 07:01:26 2026 GMT
            Not After : Apr 18 07:01:26 2026 GMT
        Subject: CN=48213b8b048eaa266d491d630d7a6ee538b15208
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b3:43:76:04:d6:73:9f:34:6e:39:ba:51:05:
                    c5:ff:7b:c8:7d:0a:e6:bd:e7:7e:8c:4e:82:5b:29:
                    ca:31:50:00:84:d5:21:55:7f:0d:9b:49:5d:ae:d1:
                    cf:cf:90:ba:c3:db:4e:1a:ad:44:8e:af:d6:7e:0e:
                    e8:c2:20:5e:df:bd:5c:1b:a8:ac:00:6b:e5:33:33:
                    39:d0:aa:6d:a3:b8:da:3c:69:a5:3f:19:3f:78:06:
                    6b:4a:2a:d8:0c:38:63:4f:5c:30:fa:41:59:41:cd:
                    82:f5:03:bc:08:bb:a6:86:16:4a:17:76:cc:ee:b4:
                    dd:56:06:66:86:71:1e:c2:58:9d:bb:86:16:02:e3:
                    b5:65:66:5f:58:1c:76:41:ff:92:8c:c5:e5:2b:e5:
                    e2:73:81:94:d6:30:25:87:6c:03:21:6c:7f:11:20:
                    72:b1:5f:08:4b:92:3f:13:ca:64:c9:78:50:b1:b7:
                    0a:42:c3:25:ed:b9:c8:79:08:86:f6:64:f0:45:8e:
                    3f:62:ac:8b:ef:79:9b:53:3a:bc:75:ab:3b:5f:97:
                    17:83:76:d4:ef:6f:b0:5e:c4:52:44:0e:55:03:d4:
                    b6:dc:ce:b6:f2:f0:24:29:32:a3:4e:27:d5:c2:7f:
                    9c:b8:64:53:b1:72:b8:f6:3f:c1:1a:ea:d4:a6:3a:
                    8f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:21:3B:8B:04:8E:AA:26:6D:49:1D:63:0D:7A:6E:E5:38:B1:52:08
            X509v3 Authority Key Identifier:
                keyid:55:A7:2C:FF:41:BD:B7:C7:E0:18:55:D3:90:76:DA:F7:21:74:2C:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vacs_0G9t8fgGFXTkHba9yF0LHA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/03/4f918b-28d9-419b-8647-338986176b1f/1/Vacs_0G9t8fgGFXTkHba9yF0LHA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:ca:8e:57:93:64:13:e3:eb:23:bd:a7:5b:4d:ec:9e:9a:83:
         ec:95:4b:15:b8:33:bd:77:d3:f7:00:90:ae:f2:9b:8a:c8:d0:
         d9:71:0d:fe:1a:c1:04:f1:26:74:40:0e:fd:87:9b:69:8a:cc:
         e7:78:e4:9d:67:05:53:ad:4c:54:bf:f6:cd:0c:6a:b9:aa:ad:
         b9:d3:6f:f5:4d:fc:99:3e:b4:59:c0:09:a8:8a:47:fe:5a:95:
         98:5d:d0:37:13:77:cc:e9:be:e6:4c:19:df:17:26:6e:5f:88:
         b3:5d:3c:d2:cc:55:89:ab:7d:02:42:59:69:2d:ea:6d:4d:f2:
         05:71:77:ae:85:68:ff:63:df:df:ee:6e:df:b7:0a:ee:51:a3:
         03:c7:b1:ac:14:33:51:88:e7:f0:a6:c8:36:53:88:c8:8e:ac:
         fa:ed:c6:85:4f:92:47:f5:f2:19:95:11:a6:24:65:8f:4f:bf:
         c4:d6:28:45:cc:28:3c:e5:79:f1:43:d3:6e:a6:aa:e3:ec:78:
         dd:09:b0:51:17:f6:57:2f:98:77:31:35:d0:7d:5d:ca:b6:16:
         47:ae:7e:a7:3f:68:a1:28:eb:a6:5b:57:78:02:79:ff:92:6f:
         5d:03:cf:b5:12:73:29:26:8a:16:56:56:9c:6c:07:74:00:74:
         19:92:3d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:20 2026 by rpki-client