Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
File:                     VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft (raw, json)
Hash identifier:          3h+G6QTxQkh9AS9hRVs8eTZmKjNFDLJt1tbWdwnDxu4=
Subject key identifier:   B3:54:58:F2:6C:40:A5:2D:F5:DA:33:E2:30:C0:C2:D9:B1:40:74:E7
Authority key identifier: 56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF
Certificate issuer:       /CN=567190854786a16afa6b0ec78dfb0620abaacfef
Certificate serial:       019D9B5154DDF49E1342E24C46D6D61BE765
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
Manifest number:          18C9
Signing time:             Fri 17 Apr 2026 12:01:31 +0000
Manifest this update:     Fri 17 Apr 2026 12:01:31 +0000
Manifest next update:     Sat 18 Apr 2026 12:01:31 +0000
Files and hashes:         1: 8ddVo-9kzKVGW2yLY3eaMsy1rnU.roa (hash: fYg9WUAZvsXCn60kBrtqhNECj69V0bbL3jvATcEdq18=)
                          2: MfN2Gu5BN4G7488wno6PGWe0FDY.roa (hash: kLhLY55A0NkLXCFXmojQ0uiumYsyv2wuegRkrcVkjbs=)
                          3: TUxGT6b7VmBODBTYsF2NgpIkI_g.roa (hash: 3zWjegldqSXFUKgzRCSieNP7a6jAxz4Yeeh+x/krXJ8=)
                          4: VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl (hash: SfEYakn4orZeFmQtl1k6ZCwh/H4FhCANSCMtdLTZDDI=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 12:01:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:51:54:dd:f4:9e:13:42:e2:4c:46:d6:d6:1b:e7:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=567190854786a16afa6b0ec78dfb0620abaacfef
        Validity
            Not Before: Apr 17 12:01:31 2026 GMT
            Not After : Apr 18 12:01:31 2026 GMT
        Subject: CN=b35458f26c40a52df5da33e230c0c2d9b14074e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5f:e6:38:18:38:fe:d5:3e:d3:fb:82:4b:f5:
                    e5:6e:76:68:3b:31:d0:0e:97:3d:03:40:c3:87:31:
                    de:15:2e:70:83:07:c9:eb:46:10:f1:f0:f8:b2:15:
                    07:9a:f7:51:2e:1a:34:a8:83:a4:2d:61:27:df:24:
                    97:cc:6d:30:f6:6a:aa:cf:12:94:3f:11:2f:ce:c0:
                    b0:ec:b5:0e:94:1a:d0:cc:05:1b:a3:49:64:36:18:
                    31:15:21:89:49:3d:22:d0:94:9e:83:e4:4d:26:92:
                    fd:74:59:11:a0:bd:b1:17:22:b7:54:4b:30:0e:5f:
                    35:ba:91:4f:41:a5:23:7b:54:90:40:1f:73:c0:4f:
                    72:70:cd:ff:69:cc:63:b4:7c:ec:9f:b1:85:56:69:
                    ee:59:22:04:98:37:cd:61:81:53:47:b2:ff:45:e2:
                    d3:4a:25:ca:53:b8:9d:6b:d7:a0:e4:44:86:13:09:
                    78:c5:09:93:02:1b:68:f5:cb:93:ad:ed:72:c8:ae:
                    e8:fa:30:b9:6b:29:81:d9:a8:74:14:a4:72:f7:f2:
                    5a:19:6f:da:91:8a:6c:b6:a3:eb:e4:bd:38:a8:43:
                    df:82:b1:ab:c9:37:5c:9d:e7:22:eb:b3:ed:e1:c4:
                    ce:7e:92:6d:b8:5f:fc:e3:0a:ec:85:a3:4f:8a:f2:
                    c7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:54:58:F2:6C:40:A5:2D:F5:DA:33:E2:30:C0:C2:D9:B1:40:74:E7
            X509v3 Authority Key Identifier:
                keyid:56:71:90:85:47:86:A1:6A:FA:6B:0E:C7:8D:FB:06:20:AB:AA:CF:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VnGQhUeGoWr6aw7HjfsGIKuqz-8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/04/24c324-a15e-4cd0-94c1-73ff40959348/1/VnGQhUeGoWr6aw7HjfsGIKuqz-8.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:b9:3f:80:f5:d4:d3:e2:dc:78:17:13:d2:33:8a:d3:e2:e2:
         bd:d3:5f:1c:1c:39:3d:c2:ef:32:68:57:7f:2e:42:f5:77:9f:
         ac:11:b3:6a:d2:9e:e2:40:64:1a:b2:31:d6:50:10:f4:1c:bb:
         7f:24:81:a7:0c:2d:45:7f:90:a1:b7:59:2c:8d:4e:ba:ea:52:
         90:b8:99:43:32:2a:2f:ad:ec:75:bd:a4:37:1d:df:8f:8b:78:
         78:1f:ac:fc:c7:56:b6:ed:ba:55:e2:f0:96:d6:5d:cf:af:47:
         31:c4:0c:c2:f5:6a:fd:1e:cc:ae:69:bf:e7:6a:be:f6:b8:3a:
         dc:0f:c6:1e:2b:4f:c2:12:0e:fd:b1:8c:2f:b6:d2:7a:d3:c6:
         7b:bf:62:4e:b2:dc:63:13:6c:0d:b3:30:40:81:cd:cd:a3:a6:
         df:f7:29:02:5c:d4:e1:4d:00:07:24:21:f8:44:63:d4:2d:17:
         ae:18:50:b6:fd:ec:68:44:b5:df:63:45:17:04:f1:18:09:97:
         f9:03:6b:c3:ab:c3:a8:1d:76:d9:ed:31:ed:51:8b:9c:e5:a8:
         fe:ba:1d:ef:5e:19:cf:31:4c:20:a6:40:84:1d:36:85:ad:6c:
         f2:57:43:f2:bc:50:36:1e:f2:b8:56:46:99:a5:c1:b8:2b:1a:
         af:7a:66:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:31:32 2026 by rpki-client