Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
File:                     VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft (raw, json)
Hash identifier:          g5LaDg845rhrhyzKvWSit2irGqPNYRCv+3GcrMzSEs8=
Subject key identifier:   E0:00:18:AF:21:F7:A5:24:41:A2:BD:11:EC:F0:F6:35:4A:39:FB:56
Authority key identifier: 55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6
Certificate issuer:       /CN=552986484ecd015857ebf61dc4b361302c7916c6
Certificate serial:       019D992BA49AD417E6BD675CB2DB1FEBE2DF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
Manifest number:          06F5
Signing time:             Fri 17 Apr 2026 02:01:07 +0000
Manifest this update:     Fri 17 Apr 2026 02:01:07 +0000
Manifest next update:     Sat 18 Apr 2026 02:01:07 +0000
Files and hashes:         1: APCVsNpvhqWeQcqweSvgt5Wftok.roa (hash: c6yMfxg6aqbcbGYpnlzDdHyhq9WGqsNthHIttzMp2bY=)
                          2: VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl (hash: xeU8ORra2AV36+AL2aK0g+GRCpUQpTp7SnNHCO5y7Wk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:a4:9a:d4:17:e6:bd:67:5c:b2:db:1f:eb:e2:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=552986484ecd015857ebf61dc4b361302c7916c6
        Validity
            Not Before: Apr 17 02:01:07 2026 GMT
            Not After : Apr 18 02:01:07 2026 GMT
        Subject: CN=e00018af21f7a52441a2bd11ecf0f6354a39fb56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:0b:0b:f2:bc:f3:b8:99:47:51:23:e9:80:7d:
                    c4:28:99:72:0e:bb:7a:e4:ef:7d:98:3e:62:a3:a0:
                    de:ae:81:78:2a:1a:86:77:5a:9f:a1:2f:44:be:be:
                    44:a2:43:ae:43:d6:55:f3:14:ed:00:41:1a:6d:e3:
                    aa:7e:2f:a1:af:23:fb:48:9c:55:e6:47:e9:7b:1e:
                    46:76:ad:6b:72:24:84:13:6a:d6:7b:63:3b:57:b5:
                    22:ec:20:08:2b:03:19:1c:c2:71:9e:36:81:a9:a5:
                    89:67:b8:c7:d2:86:c8:3b:b7:52:05:50:5c:83:b5:
                    db:38:c6:e5:1a:fa:9c:30:fc:cc:8b:51:a5:d1:af:
                    cd:1c:6a:a8:58:da:7b:56:3c:c3:a3:b9:bc:ec:ca:
                    a6:0f:61:ba:79:ea:62:61:c1:f3:50:17:fe:9b:b2:
                    da:5a:17:f9:e1:23:19:d8:0a:df:e7:ca:b2:9d:6e:
                    7e:c9:e7:9b:5b:80:8f:31:04:95:cb:28:0e:6b:ad:
                    18:18:e4:57:d8:ce:01:a0:78:f2:12:d6:35:9b:e7:
                    5c:af:39:8a:46:14:12:9a:3c:83:f8:63:3d:58:fe:
                    80:dc:61:70:f6:92:8a:e0:5c:c8:82:4d:ed:73:7d:
                    98:2e:47:1a:18:19:25:50:97:58:cf:ca:9c:10:07:
                    d4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:00:18:AF:21:F7:A5:24:41:A2:BD:11:EC:F0:F6:35:4A:39:FB:56
            X509v3 Authority Key Identifier:
                keyid:55:29:86:48:4E:CD:01:58:57:EB:F6:1D:C4:B3:61:30:2C:79:16:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VSmGSE7NAVhX6_YdxLNhMCx5FsY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/577b09-8d12-42c7-9af3-a164886ffc20/1/VSmGSE7NAVhX6_YdxLNhMCx5FsY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:86:fd:71:5d:fc:b3:73:8f:2b:2b:1e:c9:34:c9:a9:d7:24:
         4f:41:06:50:22:b9:a3:f8:0e:ad:02:c8:d9:26:19:e3:36:eb:
         7a:95:3d:3a:7b:44:6b:ef:69:96:d6:60:f4:5d:bb:38:77:18:
         2c:26:02:a4:9a:81:50:9c:23:05:00:f7:ab:84:0f:e3:b2:fe:
         f2:1b:c7:8d:21:90:2d:de:a2:9d:d3:43:54:f7:51:af:bc:c4:
         8a:20:a6:3a:a5:3e:05:6f:89:a1:85:09:03:3d:3d:2d:49:e5:
         90:06:f9:69:56:3d:28:50:73:44:31:85:d2:c5:1b:8c:18:11:
         6b:bf:02:f5:4b:c3:fe:69:98:b2:91:63:be:a5:a1:8e:e2:3a:
         d8:48:f4:44:69:9e:f8:f0:56:83:7c:43:a4:21:94:70:4b:3d:
         55:89:24:ee:14:26:87:f1:a2:25:0d:4a:96:5f:a8:27:fd:09:
         f9:8c:af:7b:b7:2d:eb:f9:59:e8:ec:b2:2c:1c:13:a0:fa:84:
         b6:ac:ba:81:d3:93:fc:83:a8:6c:0b:69:01:48:17:0c:f3:1f:
         a6:12:fa:bb:e8:37:21:a7:9c:bf:46:b4:8e:b1:56:b5:a4:48:
         82:75:6f:88:73:89:93:50:07:aa:94:67:9e:57:9f:36:d4:d2:
         44:6a:57:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:05 2026 by rpki-client