Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
File:                     vpxSiWGxCzIPR-i3BlTurtLyRNM.mft (raw, json)
Hash identifier:          qQ89jIwD8g1+JsBu2GaNR1xdOnIshJTVc1+rxeEjyag=
Subject key identifier:   A0:E3:86:40:28:AE:BA:D3:04:CD:51:87:2A:2A:38:7F:83:40:6A:31
Authority key identifier: BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3
Certificate issuer:       /CN=be9c528961b10b320f47e8b70654eeaed2f244d3
Certificate serial:       019D9818819D22A46F8E1F30C57691E8BA81
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
Manifest number:          0EB2
Signing time:             Thu 16 Apr 2026 21:00:35 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:35 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:35 +0000
Files and hashes:         1: 5cNb8WLwOkyZzxqvZpVV_tXxjZY.roa (hash: kGU2pG7tI4JFvO4VXkUaTdEhyoNcFmBCA+lGdKRbj0g=)
                          2: vpxSiWGxCzIPR-i3BlTurtLyRNM.crl (hash: +KQqZtg4JVB4oLAJKA01lq6a8pCpITzmMKi4RiqhUXk=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:81:9d:22:a4:6f:8e:1f:30:c5:76:91:e8:ba:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9c528961b10b320f47e8b70654eeaed2f244d3
        Validity
            Not Before: Apr 16 21:00:35 2026 GMT
            Not After : Apr 17 21:00:35 2026 GMT
        Subject: CN=a0e3864028aebad304cd51872a2a387f83406a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b4:53:71:bb:8a:5c:7c:63:b8:4a:91:28:ae:
                    40:6d:5a:4e:30:17:7b:87:a7:49:63:0e:f2:1d:c5:
                    e3:c0:6d:0c:b3:a8:f7:16:38:28:8d:68:28:c2:f9:
                    4d:63:b1:ca:7f:64:d2:f8:6e:5d:44:8b:90:98:87:
                    7e:d3:df:a5:c9:fa:2d:25:63:12:32:f5:61:ba:c7:
                    b8:0b:0e:b6:32:68:e3:87:60:20:0f:41:0d:39:9e:
                    d5:06:28:3c:d4:24:cb:5f:be:3a:db:f0:ba:0f:0b:
                    69:b6:15:36:80:07:14:4c:41:8e:5f:07:8f:bc:fd:
                    be:22:73:7e:af:3b:73:56:aa:4b:e7:ff:e9:08:45:
                    9b:e4:c1:77:52:b1:bc:d6:b0:de:f3:99:6d:be:4c:
                    35:10:a6:60:eb:c7:29:c1:c6:17:b8:af:40:83:2a:
                    34:9f:a5:90:98:ff:d2:49:14:f1:f7:bf:2f:9f:00:
                    05:e8:a3:6d:51:43:82:d8:42:41:84:6d:be:87:fc:
                    ac:72:93:a7:cc:d6:47:1d:1d:ea:92:ae:e7:b1:65:
                    2d:32:e5:ad:5d:87:66:94:07:35:f7:50:50:bf:68:
                    1d:49:9b:7f:bd:4c:d0:be:1b:90:1f:ed:8b:1f:26:
                    f2:cb:e1:93:fe:b7:3b:f0:cf:5c:23:b9:e4:58:04:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E3:86:40:28:AE:BA:D3:04:CD:51:87:2A:2A:38:7F:83:40:6A:31
            X509v3 Authority Key Identifier:
                keyid:BE:9C:52:89:61:B1:0B:32:0F:47:E8:B7:06:54:EE:AE:D2:F2:44:D3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vpxSiWGxCzIPR-i3BlTurtLyRNM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/98571d-398f-41db-85b0-8c3b3f30d215/1/vpxSiWGxCzIPR-i3BlTurtLyRNM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:f0:00:ed:8c:52:eb:00:f0:35:0b:0a:b4:c5:38:fd:07:c9:
         fe:d2:37:ce:52:ed:78:81:18:e1:c5:f8:bb:d3:a5:eb:89:b1:
         19:c6:8e:35:4c:7c:3a:3d:42:04:d8:64:21:7d:08:96:ee:24:
         a5:08:bb:ba:c7:16:0d:db:1d:67:28:31:b1:03:72:4a:c1:fc:
         00:50:16:6f:a6:30:d4:77:4f:1b:91:57:db:51:66:33:d7:b4:
         10:21:db:d1:ed:fc:a4:94:da:3c:8c:76:81:a7:b9:02:8b:82:
         25:44:db:d4:d2:bb:a7:ba:49:83:23:19:27:5d:a3:77:98:16:
         8a:93:7a:3a:bf:bb:12:f2:ed:4d:d4:30:18:6d:25:fa:58:ef:
         b5:7b:88:e6:3a:ac:f2:20:f3:a0:a3:af:44:fd:2c:f5:83:18:
         26:5c:78:bf:54:12:60:7e:c2:85:cb:5b:09:af:d4:86:3c:ae:
         52:d0:bf:a2:b3:1b:fb:cf:5e:35:ea:7e:ff:33:98:27:68:8b:
         7d:2b:16:ed:14:0d:d6:3c:87:ba:a6:46:de:c4:b4:aa:30:fd:
         e3:07:5b:e3:be:f9:f9:09:b5:4a:af:3a:10:59:a9:a1:42:25:
         28:fc:ac:36:04:1b:77:40:b5:8b:d5:91:ea:e8:f8:c1:56:d2:
         26:d8:ac:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:07:13 2026 by rpki-client