Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
File:                     vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft (raw, json)
Hash identifier:          6CMnjk2/MBfYGYmWSxAzircWJ+rIjnTQVStOSS9b86Q=
Subject key identifier:   96:A4:A2:6F:B1:62:68:FE:C8:99:5B:45:B8:D9:A8:DA:69:B3:D7:F4
Authority key identifier: BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8
Certificate issuer:       /CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
Certificate serial:       019D9C6392DAE36A1E2244E247812024D501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
Manifest number:          18C4
Signing time:             Fri 17 Apr 2026 17:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 17:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 17:01:04 +0000
Files and hashes:         1: owpSV77jbxZ9VhY5GoPY3SzakH4.roa (hash: bIn4GPl6r1y0htBGN921xbLzQeP4Y7NtdCfbY0WeOD8=)
                          2: vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl (hash: I+t0QLya5ityppoit3tY8Q9zTiMvJq9Xx3U/3HnhBLU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:63:92:da:e3:6a:1e:22:44:e2:47:81:20:24:d5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdb7aac7c493bc8aa7ec7059d3ec76bbfc2f23d8
        Validity
            Not Before: Apr 17 17:01:04 2026 GMT
            Not After : Apr 18 17:01:04 2026 GMT
        Subject: CN=96a4a26fb16268fec8995b45b8d9a8da69b3d7f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:4b:cc:6e:e3:db:b3:9d:35:b8:13:1e:dd:
                    b9:54:b9:3b:c9:58:1e:52:df:2d:61:ef:1b:b4:99:
                    b9:d1:2f:91:6a:1d:bd:d7:fa:af:6a:37:cb:c0:5c:
                    26:bd:2c:2d:f5:93:e7:a6:1a:a8:aa:25:e2:cb:a6:
                    f1:94:6d:9f:ee:70:cf:e2:dc:11:f8:f3:9d:73:71:
                    c8:fb:e6:f0:eb:39:77:cb:4b:03:45:f2:29:3f:7b:
                    57:8e:1b:10:41:98:5c:59:11:e4:ba:3a:c5:ee:4f:
                    51:ae:3a:a8:ec:97:ab:d1:ad:91:c1:ac:cb:33:2b:
                    99:4a:9d:05:85:8d:22:a1:d1:2a:9e:2a:6d:98:57:
                    a6:ac:43:cf:02:6d:6d:d0:ae:23:8e:6d:22:f0:93:
                    7c:86:9b:83:09:95:8b:a2:d8:05:e6:75:fa:c4:21:
                    7a:60:b3:a8:de:fe:84:0e:34:ab:62:93:04:e5:85:
                    c3:c0:0e:e3:1f:4d:66:cd:4f:66:36:21:4a:62:77:
                    69:b2:b0:e7:64:1e:6b:45:36:c0:4d:4f:bb:02:98:
                    54:de:67:8d:2f:b7:ea:7c:6e:1b:0e:f9:82:29:b1:
                    63:13:8b:0b:fb:fe:cc:6e:fb:b1:f5:cb:a6:26:98:
                    5a:d7:1c:53:1e:56:7b:7a:52:52:69:3f:9e:44:34:
                    e2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:A4:A2:6F:B1:62:68:FE:C8:99:5B:45:B8:D9:A8:DA:69:B3:D7:F4
            X509v3 Authority Key Identifier:
                keyid:BD:B7:AA:C7:C4:93:BC:8A:A7:EC:70:59:D3:EC:76:BB:FC:2F:23:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbeqx8STvIqn7HBZ0-x2u_wvI9g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/c00989-f654-47c4-bb09-697c0e2c3d35/1/vbeqx8STvIqn7HBZ0-x2u_wvI9g.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:48:d5:f6:50:8d:45:54:45:dd:e8:dd:df:39:53:85:f7:3b:
         3a:b5:55:3b:c8:5b:b2:5c:2c:84:00:d2:fa:3a:85:c0:8d:93:
         a4:8a:75:ae:bd:d8:9b:3a:06:af:ea:34:43:9a:ec:b1:bb:1e:
         8e:4e:11:45:51:1a:6a:f7:3a:e4:e1:c8:7d:ea:e4:7b:78:70:
         74:c1:78:f8:ae:f2:4b:57:4b:df:ec:df:90:7f:a4:93:3b:43:
         91:de:ee:e7:ab:10:16:18:7a:9c:bf:f9:ca:74:ec:aa:1d:72:
         69:d6:27:51:ff:31:39:d0:c2:00:32:0d:ac:60:7c:db:28:3e:
         44:7a:f7:ad:9a:9d:e5:35:62:8e:74:47:34:44:c9:a1:57:7e:
         65:cd:8f:1e:60:e8:0b:7e:09:0f:db:86:42:c0:06:03:7f:7e:
         19:3c:ea:9f:12:7a:de:33:77:76:0d:f4:fd:04:91:09:46:dd:
         ce:ed:c4:e8:2c:0b:83:02:72:4b:2a:83:46:05:1f:de:82:bb:
         00:8d:61:ce:c3:3d:16:34:f7:f0:ff:e3:8c:34:29:31:a1:2a:
         2b:4e:58:fa:35:26:d7:32:7a:f9:6c:d6:02:bc:ef:1c:2d:8d:
         54:10:b7:87:8f:d5:07:cd:5f:f8:cb:77:c8:f2:c0:09:06:ef:
         3a:a0:28:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:28:32 2026 by rpki-client