Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
File:                     vp_DiEcFxK7c_npNF923UuH-YZg.mft (raw, json)
Hash identifier:          Xc4YkhhLF9dwdoazuVYQyD6i/lLJlpeji9cMP6TPxvA=
Subject key identifier:   0D:83:C6:71:A5:70:0E:7A:92:B1:5D:E3:18:10:92:C3:A1:CA:F5:78
Authority key identifier: BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98
Certificate issuer:       /CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
Certificate serial:       019D9CD11936A6CCE3C5D751172F37020536
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
Manifest number:          1243
Signing time:             Fri 17 Apr 2026 19:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 19:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 19:00:42 +0000
Files and hashes:         1: GQuqiJCjADcOHZotsrXYJd_Wc00.roa (hash: L+5tYtA+LDnIm5xyBc0OjV0H0SUAJm6feygTs+2eqRo=)
                          2: vp_DiEcFxK7c_npNF923UuH-YZg.crl (hash: gzq4s5esASL7zAm2nevS+8eBazIuJOkLO2tTnnPk+Zw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 16:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:d1:19:36:a6:cc:e3:c5:d7:51:17:2f:37:02:05:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be9fc3884705c4aedcfe7a4d17ddb752e1fe6198
        Validity
            Not Before: Apr 17 19:00:42 2026 GMT
            Not After : Apr 18 19:00:42 2026 GMT
        Subject: CN=0d83c671a5700e7a92b15de3181092c3a1caf578
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:66:d6:12:00:60:3a:e4:0d:3e:f6:1b:72:43:
                    e0:e8:3e:a7:57:db:c5:5f:eb:28:e6:5a:7f:cc:03:
                    35:aa:02:44:90:47:d1:3a:37:09:7c:eb:46:4c:b1:
                    09:94:2a:d5:64:9b:22:95:75:ba:bd:01:57:9c:6d:
                    9f:a7:25:9f:a0:98:5d:89:d2:ba:c4:51:b4:49:ba:
                    fc:91:df:ea:0f:3f:fd:de:d2:3b:6a:c9:97:4f:91:
                    4e:99:f9:59:28:37:22:65:e4:35:79:fd:72:ae:a5:
                    f7:2b:fd:c5:23:7c:f8:ff:61:77:13:c8:ef:03:1d:
                    c6:7c:b0:2b:4d:f5:8a:ac:d9:31:ab:d3:d1:8d:44:
                    b5:4b:69:72:82:14:6c:4e:ed:c9:d7:cf:3f:e1:a3:
                    74:7b:c5:7b:03:5e:a3:58:a7:dc:bb:34:54:3d:96:
                    bd:0f:cd:d0:c5:3e:ca:00:d9:91:78:86:bb:ba:ac:
                    6b:1a:07:9f:74:8d:a5:be:77:2a:68:d1:fa:29:5d:
                    b9:cb:b1:d7:2e:0f:84:47:1a:10:43:7a:b2:7c:c7:
                    59:1e:7f:ba:2f:31:ec:a5:44:89:71:9d:81:4d:9d:
                    8c:22:dd:43:25:39:c5:ad:56:7c:7d:82:b9:ee:cf:
                    c9:fa:4d:aa:1f:df:18:c0:9c:0c:5f:01:e1:4f:67:
                    18:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:83:C6:71:A5:70:0E:7A:92:B1:5D:E3:18:10:92:C3:A1:CA:F5:78
            X509v3 Authority Key Identifier:
                keyid:BE:9F:C3:88:47:05:C4:AE:DC:FE:7A:4D:17:DD:B7:52:E1:FE:61:98

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vp_DiEcFxK7c_npNF923UuH-YZg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/14/6222f1-f4dc-4704-b946-1906a4a1f993/1/vp_DiEcFxK7c_npNF923UuH-YZg.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:47:49:b8:74:03:2f:57:3a:bb:b1:3c:64:8e:70:8a:9c:a9:
         8b:49:49:2f:bb:ce:71:b7:6d:7b:14:2f:09:8f:17:1b:6b:c4:
         e0:96:d0:12:88:d6:f2:2d:ce:e1:c9:c6:7f:9a:39:1c:29:85:
         2a:7c:c4:67:aa:5f:2e:33:e0:02:87:53:1a:03:52:40:ee:91:
         83:12:8a:6f:5a:84:71:8d:fb:54:be:61:a5:ca:1c:78:74:44:
         b3:2c:46:f5:55:0a:3b:9c:b5:50:73:a7:6a:b5:99:52:91:f1:
         ee:28:f8:f3:5c:fb:3c:41:fa:c5:0a:65:1f:d8:a1:00:07:1b:
         3a:39:12:1a:c8:c3:46:26:9a:5b:62:7f:39:09:68:2f:05:cf:
         a4:56:cb:cc:54:fa:8f:c9:3b:a9:6f:e3:60:99:0a:06:f0:20:
         f7:42:7d:8c:32:4b:68:27:e7:e8:eb:ff:63:01:c0:69:d2:18:
         bb:c0:75:3e:bd:9d:0d:8b:5f:bc:89:b1:e2:b4:88:95:e2:32:
         e2:ef:76:0c:46:9d:a7:88:bb:02:75:50:59:c7:35:3b:3c:13:
         02:ec:71:b6:31:75:d8:68:ea:d0:d0:3d:cb:1e:ca:e8:11:8b:
         8c:5e:34:26:2c:fe:3c:c3:bb:6a:86:af:60:46:e7:48:d5:6a:
         bb:19:1b:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:27:10 2026 by rpki-client