Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File:                     Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier:          g4MuImdjSEZNdyayv9toBy31fi/sQ0qltpfOfG5U/ZU=
Subject key identifier:   5B:4B:D0:B8:E2:1C:E3:94:E4:F0:4D:F3:A0:22:ED:CB:5A:8B:01:82
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer:       /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial:       019D9BBEAD5840409610E1696E0FC9A06C16
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number:          08D4
Signing time:             Fri 17 Apr 2026 14:00:57 +0000
Manifest this update:     Fri 17 Apr 2026 14:00:57 +0000
Manifest next update:     Sat 18 Apr 2026 14:00:57 +0000
Files and hashes:         1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: IbQrCcLYe0PNRHUjCzKx7QCUy16ET5MgQu9MDSTevB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 14:00:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:be:ad:58:40:40:96:10:e1:69:6e:0f:c9:a0:6c:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
        Validity
            Not Before: Apr 17 14:00:57 2026 GMT
            Not After : Apr 18 14:00:57 2026 GMT
        Subject: CN=5b4bd0b8e21ce394e4f04df3a022edcb5a8b0182
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bf:41:48:2a:42:23:db:57:1e:b3:be:84:d0:
                    fb:2d:0b:b3:4f:54:8d:02:0c:a6:8f:c9:59:09:d9:
                    cb:d3:66:4d:6a:c9:fb:fa:07:0a:85:7b:86:13:88:
                    3c:35:22:63:f3:18:5e:82:2b:16:de:ca:e6:06:50:
                    7e:cd:68:9d:a2:66:d6:31:38:ad:6c:6c:e5:c0:fb:
                    4f:b1:b1:72:39:b4:66:13:e3:92:e9:5c:d6:87:80:
                    34:ff:21:a0:56:48:10:e3:79:d1:2a:fc:1d:43:7a:
                    fe:32:f2:2e:01:9e:f7:89:26:b6:4c:49:1d:f9:6a:
                    fb:2c:05:60:0a:30:c0:32:a6:5e:9e:75:03:be:2c:
                    a0:2f:fb:61:a6:60:59:ff:d1:6d:e4:03:9e:81:fa:
                    aa:79:bf:ce:bb:d3:51:82:5f:97:45:30:9a:63:ac:
                    b8:b7:d7:30:ec:9f:20:d6:d7:e9:38:16:61:d2:e3:
                    eb:8f:71:90:38:e7:e6:78:b8:0e:5c:e6:be:4d:8b:
                    7c:81:08:8e:bb:db:85:ad:49:23:62:46:ea:6b:3f:
                    48:7c:1e:7f:5b:43:03:e7:5f:79:69:77:85:18:eb:
                    f0:8e:2a:aa:e4:d1:bc:3a:7c:9c:ac:e8:89:3d:73:
                    d5:40:61:96:35:9d:99:91:c3:4e:4e:14:a0:e9:a6:
                    c8:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:4B:D0:B8:E2:1C:E3:94:E4:F0:4D:F3:A0:22:ED:CB:5A:8B:01:82
            X509v3 Authority Key Identifier:
                keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:3f:ec:10:08:86:34:5a:e7:39:5c:2c:b1:e1:f1:e4:67:24:
         ca:f4:c7:3f:bb:5e:3f:d4:f5:d7:e0:e5:58:1c:f2:15:46:d0:
         74:27:57:94:db:b7:dd:34:05:a7:b7:e5:10:ff:86:1c:b0:09:
         f2:9f:a6:e5:ff:62:e1:cc:b3:38:2b:ab:d6:66:5c:98:1b:8b:
         65:d8:16:b4:fd:01:b4:4c:3f:a5:22:a0:bd:b6:da:63:86:55:
         c0:4e:36:91:d0:c6:af:7f:ea:0f:bf:7e:ca:22:46:97:99:9e:
         91:d2:66:79:fb:92:85:b8:ac:68:c9:e6:00:25:5b:f1:1f:2e:
         79:02:12:6d:f3:fe:49:73:8f:63:cc:89:ae:b4:9b:68:d0:38:
         e4:4e:70:65:89:04:d4:45:8e:71:a9:a4:c8:32:75:30:aa:ac:
         f8:2f:c5:c9:e7:75:a8:02:be:43:10:81:27:c0:06:cd:2b:c5:
         e2:0e:7f:f4:c8:3a:ff:47:1f:b4:8d:28:02:36:a6:a6:6b:7d:
         51:6f:60:9b:d2:26:33:59:c1:13:cd:9a:e4:21:81:24:7f:24:
         87:cb:02:e2:4a:69:15:a3:f0:6a:08:8c:cf:9a:20:1f:ad:0e:
         f1:b2:e9:ce:c6:6a:90:68:62:78:85:24:a2:d3:3f:d0:e5:5f:
         e1:5b:0f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:42:28 2026 by rpki-client