Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
File:                     VEqCql4utxcZt_nwSaMHsSRUSX4.mft (raw, json)
Hash identifier:          pAZXJbTiAZfoiOo+LwnAp4ved1jCYRLh/3is7+iQaU0=
Subject key identifier:   CB:78:65:3F:E7:56:1C:3A:6A:7F:E7:19:BB:00:36:22:18:78:7C:24
Authority key identifier: 54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E
Certificate issuer:       /CN=544a82aa5e2eb71719b7f9f049a307b12454497e
Certificate serial:       019D9962E00FAB8354276CE6A14A2C76EDBC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
Manifest number:          0244
Signing time:             Fri 17 Apr 2026 03:01:27 +0000
Manifest this update:     Fri 17 Apr 2026 03:01:27 +0000
Manifest next update:     Sat 18 Apr 2026 03:01:27 +0000
Files and hashes:         1: H6jqDEJRJpVr93f9cwyj02eDJQY.roa (hash: mWxd5ho3il9qT+YkcgFPJftqIG0LtGdKvw/h7Kypl5g=)
                          2: RbDv9om36VGdfj4sP2hWAWIrprM.roa (hash: j16gY87VazEcMx90i+9GsqFwQt4sTzrz7mpLoM5YdNM=)
                          3: VEqCql4utxcZt_nwSaMHsSRUSX4.crl (hash: Ye3DyzDm9JKt1AysfAQ1Mj3BLTOpzDdRW3CWchLqm98=)
                          4: uUGoEjdfbBo-jF6U1dwSdm-Vmro.roa (hash: zwHsLDdeMuR8VmDXVFWRldbxh4F8eqhJM3STNDr64Ug=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 03:01:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:62:e0:0f:ab:83:54:27:6c:e6:a1:4a:2c:76:ed:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=544a82aa5e2eb71719b7f9f049a307b12454497e
        Validity
            Not Before: Apr 17 03:01:27 2026 GMT
            Not After : Apr 18 03:01:27 2026 GMT
        Subject: CN=cb78653fe7561c3a6a7fe719bb00362218787c24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:0b:45:32:2b:d8:19:1b:27:5e:29:67:62:9f:
                    e0:33:b3:7f:7f:d2:dd:25:bf:f9:3e:6e:00:b3:8f:
                    8b:07:15:66:06:8a:89:77:f6:9b:0a:56:2a:52:5a:
                    46:00:67:18:2c:5a:dc:33:22:b7:64:01:fc:f4:d3:
                    cc:3a:af:cd:7f:f4:f1:80:55:f2:13:b3:a7:d6:0f:
                    68:54:c0:0b:b7:f2:da:37:ed:8d:b7:2c:dc:1b:19:
                    16:04:ca:f0:eb:69:96:89:49:70:5b:0b:95:32:5e:
                    b5:6c:3b:b4:8e:b5:36:7f:48:bf:c7:d6:49:40:e0:
                    42:a4:2a:00:3c:16:32:55:29:0c:a3:a3:7b:1a:25:
                    1a:20:7f:36:ae:86:3e:20:3a:33:f2:36:6f:02:80:
                    96:df:4f:9c:d6:8c:57:14:bc:4d:2a:e6:c4:69:11:
                    8a:f0:85:e6:99:14:5c:48:46:c2:54:f3:9c:62:0a:
                    e0:4e:af:cf:ee:4c:19:f2:82:8d:82:a3:a0:f4:72:
                    d7:ae:0c:7c:8e:ed:22:c5:e0:28:b4:ca:bc:b0:a2:
                    56:2d:32:67:cb:e6:d6:09:71:4a:8a:0f:99:ee:68:
                    fe:74:18:94:29:48:27:59:6f:f2:08:52:7a:20:1f:
                    0c:47:2d:ea:19:62:31:12:68:73:c5:14:16:53:04:
                    1c:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:78:65:3F:E7:56:1C:3A:6A:7F:E7:19:BB:00:36:22:18:78:7C:24
            X509v3 Authority Key Identifier:
                keyid:54:4A:82:AA:5E:2E:B7:17:19:B7:F9:F0:49:A3:07:B1:24:54:49:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VEqCql4utxcZt_nwSaMHsSRUSX4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/c5018c-fdc6-414b-beef-02de0124228e/1/VEqCql4utxcZt_nwSaMHsSRUSX4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:b9:8e:47:76:8c:61:e3:af:49:76:1a:94:0f:e4:1e:3f:47:
         9c:c6:a4:57:61:b5:fd:d7:a8:6f:01:10:55:7d:87:d4:fa:4b:
         0c:8c:7a:77:76:f3:88:f7:0c:03:8d:6e:bb:c7:81:1c:50:5f:
         d1:b9:1d:df:22:b5:56:8f:41:e5:a2:49:9e:4c:84:61:b6:34:
         1c:b8:b3:e2:31:b1:2a:37:c3:da:bd:62:f5:69:7b:6b:cc:27:
         85:94:d1:72:18:07:7b:d9:76:65:d3:85:ce:f1:07:8d:0a:cd:
         f0:50:a7:3b:b2:21:27:9a:5e:19:c2:e5:81:85:2b:f2:16:06:
         c8:75:75:99:d3:c1:05:4e:30:e7:8f:8d:09:3e:7f:07:45:09:
         13:be:dd:83:4e:0c:22:8c:eb:c3:00:30:1c:4d:45:7c:b0:2a:
         14:83:44:15:02:c2:a7:30:f2:c6:9c:46:b0:40:2b:a3:4a:7d:
         28:46:cc:3d:8b:30:27:de:4f:fc:be:ae:d1:d9:4b:27:3a:2c:
         ea:60:13:d2:a2:c4:ec:81:c6:59:82:ea:4f:f6:03:2b:15:2d:
         c9:62:b6:63:78:04:88:18:7f:02:6a:c5:28:5f:01:f8:40:ae:
         d1:03:45:76:66:8b:33:32:15:20:7c:5b:2a:7f:29:f3:cf:35:
         6e:d9:f6:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:31:12 2026 by rpki-client