Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
File:                     _vyDRELhMPTeeBW_Fpt6BMMDnd0.mft (raw, json)
Hash identifier:          HtHf25S5tasH83yhAUhyDlrKqL+ru5ZcadPnF3DtUXQ=
Subject key identifier:   CE:3E:4A:9A:F3:D6:4A:43:34:01:4D:F0:D5:E2:23:7B:4C:29:D6:EE
Authority key identifier: FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD
Certificate issuer:       /CN=fefc834442e130f4de7815bf169b7a04c3039ddd
Certificate serial:       019D9D3F0B96015415471609D505E3539C00
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
Manifest number:          025E
Signing time:             Fri 17 Apr 2026 21:00:47 +0000
Manifest this update:     Fri 17 Apr 2026 21:00:47 +0000
Manifest next update:     Sat 18 Apr 2026 21:00:47 +0000
Files and hashes:         1: _vyDRELhMPTeeBW_Fpt6BMMDnd0.crl (hash: ueixhnlm5/nuq87LNh/uraaTi7m5iNc9m/wC5OqdXi0=)
                          2: cT6SuWNZtVuKzcAvYCI7FSFaYQE.roa (hash: SjRBTtGgC/H2KCUfLueFpAeHEx9PBCWk0x1hBQie0OQ=)
                          3: ok5r6MoKYHzJuyej6dFp-gTIp3M.asa (hash: grCR+xu1HRWvar49wk30oRQo1ZKpcltQ6YnvXQrsvqw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:00:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:0b:96:01:54:15:47:16:09:d5:05:e3:53:9c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fefc834442e130f4de7815bf169b7a04c3039ddd
        Validity
            Not Before: Apr 17 21:00:47 2026 GMT
            Not After : Apr 18 21:00:47 2026 GMT
        Subject: CN=ce3e4a9af3d64a4334014df0d5e2237b4c29d6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:bc:74:f7:22:df:b8:ac:3f:ce:bd:84:e0:66:
                    4c:34:49:89:31:a9:8b:25:80:b5:eb:87:b2:40:37:
                    03:82:7c:60:ff:6e:a4:a9:70:94:57:1b:29:2a:cc:
                    c7:f1:7d:dc:51:0b:27:7e:03:a2:39:fc:cf:b2:e0:
                    78:c3:cb:2b:04:be:8c:7f:dd:16:c5:7b:81:5c:57:
                    7b:19:38:68:e3:46:0e:6b:27:bb:7c:f9:65:7a:93:
                    4c:8c:9d:c7:21:db:a4:b0:bb:fe:93:6a:a0:ba:10:
                    2d:b4:54:de:23:a8:86:92:98:60:73:d6:86:b8:08:
                    c0:9d:b7:69:62:56:05:da:d3:b4:cf:5a:94:fa:8d:
                    a7:4e:4a:15:f9:85:fe:4c:4e:e8:33:2b:3f:39:3e:
                    9a:d5:b3:2c:f9:df:48:5e:ec:72:ee:63:92:ab:a6:
                    aa:7c:2e:60:7c:30:88:e8:d4:1c:ad:61:ea:5f:e3:
                    9d:90:26:a3:9d:f4:8f:09:c0:59:d0:24:a8:09:c8:
                    d7:e6:46:97:20:4e:42:9a:fb:22:21:66:2c:f3:0c:
                    a7:b0:e4:c8:cb:04:ad:38:b3:51:1e:6a:93:44:56:
                    f6:7f:34:b7:9d:68:3c:60:48:49:ed:1c:d8:f3:58:
                    b9:b6:f0:36:6a:32:ba:c1:2b:aa:5f:b1:04:30:e8:
                    e0:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:3E:4A:9A:F3:D6:4A:43:34:01:4D:F0:D5:E2:23:7B:4C:29:D6:EE
            X509v3 Authority Key Identifier:
                keyid:FE:FC:83:44:42:E1:30:F4:DE:78:15:BF:16:9B:7A:04:C3:03:9D:DD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_vyDRELhMPTeeBW_Fpt6BMMDnd0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/96be7b-7322-4f39-833d-f933b95988c1/1/_vyDRELhMPTeeBW_Fpt6BMMDnd0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a9:43:e1:8b:33:8b:84:be:8a:dc:40:6b:e0:41:86:9d:64:
         6e:c7:53:8b:26:34:2c:39:a7:33:a3:f8:cf:03:f1:6e:b5:12:
         76:ae:8f:97:76:23:96:e3:5c:ae:e8:c5:c1:be:48:32:2d:48:
         6f:1f:f4:cf:56:fe:37:a9:f8:8a:f3:07:46:ab:42:68:b5:eb:
         53:f1:cf:38:97:77:92:2f:5d:c7:41:16:e0:ce:c0:3e:07:a6:
         51:be:a5:c9:d2:4b:dc:40:c6:99:ad:dc:6c:93:0d:43:0e:83:
         fd:45:eb:97:65:d5:6a:65:80:b0:b1:89:9a:ea:d8:c8:3b:b5:
         7e:91:74:dd:c1:6b:d2:3a:2f:8f:9d:3d:fd:a4:84:5b:90:c3:
         1b:df:da:1a:48:d7:69:27:d0:97:13:ea:43:a3:4e:12:d8:8b:
         d1:c5:f6:82:1e:33:91:f6:2c:ec:40:ad:7c:43:2a:5b:4e:7b:
         12:48:b3:85:16:6f:f3:27:ac:0d:4e:56:b8:d2:d4:70:ac:e0:
         51:be:57:7b:ce:28:5d:f9:78:31:ca:56:22:08:a2:6a:c1:a4:
         cc:88:5c:35:e7:f5:7b:0a:56:07:77:b8:c7:ec:74:4c:3f:71:
         02:97:13:83:2d:7e:88:d6:8a:4c:bd:14:ad:8d:a9:d6:fb:2a:
         82:04:19:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:27:51 2026 by rpki-client