Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
File:                     VuM1PV9COtQnHDJhyqVDFAUwvds.mft (raw, json)
Hash identifier:          4tsrEjJc0n+wL3rWF+HI9QrIee0AyZpdRiL37jMZBO0=
Subject key identifier:   79:11:92:64:84:03:84:26:87:51:2C:48:0C:57:E9:A5:4F:B9:06:29
Authority key identifier: 56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB
Certificate issuer:       /CN=56e3353d5f423ad4271c3261caa543140530bddb
Certificate serial:       019DA453D1B489C1D2C9B5B7FFD504360424
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
Manifest number:          18CD
Signing time:             Sun 19 Apr 2026 06:00:49 +0000
Manifest this update:     Sun 19 Apr 2026 06:00:49 +0000
Manifest next update:     Mon 20 Apr 2026 06:00:49 +0000
Files and hashes:         1: VuM1PV9COtQnHDJhyqVDFAUwvds.crl (hash: H+h2yLIPnzjUsKJRftVEjN1yL37lWjTa0CjMfzUNc2U=)
                          2: XIpAxxpbG5GjUPy_zxHWltgBxDQ.roa (hash: T2mIb6X0eqEPDAVOO/ebU2ewF480tOCHv4ChfQbc97I=)
                          3: Z76i2wTRDAmOepRmzRS1ev_NT4o.roa (hash: Llp9bl6+NKH3CHzPYaV6ygi3Grq/2zEaKAN/Vm9U4m8=)
                          4: nTZXu0mW7EUaqutcmXoltJnKDug.roa (hash: nd1ICL4de7eMzQxRdduWRZ7KUAUPy/KehZsx9ppZFRw=)
                          5: qg89v1sf7foDT9XyuTN1l9h6oXk.roa (hash: RdOZrc2OczEQ2vYU/ofPrq6CdWSswAH8iko/GZ11EFA=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 02:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a4:53:d1:b4:89:c1:d2:c9:b5:b7:ff:d5:04:36:04:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56e3353d5f423ad4271c3261caa543140530bddb
        Validity
            Not Before: Apr 19 06:00:49 2026 GMT
            Not After : Apr 20 06:00:49 2026 GMT
        Subject: CN=791192648403842687512c480c57e9a54fb90629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0b:9e:fe:bf:68:28:44:96:cc:e1:66:0e:3a:
                    cf:d0:fc:69:a4:ee:76:cf:82:41:56:f8:54:bc:80:
                    12:7b:eb:a1:85:bb:da:92:a4:0f:fa:23:85:57:0a:
                    ab:20:de:12:f2:1e:23:9f:76:03:19:54:dd:42:87:
                    92:0e:46:40:ed:19:8e:01:f2:6f:09:de:b0:8e:5c:
                    e8:61:02:d7:bf:8f:e3:01:1d:e1:6d:e9:29:40:46:
                    72:02:9c:03:33:fa:47:ca:87:43:0a:0b:48:91:8b:
                    db:3a:51:2a:dd:4d:e9:94:a7:b3:18:8c:3f:90:12:
                    65:36:88:a5:0b:bc:cf:9f:75:f5:00:98:b2:79:6e:
                    ff:8e:70:12:ef:54:1f:f1:40:2b:2c:35:c1:3d:d1:
                    a7:28:3e:e1:82:f5:9c:7b:b7:cc:e8:39:d7:da:14:
                    cd:a2:77:6d:6b:1c:24:49:4d:df:36:c9:7b:a0:88:
                    c3:ed:d1:5a:17:2e:8f:7f:ea:6b:39:aa:4f:2f:96:
                    5b:e4:13:01:14:40:ec:aa:e1:f9:25:0f:0c:52:23:
                    65:7d:07:50:1d:86:9d:b6:a5:74:7a:a7:c8:66:3a:
                    e9:d4:28:38:59:93:e6:c9:d0:08:58:13:85:74:4a:
                    c5:24:60:2e:83:e5:ea:7e:17:b4:b4:55:ad:76:e6:
                    b1:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:11:92:64:84:03:84:26:87:51:2C:48:0C:57:E9:A5:4F:B9:06:29
            X509v3 Authority Key Identifier:
                keyid:56:E3:35:3D:5F:42:3A:D4:27:1C:32:61:CA:A5:43:14:05:30:BD:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuM1PV9COtQnHDJhyqVDFAUwvds.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/6109d6-0a8a-4bf6-a0e2-e52da3b86754/1/VuM1PV9COtQnHDJhyqVDFAUwvds.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:84:4a:40:69:9c:58:3b:46:8f:3f:ae:90:f7:39:fc:63:97:
         a0:ab:e4:e7:16:35:44:b7:8a:b8:cb:36:7d:de:e8:2c:f4:4e:
         1e:0e:fb:cd:f2:34:35:cd:23:ea:24:02:38:32:a4:6c:0a:d3:
         f6:ad:e3:85:cc:ea:a2:f5:4c:1f:3f:26:d6:d4:6c:d5:e1:6f:
         b3:bd:75:32:c7:19:b3:27:74:31:3b:21:b2:ab:88:e9:a7:c1:
         90:57:0b:a4:27:f7:ba:a9:cf:21:04:18:32:c9:24:10:73:cf:
         c7:51:f0:15:37:41:c4:e0:85:3f:7b:46:da:d3:fe:07:c3:a8:
         ea:1f:c0:df:01:2c:0d:3b:a3:5a:af:ae:a6:14:3f:61:69:69:
         ca:ae:b2:0a:d6:13:8f:0d:e3:52:13:c9:0e:db:cf:1f:0e:c4:
         c3:83:75:e6:05:46:8b:49:f7:75:41:38:fe:7f:bd:84:bd:0d:
         d4:42:19:0d:6b:c9:1a:f9:71:db:70:04:2a:e7:a4:07:12:09:
         c8:74:22:3e:4f:45:ca:80:47:e1:3d:8b:c0:bc:92:e8:ba:c2:
         dd:6f:e6:7f:29:20:2b:f0:e2:15:f0:99:f2:97:1c:45:cd:1b:
         2e:88:d3:36:dd:ae:18:20:66:01:1d:6a:c8:94:97:5c:71:4d:
         1c:91:a0:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:37:06 2026 by rpki-client