Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
File:                     vP0tpUR9AHYW693Cpw_qxed8Sos.mft (raw, json)
Hash identifier:          v+xmFjt+hddDrzlPgGcB9J7HHnouDeUBmVuaJKnQsfQ=
Subject key identifier:   42:6A:5D:12:48:5C:19:20:60:3F:C9:7B:43:00:97:E0:8B:16:C4:C8
Authority key identifier: BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B
Certificate issuer:       /CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
Certificate serial:       019D97E2380B2E4CBC293A6F8329050D9436
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
Manifest number:          114E
Signing time:             Thu 16 Apr 2026 20:01:18 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:18 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:18 +0000
Files and hashes:         1: LzPbWPG_oBuqooZgf6q0Sv5qFwU.roa (hash: bu4M8RVjwRLKi11CH/UZIu1ckgHwkgbJ1aYgZl/VVfo=)
                          2: iydyNCqku0iyqPacTYllhNPCn80.asa (hash: fp6zskTh5XWkFdqy5qCCA68XoIJC38cq+DXcEi31rmE=)
                          3: kKQ76IVT9y8M1Y6gmaYWYOnxmC0.roa (hash: Pe2plYPXj2VJbitKAI9QQJcmWUwozx13yiIOtxGQ0bE=)
                          4: mjoeXL0YKi0qX5tXa81sPqAQmfE.roa (hash: 79XJwsYP7m4o5yU2XhvKulLq5eaK7AfCWRdqu5vaupQ=)
                          5: oGFjYMB457098tjZcB4IDP8t_T8.asa (hash: wmqWLS/52CbsgJr1g/RDr3tH7ScaNwfsZY2wcW+gWAI=)
                          6: vP0tpUR9AHYW693Cpw_qxed8Sos.crl (hash: bdeGEkoXAgs7yBV2EUoJssOZdEm3frlBYyhr+DFJQtY=)
                          7: zDRyq7GZVHBwWjuDxN0VCA5Bnuo.roa (hash: X4HMDM0F5U+1Ervgfj4WtC+F1dAOGqN+qUjxRYOQpF8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:38:0b:2e:4c:bc:29:3a:6f:83:29:05:0d:94:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfd2da5447d007616ebddc2a70feac5e77c4a8b
        Validity
            Not Before: Apr 16 20:01:18 2026 GMT
            Not After : Apr 17 20:01:18 2026 GMT
        Subject: CN=426a5d12485c1920603fc97b430097e08b16c4c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:cb:2c:f1:f6:b8:93:31:3d:69:e0:4a:80:86:
                    b5:d5:22:3e:3f:34:98:06:10:5a:d8:24:22:68:b1:
                    7d:1a:9a:b7:5c:94:58:f7:d4:2f:49:4d:d9:47:40:
                    cb:fb:15:e6:ff:26:85:0f:6f:4c:0d:f1:eb:f0:2d:
                    b7:a5:05:3c:ce:83:c6:c4:fa:b9:97:7d:6a:b1:ec:
                    79:7b:a6:23:7a:16:fa:58:35:c8:ae:dd:58:e8:ba:
                    56:a2:c0:83:63:68:62:e9:e4:51:d7:9a:37:ce:08:
                    a6:e9:15:39:9d:05:cb:3e:cf:37:47:2d:45:9d:59:
                    27:f2:39:6d:71:df:62:a6:7f:c1:2e:0c:4c:87:82:
                    68:cd:59:e6:14:5b:60:71:a5:f7:72:08:33:e0:fe:
                    8b:c3:51:a5:98:d7:80:24:b8:00:e6:b6:63:24:12:
                    5c:8e:52:32:af:8e:f3:b3:d7:e5:46:b5:9e:01:20:
                    14:be:0e:61:64:17:9d:2e:5b:8d:dc:9d:2b:12:3c:
                    b6:f9:e3:3d:1b:44:ff:dc:17:c2:bc:ef:44:9d:cf:
                    d6:77:30:a6:83:6f:4d:71:6e:a2:52:ae:b0:2a:02:
                    2f:1c:b3:5c:43:b3:2c:15:3a:f1:68:8e:cc:31:a9:
                    51:1c:3d:a5:3b:70:61:c1:3f:02:57:62:7d:8c:bf:
                    82:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:6A:5D:12:48:5C:19:20:60:3F:C9:7B:43:00:97:E0:8B:16:C4:C8
            X509v3 Authority Key Identifier:
                keyid:BC:FD:2D:A5:44:7D:00:76:16:EB:DD:C2:A7:0F:EA:C5:E7:7C:4A:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP0tpUR9AHYW693Cpw_qxed8Sos.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/21/919fff-252f-4720-ade4-bbfe2196c6af/1/vP0tpUR9AHYW693Cpw_qxed8Sos.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:bf:f7:f7:18:95:19:e7:66:51:84:9d:85:85:86:69:c1:96:
         54:c3:cc:b4:3d:ac:63:28:7d:45:fd:13:dd:06:c8:46:02:bc:
         8d:4d:75:31:3b:55:a5:5b:45:c9:bc:46:d5:41:8c:89:7a:c8:
         14:a7:ae:d6:74:4f:f8:ff:f1:40:fc:ef:5d:8d:8a:23:29:88:
         e7:66:3b:bc:3c:18:3f:5b:9f:d0:03:26:5f:f4:58:c0:23:81:
         ab:fe:e0:bd:ed:74:b2:da:86:1a:c9:23:7f:f9:d6:58:07:44:
         cc:8d:63:4e:ed:b6:4d:59:ed:26:e5:30:fe:96:18:6c:e3:73:
         61:51:79:17:30:87:72:83:92:d8:d5:59:24:78:96:2f:b7:6f:
         c3:52:87:0d:56:ad:4b:07:b8:af:72:ed:88:47:23:e4:50:4c:
         fa:b1:10:db:57:33:ec:aa:d5:33:d7:93:89:ea:10:42:eb:21:
         60:59:24:0c:d5:51:63:3d:2f:d9:fe:d8:3d:fa:02:68:ec:17:
         ec:e5:76:e1:b1:a7:a7:ec:e8:0c:af:3f:93:15:01:34:88:90:
         ed:e5:80:2a:25:ed:41:e3:c2:1c:a4:97:5d:8a:94:83:22:1b:
         c6:87:7d:15:30:4c:6f:73:26:51:11:37:16:3d:40:7a:3e:9e:
         6d:b2:87:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:29 2026 by rpki-client