Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File:                     VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier:          WZQ3pd3DBfp/xYhwyZGn11oep3Hv2B+Kv+uBbjWPCyk=
Subject key identifier:   77:DA:46:1B:5E:B7:5F:13:13:9E:7E:25:91:4D:12:6F:5A:F5:06:EC
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer:       /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial:       019DA3E64733A298264863E9DCAA33FD1805
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number:          1131
Signing time:             Sun 19 Apr 2026 04:01:10 +0000
Manifest this update:     Sun 19 Apr 2026 04:01:10 +0000
Manifest next update:     Mon 20 Apr 2026 04:01:10 +0000
Files and hashes:         1: V2cjOhTQXe6Evf6XRnc71HEafpI.roa (hash: kxeF/2UnyuUG3dI7TNbvTa7lcDx1pSDsD3opjO0zHiI=)
                          2: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: UcqBuHCiMuy1cFxqVTkFI95EFX5UieRDqz/pgjt8owU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:e6:47:33:a2:98:26:48:63:e9:dc:aa:33:fd:18:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
        Validity
            Not Before: Apr 19 04:01:10 2026 GMT
            Not After : Apr 20 04:01:10 2026 GMT
        Subject: CN=77da461b5eb75f13139e7e25914d126f5af506ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:35:eb:b2:e6:73:31:7a:f2:de:bd:29:c2:b4:
                    88:4c:ea:b5:f3:a6:e3:40:4b:7e:7d:e3:89:13:d7:
                    f7:a3:5a:89:25:03:6a:03:fb:67:44:ba:98:87:b3:
                    7e:48:7c:a4:c1:65:6f:ce:c1:95:03:39:1f:55:9f:
                    e8:6d:a7:e4:a5:63:e9:48:16:9a:65:8f:4b:1b:88:
                    65:99:39:cd:7d:7f:7f:8f:ec:a1:7f:ae:52:ca:c7:
                    bb:f7:e9:39:a7:59:22:3c:3b:06:20:a7:3e:56:de:
                    fc:0b:81:c4:fb:86:26:bc:8a:4a:12:aa:82:10:d6:
                    e7:a9:5c:2b:2a:b2:52:08:f0:e3:b2:4b:5a:f5:0a:
                    fd:f1:ae:c6:66:11:3e:eb:2e:9d:9c:75:e7:7d:2b:
                    e4:b9:54:ca:3d:1c:21:38:d1:f3:3c:c2:8d:d5:4e:
                    af:06:be:9e:b0:a6:a3:9c:b1:fe:85:c6:cc:c4:bf:
                    ce:b6:ef:3b:62:cd:56:c5:f3:b7:18:0e:e4:f7:9e:
                    30:dd:7d:69:25:9c:e0:79:b7:f7:0d:72:15:54:9a:
                    e5:80:58:85:1a:9e:62:0e:bc:63:02:7a:a9:a1:fd:
                    ec:56:a3:6d:f9:ff:47:d1:52:db:c9:05:77:e1:27:
                    83:0b:ed:2d:38:95:b6:71:27:bb:19:83:05:e6:64:
                    2e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:DA:46:1B:5E:B7:5F:13:13:9E:7E:25:91:4D:12:6F:5A:F5:06:EC
            X509v3 Authority Key Identifier:
                keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:c8:f9:52:f2:63:a6:03:8f:da:73:59:e0:90:ac:1e:84:6f:
         d0:43:4f:e9:9d:3e:8a:9a:51:7f:04:70:c5:53:b9:2a:14:78:
         78:02:5d:46:06:1f:3a:43:bf:37:89:78:88:ba:52:cc:88:f7:
         6b:40:05:65:5d:94:8c:08:5e:3e:3f:98:d3:13:78:6c:42:17:
         28:60:d9:f6:b1:a6:65:5b:b6:91:6e:46:df:ee:14:38:d8:6e:
         63:3d:70:93:37:b7:b8:79:90:ec:75:e0:51:fd:65:2d:93:0e:
         b7:5e:77:39:d6:4a:42:c8:59:6f:0f:4b:b6:8c:91:13:68:7e:
         bc:48:3e:a0:08:4d:90:ff:eb:37:9f:8f:81:ce:3d:35:99:ca:
         ee:60:30:15:3c:b9:12:e2:7a:41:d4:76:46:ae:0b:e3:41:26:
         97:b5:e5:eb:f0:bd:e5:fc:2f:03:7e:ad:59:f8:d6:b2:a3:e8:
         a6:dc:3e:7b:61:af:ae:9f:cc:27:28:78:e1:66:03:45:49:9c:
         d2:38:80:e9:bf:3d:e3:9e:62:dc:00:fa:66:2a:d1:c6:54:6e:
         a6:a7:43:50:9b:e8:ed:8d:59:39:36:60:b5:7c:bb:eb:9c:c5:
         2d:51:fb:7a:86:51:ad:79:aa:6d:00:6b:00:ec:bc:15:51:1a:
         57:d0:76:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:47:48 2026 by rpki-client