Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
File:                     Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft (raw, json)
Hash identifier:          k8iIZQ+oBJs2DJ/aELgbkOA13AIoSpApQwE5CwAsOI0=
Subject key identifier:   FB:7B:61:CE:9F:72:49:1D:72:4D:5D:34:D5:76:E4:20:77:C2:32:E2
Authority key identifier: 56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0
Certificate issuer:       /CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
Certificate serial:       019D981871AF5042BA69454249C89B36830F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
Manifest number:          18C4
Signing time:             Thu 16 Apr 2026 21:00:31 +0000
Manifest this update:     Thu 16 Apr 2026 21:00:31 +0000
Manifest next update:     Fri 17 Apr 2026 21:00:31 +0000
Files and hashes:         1: I-ukRrCAPBajw4Cw7SX_HqtjY_Y.roa (hash: nRHAOv53R6oXv1iB+S9TIyPCUUphzX+kQpcWt0Y3Kbw=)
                          2: Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl (hash: 3AVLyJ/J/weFlI8dRZg93NQdp+oPH4T0Ki8G4Ni0gcE=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 21:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:18:71:af:50:42:ba:69:45:42:49:c8:9b:36:83:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56aa1eed990ed031ee17b0b13da8f83e0efba2b0
        Validity
            Not Before: Apr 16 21:00:31 2026 GMT
            Not After : Apr 17 21:00:31 2026 GMT
        Subject: CN=fb7b61ce9f72491d724d5d34d576e42077c232e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:01:0b:54:24:4a:a3:de:86:79:e0:2c:79:08:
                    aa:d4:d9:a6:75:ac:97:90:19:fd:e1:ab:a4:c8:92:
                    4e:a7:27:36:04:a7:90:47:fd:66:09:23:76:73:50:
                    d1:ab:28:68:08:46:a9:b5:ce:e4:a4:32:d9:94:9a:
                    18:aa:d2:e7:6b:56:fb:f8:31:be:aa:91:eb:22:7e:
                    02:46:4d:c6:e8:de:93:2b:57:f5:e1:30:7b:ed:2c:
                    13:a6:f5:af:a8:66:19:05:e6:50:a3:47:22:42:40:
                    d2:ca:19:3e:75:49:7b:ed:b6:d0:09:9b:48:43:6b:
                    e2:f0:b8:76:44:59:db:36:15:ec:89:de:61:d9:57:
                    08:ab:df:25:5a:4b:38:54:d3:97:b4:fc:42:5e:41:
                    d0:ea:f9:80:15:2a:9a:59:53:c2:7a:4f:45:4a:3e:
                    56:bc:f4:3b:61:26:b0:9c:9e:6c:c2:d8:0a:02:cc:
                    9f:df:fa:89:0f:7c:17:87:e2:38:29:e5:8c:40:ce:
                    94:59:e5:bf:b8:39:24:34:1f:61:81:b0:36:54:c5:
                    d6:88:f6:29:c2:28:ae:7d:1b:81:90:97:d9:ae:71:
                    16:02:a2:72:50:0a:5d:b4:f3:2d:fa:9e:d7:dd:ac:
                    1c:a3:7d:4e:ea:5d:aa:8e:93:7b:05:9e:48:2e:80:
                    63:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:7B:61:CE:9F:72:49:1D:72:4D:5D:34:D5:76:E4:20:77:C2:32:E2
            X509v3 Authority Key Identifier:
                keyid:56:AA:1E:ED:99:0E:D0:31:EE:17:B0:B1:3D:A8:F8:3E:0E:FB:A2:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/5d20f4-2977-4e06-9e72-ac4549977901/1/Vqoe7ZkO0DHuF7CxPaj4Pg77orA.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:a9:ff:d1:29:8e:ba:4c:42:00:2c:08:57:1e:94:2a:95:38:
         5e:8d:d0:d6:fa:aa:92:2e:36:68:48:3b:50:dc:3e:5c:c4:12:
         2c:3c:12:af:87:7e:09:56:d1:93:d4:1c:2f:8f:30:8d:9b:8b:
         57:61:20:2c:9a:80:38:87:bc:bc:f9:28:a9:6d:b2:2e:87:b7:
         b4:3a:9e:51:7a:71:b2:81:4e:8e:09:1c:29:da:af:e4:df:b7:
         7e:53:c7:cc:1f:3a:ba:c5:cf:58:64:f6:84:86:e7:22:20:e0:
         99:db:64:bc:cc:f3:5b:38:f1:e4:33:17:a2:48:de:da:b5:a1:
         61:1b:0d:1f:b2:a3:3d:dc:01:38:30:0a:8f:8e:7d:97:55:6f:
         d7:dc:cb:82:d2:8c:24:04:80:b9:ca:0c:94:0b:ec:04:1e:aa:
         3e:07:41:24:9e:36:59:58:eb:24:59:77:ca:c2:a2:ed:d0:42:
         a4:1b:25:1f:8d:cb:5b:98:c3:dc:ba:59:ce:e5:de:86:ca:5d:
         c0:6d:12:79:46:62:0e:67:d6:bc:8b:a2:15:1b:1d:89:03:27:
         f0:dd:23:fe:01:d9:6a:b3:a0:bf:76:76:60:a7:b6:fe:bd:ae:
         a9:1a:13:85:02:04:46:15:4b:6d:0b:43:3d:fd:4f:0a:95:73:
         ab:a1:1a:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YGHGvUEK6aUVCScibNoMPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YWExZWVkOTkwZWQwMzFlZTE3YjBiMTNkYThmODNlMGVm
YmEyYjAwHhcNMjYwNDE2MjEwMDMxWhcNMjYwNDE3MjEwMDMxWjAzMTEwLwYDVQQD
EyhmYjdiNjFjZTlmNzI0OTFkNzI0ZDVkMzRkNTc2ZTQyMDc3YzIzMmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAELVCRKo96GeeAseQiq1NmmdayX
kBn94aukyJJOpyc2BKeQR/1mCSN2c1DRqyhoCEaptc7kpDLZlJoYqtLna1b7+DG+
qpHrIn4CRk3G6N6TK1f14TB77SwTpvWvqGYZBeZQo0ciQkDSyhk+dUl77bbQCZtI
Q2vi8Lh2RFnbNhXsid5h2VcIq98lWks4VNOXtPxCXkHQ6vmAFSqaWVPCek9FSj5W
vPQ7YSawnJ5swtgKAsyf3/qJD3wXh+I4KeWMQM6UWeW/uDkkNB9hgbA2VMXWiPYp
wiiufRuBkJfZrnEWAqJyUApdtPMt+p7X3awco31O6l2qjpN7BZ5ILoBjSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPt7Yc6fckkdck1dNNV25CB3wjLiMB8GA1UdIwQY
MBaAFFaqHu2ZDtAx7hewsT2o+D4O+6KwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzIt
YWM0NTQ5OTc3OTAxLzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi81ZDIwZjQtMjk3Ny00ZTA2LTllNzItYWM0NTQ5OTc3OTAx
LzEvVnFvZTdaa08wREh1RjdDeFBhajRQZzc3b3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqn/0SmO
ukxCACwIVx6UKpU4Xo3Q1vqqki42aEg7UNw+XMQSLDwSr4d+CVbRk9QcL48wjZuL
V2EgLJqAOIe8vPkoqW2yLoe3tDqeUXpxsoFOjgkcKdqv5N+3flPHzB86usXPWGT2
hIbnIiDgmdtkvMzzWzjx5DMXokje2rWhYRsNH7KjPdwBODAKj459l1Vv19zLgtKM
JASAucoMlAvsBB6qPgdBJJ42WVjrJFl3ysKi7dBCpBslH43LW5jD3LpZzuXehspd
wG0SeUZiDmfWvIuiFRsdiQMn8N0j/gHZarOgv3Z2YKe2/r2uqRoThQIERhVLbQtD
Pf1PCpVzq6EaYg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:48:33 2026 by rpki-client