Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
File:                     VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft (raw, json)
Hash identifier:          oeU8d0s8SWiFesAbGeDdOUZR5fM1RIQdBZSlnLmu1zs=
Subject key identifier:   74:A6:15:58:0E:80:53:83:4D:29:18:A9:43:1B:C3:9F:40:69:87:37
Authority key identifier: 55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65
Certificate issuer:       /CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
Certificate serial:       019DA340BF2E4F60F7EA0A83A007D67AB2F9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
Manifest number:          0860
Signing time:             Sun 19 Apr 2026 01:00:22 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:22 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:22 +0000
Files and hashes:         1: VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl (hash: 6vcRv0H/wbO7pECY02bWJv8jHP1uCdC23IoAnNXReB0=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:40:bf:2e:4f:60:f7:ea:0a:83:a0:07:d6:7a:b2:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55e8e85a95b6f872303cf6eff96b04699f2b5f65
        Validity
            Not Before: Apr 19 01:00:22 2026 GMT
            Not After : Apr 20 01:00:22 2026 GMT
        Subject: CN=74a615580e8053834d2918a9431bc39f40698737
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:ac:9c:28:2b:f8:d0:72:9c:c0:35:36:d6:
                    0b:79:29:98:5b:7c:2a:35:a0:8c:39:78:0a:e2:b3:
                    98:01:64:48:6f:ef:ff:21:68:ba:11:f2:18:da:4d:
                    6d:df:29:a3:80:d9:c5:84:51:c7:79:e4:35:bd:51:
                    2d:e7:dd:2d:05:9e:d2:0f:2f:5c:94:b7:87:7a:c7:
                    da:8e:18:43:e8:67:f0:52:99:e9:8e:52:7d:13:81:
                    f4:84:b7:39:0b:38:3e:a4:9f:58:64:f0:31:d1:18:
                    78:ee:18:9e:16:e3:80:b8:e1:84:91:2a:a9:e2:10:
                    1f:3e:84:7c:00:43:f5:2c:03:0c:f1:c5:a2:a8:28:
                    42:76:cd:5b:61:73:19:e8:8d:94:05:e3:c2:0b:ec:
                    b4:84:18:cb:50:e3:83:ce:6c:03:01:16:83:37:0f:
                    81:85:28:f5:39:c2:5b:dc:4d:a6:44:a8:c1:13:56:
                    77:38:fa:5a:2d:dd:ed:27:79:ba:db:bb:db:a5:ce:
                    d8:cf:25:a6:ab:38:cb:dd:ea:09:dc:a3:fe:08:18:
                    11:80:3b:0f:a2:c3:5a:c3:77:e7:21:78:67:79:3d:
                    21:b8:d5:a7:d9:93:66:38:ab:27:fc:14:8d:68:29:
                    9f:6b:a8:d7:14:7e:50:02:0a:89:4a:51:92:4d:c2:
                    70:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A6:15:58:0E:80:53:83:4D:29:18:A9:43:1B:C3:9F:40:69:87:37
            X509v3 Authority Key Identifier:
                keyid:55:E8:E8:5A:95:B6:F8:72:30:3C:F6:EF:F9:6B:04:69:9F:2B:5F:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VejoWpW2-HIwPPbv-WsEaZ8rX2U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/fc1a1f-3f8e-4124-bbaf-ae265dd113ad/1/VejoWpW2-HIwPPbv-WsEaZ8rX2U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:a3:62:84:c9:0f:bf:77:b3:9a:1e:ac:e8:82:a5:6c:13:cc:
         fd:bd:a0:5c:2e:72:6a:ee:6d:2c:39:b6:02:b8:be:c1:02:4a:
         a8:ac:cc:0e:10:04:8e:9d:09:ad:c0:8c:4c:a3:40:0a:44:07:
         a9:78:78:38:37:85:01:f9:e4:ab:84:57:94:f5:a7:36:2d:36:
         c5:d6:82:bc:51:8b:bb:75:b2:90:f8:27:9e:67:1f:74:65:68:
         63:0e:d7:44:31:a4:a1:5c:3b:d1:b3:47:f2:97:40:7d:b3:c2:
         ca:81:dc:ec:d5:1c:ad:7c:94:b7:3f:af:e5:cf:1c:90:02:c2:
         09:4c:87:92:78:1c:3f:54:fb:ef:6d:2d:c6:7c:cc:1a:0c:b4:
         59:4b:f4:34:06:27:79:28:74:34:c6:e9:8f:a7:75:9f:c3:06:
         b5:4a:12:1d:fa:93:62:4b:af:ee:32:e3:49:d1:b1:e7:01:f5:
         f3:89:15:7b:43:f3:2f:59:b8:1a:5a:21:5c:04:ca:15:80:70:
         ef:38:b2:e5:c7:5c:9e:57:25:6c:66:22:c3:45:05:c8:ce:b3:
         80:05:e0:13:c2:e0:bb:db:22:7d:9c:44:ae:87:e0:b3:75:c7:
         fd:7f:5c:43:85:89:4f:d2:c7:90:e6:d3:76:2a:b9:54:ff:3c:
         95:c3:4a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:59 2026 by rpki-client