Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
File:                     VutqX6PSF6LufUpi2EYaZ5PtXLM.mft (raw, json)
Hash identifier:          LyK+J2OKf+0O56pXUpu8oK6Xx2ZbBqWIpM+IEgU0V6I=
Subject key identifier:   1D:EF:0E:32:4D:8F:DD:27:0A:FF:61:EE:D3:48:AB:A2:FA:2A:1C:A9
Authority key identifier: 56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3
Certificate issuer:       /CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
Certificate serial:       019D97E26E808FDC2CA250F3FF38AE5D63D5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
Manifest number:          0C85
Signing time:             Thu 16 Apr 2026 20:01:32 +0000
Manifest this update:     Thu 16 Apr 2026 20:01:32 +0000
Manifest next update:     Fri 17 Apr 2026 20:01:32 +0000
Files and hashes:         1: 3ySJGpA2URRVVCP24hw2sqWQ61c.roa (hash: iyB6OAaeqvyq/nNbWakBdiv2nFypvgMvutumi0LF9Xk=)
                          2: VutqX6PSF6LufUpi2EYaZ5PtXLM.crl (hash: +1h+PgH3usJ9dbgRFRrvTRmMfG0p2vDr0j1ezBYHbto=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 20:01:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:97:e2:6e:80:8f:dc:2c:a2:50:f3:ff:38:ae:5d:63:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56eb6a5fa3d217a2ee7d4a62d8461a6793ed5cb3
        Validity
            Not Before: Apr 16 20:01:32 2026 GMT
            Not After : Apr 17 20:01:32 2026 GMT
        Subject: CN=1def0e324d8fdd270aff61eed348aba2fa2a1ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:26:32:ca:e3:24:62:91:34:4b:a1:42:91:3a:
                    de:cc:f3:03:6c:c2:8e:40:1f:96:6c:cf:ab:02:2e:
                    e3:42:ee:5f:82:0e:45:0e:c9:f8:d2:e0:59:3e:22:
                    d9:83:15:0d:32:3f:25:81:10:af:77:49:50:df:15:
                    a3:fe:f6:8c:98:49:44:b2:14:c8:82:7e:19:ce:17:
                    a0:54:71:8e:9c:36:82:5a:ae:00:1b:d8:b1:64:7a:
                    ca:ad:c2:45:8c:18:0e:77:3c:78:63:9a:8f:3f:ce:
                    45:ee:22:9d:7c:c4:11:ac:51:94:08:b5:10:85:a3:
                    40:0f:96:d8:11:53:9b:17:bc:f2:80:4d:8b:3f:60:
                    88:07:bc:8f:ac:4f:bc:a1:92:bc:0c:a6:51:68:33:
                    af:e8:cb:f7:79:bb:18:e5:aa:ee:25:59:c3:45:5d:
                    ca:cb:7e:1c:33:67:71:f2:90:3b:a9:bf:62:6b:ad:
                    8b:08:24:75:81:02:bd:4f:d7:d6:68:b4:4a:2e:bf:
                    44:3a:ba:1f:51:8a:ce:fa:4b:e1:d8:4d:12:af:45:
                    10:ed:fd:77:b1:63:8c:1c:51:b1:87:18:9a:e3:d7:
                    d8:8c:6c:83:99:70:73:ea:9a:83:08:03:67:83:7b:
                    84:fb:41:fb:41:c3:51:c7:c8:4d:63:7f:08:df:95:
                    eb:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:EF:0E:32:4D:8F:DD:27:0A:FF:61:EE:D3:48:AB:A2:FA:2A:1C:A9
            X509v3 Authority Key Identifier:
                keyid:56:EB:6A:5F:A3:D2:17:A2:EE:7D:4A:62:D8:46:1A:67:93:ED:5C:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VutqX6PSF6LufUpi2EYaZ5PtXLM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c25435-d23a-41a3-bc5e-53ecc6655f6b/1/VutqX6PSF6LufUpi2EYaZ5PtXLM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:5c:34:40:0a:9f:f0:d1:3f:bf:12:1b:bc:30:af:cf:d2:fb:
         ca:eb:3f:9f:ab:b5:5b:b3:ea:ac:b2:8a:5e:f5:6b:1c:aa:86:
         ae:c9:9f:c2:ff:2a:17:14:6b:b5:19:13:cd:0c:48:c8:ac:e5:
         bf:05:e2:50:0c:f1:91:b6:b8:5e:b3:4d:cd:c4:a1:ce:34:04:
         af:a6:94:93:47:ed:06:0c:8a:7f:49:ed:27:a3:a7:f4:69:14:
         93:cf:43:08:f0:26:a3:88:80:d4:82:8b:ae:2c:6a:fb:fe:da:
         c4:28:3f:f6:87:fa:81:63:a5:df:47:fc:ec:3b:3f:7b:ac:57:
         dd:7c:94:00:8b:3d:38:b2:bb:e8:e3:8b:11:4e:7b:0a:f2:dd:
         ad:e7:3a:41:e5:ec:db:2d:78:4a:a3:3b:4a:48:52:a5:d0:f4:
         d3:01:2e:d0:61:3e:7b:ec:45:58:68:46:60:6b:20:0b:3e:45:
         43:68:e7:88:3e:f3:e1:07:74:45:57:3e:bc:7a:b1:dd:8b:fe:
         4c:7a:63:c9:2b:98:2f:c4:14:f0:8e:53:f3:2a:6a:96:f7:f7:
         7a:cc:cb:59:3a:2a:d6:b6:c7:2e:4e:e1:11:73:d4:f8:1f:5d:
         4e:e4:00:04:60:ed:5b:f2:1c:e6:a4:f9:75:35:d2:45:8f:4c:
         9d:b3:85:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:36:55 2026 by rpki-client