Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
File:                     VOYQwqvTZkwRIEWA90iZZVXCIiU.mft (raw, json)
Hash identifier:          qsq5ElgWZuxcdNN7tR3PzC0YY1Xjkry77FwR4b/c2Yc=
Subject key identifier:   B9:8B:6B:0B:3D:1C:DA:0D:BC:5D:C5:6A:6C:40:46:BE:35:A6:15:26
Authority key identifier: 54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25
Certificate issuer:       /CN=54e610c2abd3664c11204580f748996555c22225
Certificate serial:       019D992B006275D77E87DCC7C07C837D1950
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
Manifest number:          070D
Signing time:             Fri 17 Apr 2026 02:00:25 +0000
Manifest this update:     Fri 17 Apr 2026 02:00:25 +0000
Manifest next update:     Sat 18 Apr 2026 02:00:25 +0000
Files and hashes:         1: VOYQwqvTZkwRIEWA90iZZVXCIiU.crl (hash: QGXnY2cjnCyC9NUwF8Ph0bQKym/RfKkS/i99JRJOEpc=)
                          2: pQKPikBzd7Oz_I9lHHOOAo5keSk.roa (hash: yDnXs+sIyJdYXEuX7spiKfyy3V1/GMh526F5IcQattQ=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 02:00:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:2b:00:62:75:d7:7e:87:dc:c7:c0:7c:83:7d:19:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54e610c2abd3664c11204580f748996555c22225
        Validity
            Not Before: Apr 17 02:00:25 2026 GMT
            Not After : Apr 18 02:00:25 2026 GMT
        Subject: CN=b98b6b0b3d1cda0dbc5dc56a6c4046be35a61526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:e5:06:c1:35:69:33:0f:92:42:20:16:64:
                    28:cd:d6:ef:11:a3:a6:14:dd:62:8e:4c:d1:1a:5e:
                    d2:c5:62:49:20:b6:63:48:87:2a:27:c8:3d:b2:a6:
                    f4:3d:d8:d3:08:41:c7:c1:51:9a:15:a9:63:eb:20:
                    05:91:a0:e7:81:f4:66:06:e6:d3:8b:28:27:c9:af:
                    97:aa:b9:48:21:44:62:b2:cc:af:8b:85:6b:93:8a:
                    14:ba:d0:32:9c:77:0f:9d:fd:e5:08:a5:6a:cf:35:
                    93:ad:42:b4:ae:3a:d1:38:1a:2b:81:f9:3c:1b:24:
                    00:d1:47:5e:6d:5f:05:df:43:fe:d7:6d:7c:58:98:
                    4a:68:fb:ca:25:90:0f:03:38:5d:0f:aa:b4:f2:64:
                    eb:56:83:c6:84:17:11:7c:c9:13:66:b6:5e:b3:5d:
                    e8:51:4a:c4:27:51:17:de:47:52:4f:cd:8b:e6:bf:
                    95:17:c7:d4:38:de:26:76:42:fb:0a:c3:b5:7b:8f:
                    c1:5c:b9:bd:74:4e:42:a5:41:82:14:58:6d:d3:a2:
                    9e:7e:f2:4a:dc:35:84:56:7c:33:21:10:77:2d:ed:
                    9f:93:87:ae:dc:59:bb:f5:bf:54:42:c0:0d:75:af:
                    57:93:cb:e0:41:d4:43:b4:21:84:9b:b6:41:90:dc:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:8B:6B:0B:3D:1C:DA:0D:BC:5D:C5:6A:6C:40:46:BE:35:A6:15:26
            X509v3 Authority Key Identifier:
                keyid:54:E6:10:C2:AB:D3:66:4C:11:20:45:80:F7:48:99:65:55:C2:22:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOYQwqvTZkwRIEWA90iZZVXCIiU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/39/f2033a-20e7-461e-a56b-489ee0f1ee63/1/VOYQwqvTZkwRIEWA90iZZVXCIiU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:c6:3f:7d:c5:c3:8b:6c:f9:46:1c:bd:4f:e5:b3:e3:9a:39:
         83:78:97:4f:0a:11:81:ff:08:00:d4:81:c0:73:34:0e:58:8c:
         c5:a7:87:8a:eb:8f:3b:01:b4:48:78:13:1a:56:14:48:d1:f8:
         b2:1e:25:6e:e6:e2:ad:1d:27:0a:d8:9d:37:1c:52:53:63:77:
         89:e7:63:9c:a5:07:e3:45:6c:72:72:b5:95:2e:f5:2f:27:e1:
         14:3d:07:7f:81:b5:ce:9e:fd:31:46:99:61:e7:9e:e3:9e:07:
         a0:9a:cd:dc:f2:47:db:c6:da:69:a5:46:36:8b:61:46:10:ff:
         a6:b0:54:fe:27:c1:f4:0c:aa:26:12:4a:e6:45:48:01:61:78:
         a7:1e:59:11:5f:cd:27:8b:5b:cb:8e:bc:c8:a3:4e:8b:88:2c:
         c0:70:10:93:0d:c7:e2:48:0d:16:cf:a1:ac:3e:1a:37:a2:e4:
         ba:8e:6c:77:18:50:1a:b3:f1:81:88:8f:8f:de:29:68:a8:16:
         81:c4:6d:ff:45:c6:8f:01:a6:bf:da:be:5f:d6:b6:3a:67:bb:
         e7:9d:90:c1:e4:7f:86:bc:5f:b0:0a:3b:3c:a5:76:a3:0c:7a:
         c3:69:9b:16:b3:87:83:f1:eb:1c:0a:e6:6a:90:29:4f:80:6a:
         6e:48:ef:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:19 2026 by rpki-client