Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
File:                     V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft (raw, json)
Hash identifier:          uozTzu7tlyx3N1EGKghdGPIcSsADCCnekG3UlVceFBQ=
Subject key identifier:   63:3E:FC:CF:E3:29:2E:17:B5:07:E1:7D:E5:11:A7:83:53:B8:CF:CA
Authority key identifier: 57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A
Certificate issuer:       /CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
Certificate serial:       019D9D3F4B7BF9D4F878F041FDD8B42C8502
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
Manifest number:          03DC
Signing time:             Fri 17 Apr 2026 21:01:04 +0000
Manifest this update:     Fri 17 Apr 2026 21:01:04 +0000
Manifest next update:     Sat 18 Apr 2026 21:01:04 +0000
Files and hashes:         1: GFKu-Zc9wa6BcCmTlqLPc7qFBa4.roa (hash: JegVdUF+3WhKGrEhiEcqXl1nleuxqT9zS97V0x383us=)
                          2: V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl (hash: pHo6XfxMNWOTn/ZEmEOftV3AFxnmxRQ02TlZ3p7BFDk=)
                          3: vkmHksTk2X_wYTTmgl1Mrke_JDU.roa (hash: L3fqolgCblfEQxdP1Qw8u55OLqHgFH3b7OhIuw6QCpc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 21:01:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9d:3f:4b:7b:f9:d4:f8:78:f0:41:fd:d8:b4:2c:85:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57d0b861afb125b8bc13969d0b49734ce844bd6a
        Validity
            Not Before: Apr 17 21:01:04 2026 GMT
            Not After : Apr 18 21:01:04 2026 GMT
        Subject: CN=633efccfe3292e17b507e17de511a78353b8cfca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:dc:aa:a4:d5:fd:7f:5e:23:0f:e2:27:d9:01:
                    a1:31:c0:07:31:5e:8f:0b:a2:06:e1:64:55:8f:9b:
                    b5:d0:d3:7b:80:d9:d5:20:6a:57:01:68:af:e1:21:
                    e9:a9:e8:05:1d:cb:4f:a1:f9:d0:99:6a:b2:88:c6:
                    94:c8:f5:e1:4d:47:cf:80:c3:a2:c6:e7:be:a6:9c:
                    a9:37:45:94:97:6d:77:51:04:97:23:63:2a:3c:79:
                    5d:c1:dd:52:df:0b:2b:75:aa:07:bb:d7:3a:8e:14:
                    91:96:c8:15:e9:04:8f:76:03:58:06:62:3e:0e:8a:
                    68:70:cb:62:d8:20:53:65:c6:a3:a6:30:7b:ed:8d:
                    58:12:2d:56:ce:d4:ae:33:d5:f3:60:1d:17:dc:ca:
                    c4:ba:28:74:e6:8f:fa:36:1f:2a:6a:61:47:d4:ff:
                    51:b2:a8:58:94:a5:c4:1d:bf:80:b6:59:38:00:55:
                    77:92:d8:b8:7c:be:d6:11:00:de:96:04:ba:03:5e:
                    23:17:aa:f7:2b:43:d0:cf:94:d4:86:f8:2c:79:0f:
                    a7:37:70:9c:2b:11:8b:9f:89:d7:da:3d:e8:48:7d:
                    c4:35:60:38:73:12:b7:de:17:c3:94:93:59:df:1b:
                    58:59:c4:e4:1d:1d:ce:be:66:4a:26:09:6d:31:ae:
                    99:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:FC:CF:E3:29:2E:17:B5:07:E1:7D:E5:11:A7:83:53:B8:CF:CA
            X509v3 Authority Key Identifier:
                keyid:57:D0:B8:61:AF:B1:25:B8:BC:13:96:9D:0B:49:73:4C:E8:44:BD:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9C4Ya-xJbi8E5adC0lzTOhEvWo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/09ee66-667e-4cd4-b4fa-f862fdfa3b93/1/V9C4Ya-xJbi8E5adC0lzTOhEvWo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:a2:f1:b2:35:af:77:69:a3:af:e9:f9:e2:6f:fe:2f:73:f5:
         36:e9:43:cd:14:3d:a2:d5:01:9a:96:b1:e8:03:7c:2b:52:83:
         8d:88:44:0b:5a:0b:86:58:e8:24:09:a1:ff:50:c5:24:2c:ac:
         11:72:1c:ee:8c:43:5e:ed:bf:7d:fb:d1:e0:21:89:0d:8e:95:
         2f:08:8e:0e:2b:cb:79:c6:cd:1f:ba:c5:94:af:f9:ec:46:42:
         5b:2a:f7:18:a1:86:d4:c3:73:f1:66:36:99:d5:e8:48:07:32:
         4f:e5:91:5e:13:c2:40:8a:fc:70:20:de:52:07:4c:fc:27:c2:
         04:10:be:2c:36:4a:7b:21:b9:d2:5f:4d:25:82:a8:1b:49:95:
         58:99:53:ad:88:27:6c:89:a0:99:33:b2:f7:0c:b2:d2:eb:25:
         f0:b5:74:ac:b4:58:fa:bd:dd:72:95:a0:4b:98:8e:5e:b1:b4:
         ff:96:ad:cf:31:a6:bd:44:20:19:76:16:80:fa:6e:38:34:f0:
         76:20:dc:d1:2a:69:a2:9d:38:49:9c:3a:85:68:d3:21:94:f6:
         2b:2d:6c:04:2a:ae:f0:d3:5b:34:a8:ff:f6:27:d3:da:01:92:
         55:75:b2:bb:24:ff:36:80:41:b4:9d:5c:a7:a4:ed:b1:e0:39:
         50:fa:fd:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 06:12:26 2026 by rpki-client