Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
File:                     vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft (raw, json)
Hash identifier:          e+5m9F8UetPXWVU51xiQv5qdk6tqzYpuW4pBNCWa7FU=
Subject key identifier:   4C:65:ED:8B:1B:0F:45:99:21:38:B8:93:E7:92:97:F5:B5:0D:68:D3
Authority key identifier: BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71
Certificate issuer:       /CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
Certificate serial:       019DA3414F495E522F7141C813E1A62004A9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
Manifest number:          181D
Signing time:             Sun 19 Apr 2026 01:00:59 +0000
Manifest this update:     Sun 19 Apr 2026 01:00:59 +0000
Manifest next update:     Mon 20 Apr 2026 01:00:59 +0000
Files and hashes:         1: 5supAJphl0r8bbob-Kiwa2s9Q0E.roa (hash: 3BmLyzQOS+6Kk+ZKBpt8B4neQYPPKen9M6XG2H5jhLc=)
                          2: vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl (hash: 5Xml4NHGGEkPFY+nTY43OyAdoINhzoNchvIfhfJGiLc=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 01:00:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a3:41:4f:49:5e:52:2f:71:41:c8:13:e1:a6:20:04:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bda3d0bb422b0bca706716c20f7ad58dd2765471
        Validity
            Not Before: Apr 19 01:00:59 2026 GMT
            Not After : Apr 20 01:00:59 2026 GMT
        Subject: CN=4c65ed8b1b0f45992138b893e79297f5b50d68d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ad:16:54:fd:02:70:0d:38:34:28:a8:7a:6e:
                    1c:4d:33:56:94:2a:93:66:66:8a:be:15:eb:91:28:
                    d8:9b:41:bf:df:19:df:83:a7:41:5d:b6:ee:f9:33:
                    e2:6e:31:9d:eb:e9:4b:35:62:cd:27:30:aa:2e:68:
                    33:7e:84:5a:d7:04:32:a2:1b:1b:89:67:1f:62:15:
                    1f:26:a1:f4:23:03:9a:35:89:15:75:d7:bd:64:df:
                    bb:3f:73:b0:72:63:a8:3a:c2:f1:ec:ae:4c:91:7a:
                    41:6d:cf:54:6a:0d:8f:91:8a:42:d5:31:e9:fa:2b:
                    e7:10:ee:53:45:a5:e5:e2:83:0e:2c:d0:af:c0:e8:
                    bb:0b:bf:65:03:fa:04:65:d3:45:1d:a4:20:d9:4e:
                    10:c7:36:7e:3e:74:16:e8:03:30:2e:d7:9d:10:b1:
                    fb:e7:18:10:4b:57:20:86:9b:ee:6d:6d:e0:b5:89:
                    d0:df:2b:11:8e:2b:6a:04:a3:d7:4d:1e:5a:2b:38:
                    f7:a9:fa:9c:78:64:63:97:9b:ce:87:7c:54:db:cf:
                    6f:78:94:37:42:a7:b8:20:85:61:cf:fb:3a:89:36:
                    73:fb:c8:ae:4f:af:5c:65:84:7b:7b:3d:f8:1b:97:
                    d2:62:bd:cd:f4:f1:fd:ec:d6:48:67:63:25:69:53:
                    3c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:65:ED:8B:1B:0F:45:99:21:38:B8:93:E7:92:97:F5:B5:0D:68:D3
            X509v3 Authority Key Identifier:
                keyid:BD:A3:D0:BB:42:2B:0B:CA:70:67:16:C2:0F:7A:D5:8D:D2:76:54:71

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f8a46e-bdfd-4df6-8261-f23283601764/1/vaPQu0IrC8pwZxbCD3rVjdJ2VHE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:9d:cd:d3:10:6d:c5:cb:15:f4:e5:f8:9b:c5:30:2d:a9:
         ba:5d:66:89:6f:00:73:9c:a9:d7:25:f2:ec:27:bc:a5:23:b1:
         00:14:5e:94:48:aa:25:14:35:77:1f:26:d3:07:00:6a:b2:58:
         8d:ec:1c:f5:48:5b:66:1d:c1:0d:78:aa:d8:f5:0f:e5:be:c0:
         7b:43:a6:db:d9:f8:12:01:c0:df:74:65:68:71:b1:bb:db:86:
         23:e4:a3:2a:46:fd:b9:cc:ab:1b:2b:8e:57:84:6f:13:c2:6b:
         6d:6d:79:a7:cd:b6:56:52:d4:02:d1:14:1a:e5:12:0b:11:a3:
         80:bf:c1:c2:e2:d7:f5:ee:cb:4e:7f:a0:c0:7b:7a:e5:9f:64:
         12:e2:9a:55:95:22:3a:f6:1b:e2:e0:13:e4:c9:25:3b:68:78:
         31:21:b9:31:30:26:09:05:e8:12:d9:e2:03:e7:c6:0a:62:c0:
         3e:99:3a:39:07:81:74:8e:b7:11:e5:ce:b0:6a:05:d1:a1:37:
         64:7f:c8:b5:45:a6:2b:b0:4f:f5:ad:d4:bd:9e:8d:32:2c:fa:
         a2:46:6c:38:7b:92:14:07:e5:7d:c9:e4:f3:16:75:66:2a:3f:
         73:53:a8:a0:bb:81:cf:76:31:4d:35:16:d6:a4:05:31:40:8a:
         6b:19:82:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:02:13 2026 by rpki-client