Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
File:                     vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft (raw, json)
Hash identifier:          qoif+VYbosUDuilXB7jO8NAJwr36bAxVx+mXGB1EqGg=
Subject key identifier:   73:84:2C:5B:C5:E8:CD:B4:AC:02:AA:5A:CB:A2:FE:D9:51:86:7C:13
Authority key identifier: BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C
Certificate issuer:       /CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
Certificate serial:       019D9AE386A4445B63634B83786F39E67D0F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
Manifest number:          17D4
Signing time:             Fri 17 Apr 2026 10:01:35 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:35 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:35 +0000
Files and hashes:         1: vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl (hash: C3TddGAxqJQUQLWYnLgdo5DMG790tLtdO93YCABNqsM=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:86:a4:44:5b:63:63:4b:83:78:6f:39:e6:7d:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bcfc4f128c4c56851b97554d24c66ad5ee23fc9c
        Validity
            Not Before: Apr 17 10:01:35 2026 GMT
            Not After : Apr 18 10:01:35 2026 GMT
        Subject: CN=73842c5bc5e8cdb4ac02aa5acba2fed951867c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:93:de:80:7f:26:a2:d6:bc:c1:4a:71:46:20:
                    9c:e8:6e:b6:b6:38:62:30:80:7c:a1:65:06:bd:27:
                    db:a9:99:75:d1:ca:4e:cb:b1:5e:53:9f:53:36:5c:
                    2c:2b:8b:01:05:4f:aa:ee:4b:ec:6e:a4:fc:45:b0:
                    c9:43:27:83:7a:a0:bb:89:19:01:8e:77:2d:4c:ca:
                    ef:25:4f:7f:3c:91:64:32:b8:d8:56:ea:90:e4:4d:
                    dc:45:61:54:2b:c2:ca:41:3a:32:dd:0d:6f:26:30:
                    9a:b9:8d:62:9e:71:0a:12:4a:56:72:17:82:6b:fd:
                    7a:d7:e4:6a:6a:32:81:df:dc:ab:60:53:9c:04:7b:
                    37:fa:0b:a4:75:40:12:fa:da:7f:0b:26:e7:af:36:
                    9f:9e:60:e2:c6:06:64:19:14:ac:74:45:82:27:5e:
                    09:b3:1e:61:d2:9e:0f:0d:fc:99:60:03:49:0e:76:
                    09:5b:25:4b:b7:da:d4:6a:68:5c:d0:6e:27:5a:8d:
                    be:3d:5a:a0:d2:83:15:db:21:79:80:92:8b:40:d4:
                    e0:09:23:15:c1:25:d4:2c:d1:43:83:bf:f2:02:04:
                    39:a6:e1:3b:a1:76:22:3b:bd:5e:c2:48:ba:aa:89:
                    55:2e:2f:a1:76:36:0a:b0:80:c5:0c:9d:d4:52:c9:
                    cd:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:84:2C:5B:C5:E8:CD:B4:AC:02:AA:5A:CB:A2:FE:D9:51:86:7C:13
            X509v3 Authority Key Identifier:
                keyid:BC:FC:4F:12:8C:4C:56:85:1B:97:55:4D:24:C6:6A:D5:EE:23:FC:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/43/6f6f78-1de7-44e9-bf39-12984ca7a7a2/1/vPxPEoxMVoUbl1VNJMZq1e4j_Jw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:7d:d4:22:ce:9b:11:26:54:d1:64:c4:1d:d0:b5:94:69:
         dc:25:4d:d7:43:50:c0:78:96:f0:1c:76:0c:63:cd:1e:82:3e:
         a5:6d:89:d6:1a:ad:15:3a:50:b5:4f:f4:2a:da:1f:7d:07:95:
         df:d2:76:62:1b:94:30:3c:1b:97:6f:97:41:b7:45:71:5d:df:
         09:44:c8:fc:41:02:a6:14:a8:87:d5:65:33:f3:c4:7d:74:26:
         b3:60:83:29:52:74:34:36:15:22:1e:e1:fd:08:da:10:54:5e:
         4c:f9:98:00:0d:ff:10:90:00:fc:bd:76:3b:03:2a:59:d2:b6:
         2a:8f:8c:0a:04:60:26:6a:e9:2c:f2:8d:5e:b2:db:d0:6f:10:
         ae:0e:1f:7c:86:a5:c9:c1:bf:1d:fb:e6:89:af:bf:4c:93:6a:
         30:39:38:ef:03:51:64:3c:74:4e:60:73:09:64:54:f7:30:43:
         8c:ae:03:1f:88:6b:53:20:fb:73:e2:26:4d:52:b2:b0:16:ec:
         72:bb:34:bc:79:55:09:90:ba:9f:99:51:58:6a:65:dd:14:d5:
         39:bf:55:ba:1e:0c:1a:cd:e9:c3:34:27:fb:1d:12:85:dc:60:
         12:68:e0:4b:ed:2f:a9:91:5d:d9:ba:78:28:28:c1:ba:2e:1b:
         ee:40:e4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:12:00 2026 by rpki-client