Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
File:                     Vf5QzPzvDofMGfgswJK7m3mj468.mft (raw, json)
Hash identifier:          /Jnx46q5FLlxKdP4o6vbgJjcoBRcsP4/Wmh1XK2vhvw=
Subject key identifier:   04:B9:F8:CF:CA:BC:65:3F:07:3F:5F:01:8B:98:21:00:5E:CC:79:6E
Authority key identifier: 55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF
Certificate issuer:       /CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
Certificate serial:       019D9AE361D2E5CFCC0CA329835F4EE32FAE
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
Manifest number:          06B2
Signing time:             Fri 17 Apr 2026 10:01:26 +0000
Manifest this update:     Fri 17 Apr 2026 10:01:26 +0000
Manifest next update:     Sat 18 Apr 2026 10:01:26 +0000
Files and hashes:         1: Vf5QzPzvDofMGfgswJK7m3mj468.crl (hash: shjPpHe/LSXeFghyQPHLj6jejv1MdfutpEt/laDBw0A=)
                          2: fphIDTC90BjghJ8c2O8eRDnnu2Y.roa (hash: eHm6xVBmCu2Lzre/Y4v2NYmdtDCG2u8NjYt++Pqi/5Q=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 10:01:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:e3:61:d2:e5:cf:cc:0c:a3:29:83:5f:4e:e3:2f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55fe50ccfcef0e87cc19f82cc092bb9b79a3e3af
        Validity
            Not Before: Apr 17 10:01:26 2026 GMT
            Not After : Apr 18 10:01:26 2026 GMT
        Subject: CN=04b9f8cfcabc653f073f5f018b9821005ecc796e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:68:22:ca:64:8e:97:fd:95:8c:0d:76:fc:5c:
                    ef:39:59:fb:da:5e:de:2e:e1:ab:c4:1d:66:11:e0:
                    be:a0:85:d5:f1:28:f6:86:34:af:fd:92:63:20:5b:
                    73:0b:cd:df:ce:4b:8a:78:1a:e5:2a:03:02:7c:21:
                    05:29:3f:b3:17:ec:dd:1a:c3:a9:d3:bc:47:97:ae:
                    5f:9b:bc:2d:d9:f9:8f:a4:e1:bf:3f:d5:9d:ec:a6:
                    cf:88:78:69:d7:43:80:57:a9:5d:57:5b:2b:e4:a8:
                    05:30:8c:a0:5c:be:ad:ff:7e:98:26:31:57:25:85:
                    db:e3:55:cc:d9:cd:7a:2c:f8:17:00:35:11:0d:4d:
                    f4:38:3d:69:3a:7e:6f:7b:8c:a9:29:82:e6:b1:e8:
                    12:20:a1:f8:27:3d:21:ee:17:07:a2:58:54:b0:1f:
                    5d:f0:85:5b:33:66:1a:ba:cf:58:04:e3:99:82:e7:
                    9d:e8:c1:24:47:b0:6d:c5:62:c0:de:ca:46:07:fe:
                    9e:21:de:19:b7:0a:85:72:c9:41:7b:db:ad:7b:aa:
                    4a:4e:e0:f6:7f:a1:cb:cc:4c:78:25:f2:6f:44:42:
                    c4:ed:2b:a9:3e:ed:ce:09:a6:2c:c3:ae:e7:55:46:
                    32:6d:99:ea:7d:81:d6:e6:b8:9b:35:2d:89:bb:74:
                    43:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:B9:F8:CF:CA:BC:65:3F:07:3F:5F:01:8B:98:21:00:5E:CC:79:6E
            X509v3 Authority Key Identifier:
                keyid:55:FE:50:CC:FC:EF:0E:87:CC:19:F8:2C:C0:92:BB:9B:79:A3:E3:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vf5QzPzvDofMGfgswJK7m3mj468.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/067e3d-2858-482e-99dc-c07e715c81c9/1/Vf5QzPzvDofMGfgswJK7m3mj468.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:72:20:c6:ca:4a:24:3a:df:9c:79:74:39:68:37:31:cc:33:
         78:58:bc:67:67:f4:85:c9:0f:7e:82:b8:64:fc:b4:74:e3:5e:
         b9:8e:04:c2:48:d7:e5:80:fa:61:be:7a:24:da:fc:1c:ef:1e:
         00:3a:98:b9:ad:42:ab:cf:84:7f:80:ee:d5:80:7e:2e:24:d5:
         08:52:cc:19:f3:52:d6:8c:a0:5a:5c:ac:cd:01:78:32:bc:26:
         b2:2a:f9:a6:5b:f8:2f:37:28:7e:52:a5:f9:21:28:1c:73:84:
         23:de:68:12:d0:05:c0:a0:9c:47:94:f0:1c:d4:2a:9e:b9:16:
         13:83:a6:f6:bf:6b:c1:f9:a9:7f:b7:bc:6b:be:6b:9c:f3:9f:
         1c:0a:98:7e:e3:67:72:4e:91:27:0d:66:45:68:64:09:e7:e8:
         8f:0b:fb:16:1a:26:74:cc:40:e1:ad:f4:1f:c1:b6:16:a7:1a:
         e0:78:d9:6a:d3:04:4f:b4:d8:13:cd:1c:42:01:7f:7e:79:fa:
         2a:70:9b:9c:34:5e:85:2d:90:7d:9b:c5:2b:73:0f:e5:b0:14:
         d3:b9:99:07:4e:f3:ae:27:44:24:2a:02:72:f9:78:67:56:5d:
         fb:2d:fb:f9:a3:0c:9a:43:6e:7d:fb:5c:57:cb:e0:93:33:a8:
         8f:2f:a2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:31:58 2026 by rpki-client