Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
File:                     VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft (raw, json)
Hash identifier:          smaMptYaaRisX7qvgtb6w2lqph2yGa7G/oS56Y84Q68=
Subject key identifier:   88:4F:6D:30:11:58:5F:3D:EE:9B:79:C5:25:46:1D:08:94:20:2C:89
Authority key identifier: 55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1
Certificate issuer:       /CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
Certificate serial:       019D9C9A2C323D1608D7317B17A87E5F93BC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
Manifest number:          1512
Signing time:             Fri 17 Apr 2026 18:00:42 +0000
Manifest this update:     Fri 17 Apr 2026 18:00:42 +0000
Manifest next update:     Sat 18 Apr 2026 18:00:42 +0000
Files and hashes:         1: 1-Lmc2QhlCIt9CEaFf21G5Ih9JAk.roa (hash: 6iVNvhe10i4KO9IhQfbWbvNH2WkwCCWrKbOYcXZWq7g=)
                          2: VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl (hash: JVzD2QNlmIJQivTJyvSpGkcCz0UHB8U0XaRds7ioNT4=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 18:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9c:9a:2c:32:3d:16:08:d7:31:7b:17:a8:7e:5f:93:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=550d4c571d8bfbfdd8fa3a170f99fb3afab411d1
        Validity
            Not Before: Apr 17 18:00:42 2026 GMT
            Not After : Apr 18 18:00:42 2026 GMT
        Subject: CN=884f6d3011585f3dee9b79c525461d0894202c89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8b:3f:d4:2d:ed:2e:2b:b2:f3:a6:ba:32:34:
                    bb:51:37:be:f6:c4:47:46:90:91:44:41:56:09:6a:
                    08:9f:8d:e8:bf:24:cb:19:0e:4f:c0:f0:14:de:92:
                    26:52:39:4a:ee:59:e1:05:0d:91:be:4e:a7:a4:8d:
                    23:c9:c7:36:2a:cb:49:9a:df:ca:64:71:ed:11:3c:
                    94:24:71:cd:56:06:70:84:7f:c3:31:b8:0f:ea:89:
                    93:6a:55:79:6e:47:10:e0:ff:6b:04:6f:02:71:49:
                    5e:24:1d:ca:9c:b7:1f:c1:49:23:5e:d7:39:1d:4c:
                    ce:56:4e:d5:e2:b7:8a:2a:24:92:47:68:50:70:54:
                    18:9b:0d:f1:81:8e:11:ad:4b:4f:99:09:11:41:80:
                    2d:a9:02:bd:92:f8:7d:38:02:2e:dc:be:12:4d:c2:
                    bc:29:04:55:58:5e:62:54:58:8f:a7:b5:0a:6d:09:
                    0f:bb:46:53:b8:fd:1a:a7:59:62:2d:18:b6:af:88:
                    e5:8c:2a:a1:a6:22:2b:f6:a0:ef:d6:e7:6e:48:5e:
                    f7:fd:2c:1c:06:d8:15:2c:02:d0:6d:8a:84:65:ba:
                    26:c3:60:3c:e0:74:aa:9b:c4:85:a9:83:53:13:ae:
                    cb:58:2f:57:cc:ea:c6:a2:3f:c4:d5:e2:f0:05:59:
                    33:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:4F:6D:30:11:58:5F:3D:EE:9B:79:C5:25:46:1D:08:94:20:2C:89
            X509v3 Authority Key Identifier:
                keyid:55:0D:4C:57:1D:8B:FB:FD:D8:FA:3A:17:0F:99:FB:3A:FA:B4:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/57cd56-7bec-40f1-bf72-3d46caf55738/1/VQ1MVx2L-_3Y-joXD5n7Ovq0EdE.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:97:43:d6:af:8a:f3:c0:9b:91:75:36:0c:bf:b9:08:0a:ef:
         df:32:a8:84:5c:1d:85:8e:91:52:30:4b:8e:62:dd:e6:8b:0a:
         17:a2:6d:0a:f5:11:bd:67:b9:73:cf:9c:04:ee:91:3f:76:ba:
         e3:4b:bc:e5:d4:d4:43:3b:79:c3:1a:ff:b6:ab:7f:57:47:3e:
         e4:c1:b6:b6:26:6e:1e:e3:67:19:fb:77:18:60:b0:37:1f:d1:
         2a:e8:d1:83:b3:46:51:9b:45:c5:79:da:a8:fd:7e:9d:03:43:
         c3:e0:89:94:ff:98:de:11:7d:7d:c3:d0:b8:64:b3:29:3e:27:
         51:9a:f5:8e:35:f5:1a:9d:0d:0e:c2:97:a8:63:4c:e1:53:69:
         79:96:46:0e:9f:a1:bb:71:cd:e9:67:ad:cf:76:96:6b:9d:2a:
         75:cb:46:92:9c:0f:eb:e0:f1:10:12:94:df:a0:a5:5f:52:62:
         f5:5a:80:af:80:05:cd:8a:89:f9:99:cb:42:55:47:00:0b:fd:
         50:64:a1:f2:8e:a9:f5:d8:5f:eb:34:10:1d:84:b1:3c:61:2d:
         15:23:0b:cb:09:75:51:9e:33:4f:8e:d3:42:03:8f:29:8b:91:
         b5:62:6a:d1:96:f2:b3:42:62:7d:27:32:29:54:bc:ff:a5:6b:
         a1:1d:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 04:58:45 2026 by rpki-client