Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
File:                     VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft (raw, json)
Hash identifier:          Vsaf0BnUt2YbA7+NIGLarB8mkb6UtPtCdrivUNaQHdE=
Subject key identifier:   F7:AE:99:87:2E:98:D7:8F:7F:FC:94:93:D0:A7:19:E2:F6:D0:C1:47
Authority key identifier: 54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3
Certificate issuer:       /CN=54137c32249107f26b1741451cf10039380b8bc3
Certificate serial:       019DA52F55B60A3969564B0CF1A213F8E9B9
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
Manifest number:          0250
Signing time:             Sun 19 Apr 2026 10:00:35 +0000
Manifest this update:     Sun 19 Apr 2026 10:00:35 +0000
Manifest next update:     Mon 20 Apr 2026 10:00:35 +0000
Files and hashes:         1: TboL8PiKmGO2xSdCzYOzLLLsrgo.roa (hash: L+TeEKzIHBiCwRJJ12WlexzFz32tqwEp+pqXfiwcHm0=)
                          2: VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl (hash: PasU6mw+cH99tPsyqfO8PTiHe8dMtKWth1BSs4EoRig=)
                          3: fepTS1XefYM5Mm0VJMMPSN02wxo.asa (hash: VKdt4tdwgcz86/Usr6Qv72R8qP1GifrjrQfQv6ap4/M=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 20 Apr 2026 04:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:a5:2f:55:b6:0a:39:69:56:4b:0c:f1:a2:13:f8:e9:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54137c32249107f26b1741451cf10039380b8bc3
        Validity
            Not Before: Apr 19 10:00:35 2026 GMT
            Not After : Apr 20 10:00:35 2026 GMT
        Subject: CN=f7ae99872e98d78f7ffc9493d0a719e2f6d0c147
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:c4:c5:a8:c4:81:db:dc:fe:db:43:5a:0a:40:
                    67:36:1f:56:30:74:2f:f8:65:72:d0:f4:cb:47:66:
                    ab:c0:4c:f3:60:70:be:23:dd:e3:54:8e:69:df:50:
                    36:05:12:55:d4:0f:98:18:20:65:7b:f9:c0:e2:7b:
                    ee:30:d4:b7:81:8b:dd:34:50:0d:ed:92:3a:3b:74:
                    07:04:14:b0:45:af:30:68:84:1f:4f:6b:44:53:9c:
                    68:c9:de:eb:40:40:7c:8c:6a:14:d0:00:95:ef:d5:
                    6d:99:db:3c:da:7a:da:18:81:8b:82:c0:96:d6:41:
                    c2:b0:e9:3f:63:e5:d8:6a:53:e6:1d:be:39:1b:ec:
                    cd:09:44:b6:23:0f:c4:05:17:ff:80:ec:20:ad:55:
                    96:6f:fd:a0:27:aa:91:39:f5:c6:58:9b:cc:3a:f3:
                    d1:cb:a4:8f:bc:9e:56:6d:6b:c9:5c:82:16:66:81:
                    34:2b:c0:86:47:d3:cb:dc:9e:bc:10:95:10:44:f7:
                    ee:f7:e9:59:89:78:f0:90:4a:d7:49:8f:e7:6b:b5:
                    65:e0:14:58:24:68:92:e2:26:f0:86:40:d0:b3:ba:
                    00:fe:f1:a5:c0:94:56:60:88:c6:0f:e4:d5:7b:e5:
                    cf:dd:52:5c:7e:db:1b:c5:30:09:74:8f:8d:e1:d2:
                    6c:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:AE:99:87:2E:98:D7:8F:7F:FC:94:93:D0:A7:19:E2:F6:D0:C1:47
            X509v3 Authority Key Identifier:
                keyid:54:13:7C:32:24:91:07:F2:6B:17:41:45:1C:F1:00:39:38:0B:8B:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBN8MiSRB_JrF0FFHPEAOTgLi8M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/85ee8d-1d25-453a-bbbd-c8e15540c806/1/VBN8MiSRB_JrF0FFHPEAOTgLi8M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ed:4b:6a:eb:b9:40:00:fd:74:f8:76:11:58:bd:5b:f5:3e:
         73:63:73:56:8c:2f:c6:01:8a:5d:d2:38:53:8b:83:b9:49:b0:
         5e:ef:83:6a:0c:66:9c:ec:f1:de:22:d0:a3:9a:f2:06:e6:0f:
         2e:f1:4e:45:d6:de:c3:df:c1:91:42:d4:13:6a:c9:c7:0f:f3:
         e9:83:97:8b:72:46:8f:c9:ce:0b:69:9a:1d:76:d9:b6:69:d9:
         2a:dd:aa:cd:13:ad:d3:7d:9d:4a:7a:1c:91:6f:1b:7d:e3:a9:
         61:fb:42:98:e2:98:8b:b7:e0:a3:d6:b8:ec:5d:4a:e7:27:30:
         09:95:9a:81:72:30:30:e4:d7:cd:9b:19:9b:58:95:d3:82:e3:
         71:dd:00:49:47:1b:34:97:17:1a:69:a4:1e:e6:99:73:25:f2:
         2c:e2:ed:71:29:94:99:64:60:b9:29:79:e3:5e:9f:c3:44:83:
         75:26:1e:23:d1:c5:72:58:e3:11:61:af:3b:64:b8:84:44:14:
         3d:a7:e7:70:04:ee:1b:84:29:d7:4b:89:25:50:82:a8:de:e9:
         6b:da:b0:99:f9:74:76:df:18:33:3c:c2:9c:08:9d:a1:5b:75:
         48:c4:a3:2d:1f:65:af:f7:f4:a8:51:42:e9:6a:77:e0:ca:71:
         de:b2:3b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:43:24 2026 by rpki-client