Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
File:                     VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft (raw, json)
Hash identifier:          a7Hqtat/czumlK7FC+9K6ErivmLlo0HABS9JcKr4J0Q=
Subject key identifier:   B1:FD:4D:22:06:85:08:BD:E0:C3:9B:BA:F5:90:9E:34:66:3A:5D:26
Authority key identifier: 55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06
Certificate issuer:       /CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
Certificate serial:       019D9B19882D44BE7844DB159D39EAE5487B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
Manifest number:          077B
Signing time:             Fri 17 Apr 2026 11:00:34 +0000
Manifest this update:     Fri 17 Apr 2026 11:00:34 +0000
Manifest next update:     Sat 18 Apr 2026 11:00:34 +0000
Files and hashes:         1: VObqjORpWe2Fv7VvwnT3tzS8IqA.roa (hash: vKyVvzXkdiSY6cjJePalVi4CXfI5iOk9w9oYgFg2+Ok=)
                          2: VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl (hash: 1M9/Ch7K0AA+GSsga41Ds0Qu90LJ9LzF76Pv3gzP57c=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 07:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9b:19:88:2d:44:be:78:44:db:15:9d:39:ea:e5:48:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5542b766ef57d69cf4fbde4bcb6f0af06a3b2206
        Validity
            Not Before: Apr 17 11:00:34 2026 GMT
            Not After : Apr 18 11:00:34 2026 GMT
        Subject: CN=b1fd4d22068508bde0c39bbaf5909e34663a5d26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a5:a0:31:a1:88:72:ea:b0:96:12:f3:b9:fa:
                    92:90:82:de:b3:29:98:e3:28:f9:7c:3a:ab:05:22:
                    42:4f:80:c4:13:c5:9a:41:2b:8f:06:b1:4a:e1:f1:
                    dd:bb:45:1b:ce:00:d0:58:0e:3f:d4:c3:42:58:22:
                    72:b6:b2:b8:92:07:75:50:79:76:be:98:a5:85:4f:
                    12:1d:a3:6f:3b:34:71:69:58:6b:6c:69:0e:ea:03:
                    71:c9:92:11:94:7d:9a:3f:bf:3c:08:d0:ba:8c:ba:
                    8a:f9:83:e6:50:92:64:10:5b:95:25:3f:ca:e5:7a:
                    35:23:6f:07:a5:3c:80:2e:22:53:b8:11:15:f9:8a:
                    bc:33:8f:ea:93:df:a7:53:7d:5a:b8:40:7b:fd:7e:
                    08:ee:61:c1:1a:1c:be:58:04:b4:15:d3:6b:90:c6:
                    be:03:7a:2f:ea:06:66:f0:53:94:d7:b2:a9:14:06:
                    11:b0:61:e7:70:2f:4d:88:a4:50:88:08:e2:16:ed:
                    9d:6e:9b:8f:72:8c:8e:0f:2a:71:8d:c9:be:26:4f:
                    36:da:0e:52:f9:9c:99:f1:d9:3b:ad:6e:03:8e:31:
                    43:5f:46:73:ae:a6:35:cf:d5:aa:fa:03:87:d4:af:
                    fe:e6:eb:b2:63:5b:82:0f:4b:b4:5c:6e:68:d9:46:
                    5d:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:FD:4D:22:06:85:08:BD:E0:C3:9B:BA:F5:90:9E:34:66:3A:5D:26
            X509v3 Authority Key Identifier:
                keyid:55:42:B7:66:EF:57:D6:9C:F4:FB:DE:4B:CB:6F:0A:F0:6A:3B:22:06

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUK3Zu9X1pz0-95Ly28K8Go7IgY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/55/446eba-9c0d-4765-b3dc-78308b2f5234/1/VUK3Zu9X1pz0-95Ly28K8Go7IgY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:06:24:2e:e5:76:4d:f8:e2:a2:e7:0d:c8:44:15:41:58:d2:
         89:62:9e:59:35:b3:be:3f:3e:6e:f6:53:1c:4b:d3:52:a5:3e:
         7f:92:c3:c7:ea:09:ff:aa:7e:14:6d:6f:40:7d:19:40:e8:cc:
         62:9e:8c:3f:44:12:bc:5c:b8:9a:73:aa:e5:35:4c:7d:8d:4b:
         e6:fa:cd:53:e4:c6:31:19:f7:56:74:26:3e:31:73:5b:71:34:
         bf:2a:f1:0e:df:58:1e:66:38:f9:eb:b9:fc:23:1d:cd:7f:21:
         d3:f4:64:c4:57:34:e4:59:1b:3e:fe:2c:7d:2f:7a:85:ac:7d:
         70:de:f4:48:3f:ba:ca:08:73:69:55:19:ab:c4:af:07:cf:71:
         66:2a:87:4f:9c:aa:41:49:ee:b7:f8:0e:b2:7f:5e:b6:c1:58:
         94:bf:1e:74:86:f3:63:e5:2d:1a:24:63:f9:33:8f:5a:6c:20:
         9e:7d:4b:c3:05:34:48:d8:2b:89:56:f6:12:b2:78:18:66:aa:
         17:30:e3:45:d4:9a:94:e1:c6:bd:10:0b:84:78:47:4c:8c:d5:
         8a:d3:75:45:ea:11:e3:42:78:00:a6:f9:18:fd:74:e7:73:3a:
         b5:cf:83:fd:10:cc:05:a7:4e:b6:72:5e:5b:26:61:26:9b:1a:
         ce:22:35:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:37:05 2026 by rpki-client