Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
File:                     vBwW9b43_2xdQgXyq6JfzjWJAzU.mft (raw, json)
Hash identifier:          QgNKHgRqRn3tDGdNSYUu1nBo183hjJtmBMKGChCsAio=
Subject key identifier:   3A:7B:B1:38:B9:AD:1B:E6:23:52:EA:56:ED:BD:2F:06:73:03:49:5F
Authority key identifier: BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35
Certificate issuer:       /CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
Certificate serial:       019D99D0D4EC20E501F40EBAD53D4F507847
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
Manifest number:          1147
Signing time:             Fri 17 Apr 2026 05:01:33 +0000
Manifest this update:     Fri 17 Apr 2026 05:01:33 +0000
Manifest next update:     Sat 18 Apr 2026 05:01:33 +0000
Files and hashes:         1: o6IB38C6xSOkxGBGXTts02Icg5E.roa (hash: 3kcNqmgdeYSwqNssdu/7Mxp1Q+Ah6H4caa+MFD2yuJ0=)
                          2: vBwW9b43_2xdQgXyq6JfzjWJAzU.crl (hash: FkMeMSGKX5ycRCvEzz78VmHWLONHEIC6lzF1TLejG5E=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:d0:d4:ec:20:e5:01:f4:0e:ba:d5:3d:4f:50:78:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc1c16f5be37ff6c5d4205f2aba25fce35890335
        Validity
            Not Before: Apr 17 05:01:33 2026 GMT
            Not After : Apr 18 05:01:33 2026 GMT
        Subject: CN=3a7bb138b9ad1be62352ea56edbd2f067303495f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e8:8d:d6:ff:bd:09:e3:72:30:4c:8d:f5:99:
                    82:f8:63:e4:06:f4:12:ca:fa:9e:42:2e:9f:03:dd:
                    9a:42:bf:61:26:12:f0:57:a4:82:10:ed:ad:e0:67:
                    bb:0b:22:19:91:67:79:56:e7:a0:93:24:a9:48:a6:
                    69:29:57:87:32:b3:a4:79:d6:13:33:dc:29:6e:a4:
                    03:8b:ba:1b:e2:f2:b6:78:32:69:8b:ec:e1:6c:28:
                    5d:06:a7:7a:50:b2:d2:f4:e6:28:34:36:e1:b3:36:
                    e0:45:7d:f3:65:bc:c0:98:52:9b:0f:19:c0:d2:9f:
                    6b:fe:25:59:41:84:1f:21:b2:30:f9:32:d6:f1:01:
                    fa:98:75:4f:13:ec:63:e0:c7:cd:3e:90:d9:d3:60:
                    13:8c:4d:4d:62:05:43:d5:52:96:4e:90:1c:f7:87:
                    e1:73:a9:3c:13:6d:80:0d:3a:12:06:eb:b4:9c:e8:
                    5b:a8:c0:2a:1a:52:e9:94:ef:7b:01:6a:6c:99:a2:
                    77:42:26:92:21:45:47:c6:34:ae:d8:74:e1:a4:3e:
                    e9:34:5d:c8:bd:d6:e6:0b:cf:4f:c9:14:94:72:76:
                    6b:b2:ad:87:22:58:28:9e:44:4f:b1:7e:b1:8b:e4:
                    f5:94:d9:85:61:ef:c0:e7:93:11:85:00:7d:34:f5:
                    3d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:7B:B1:38:B9:AD:1B:E6:23:52:EA:56:ED:BD:2F:06:73:03:49:5F
            X509v3 Authority Key Identifier:
                keyid:BC:1C:16:F5:BE:37:FF:6C:5D:42:05:F2:AB:A2:5F:CE:35:89:03:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBwW9b43_2xdQgXyq6JfzjWJAzU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f826a5-8e95-4513-b726-abd6f2b3410b/1/vBwW9b43_2xdQgXyq6JfzjWJAzU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c4:cc:4f:30:b1:82:24:82:88:32:2f:c3:e7:d9:ee:0d:fe:
         08:b1:78:d5:cc:bc:9b:59:f2:41:53:ad:35:00:b8:37:a1:27:
         34:96:2c:ae:86:b0:d0:b2:24:98:9c:04:03:ff:0a:17:21:8a:
         27:ce:3e:63:dd:c9:10:5e:4d:89:b2:68:c3:83:e1:94:fc:37:
         ef:d5:6f:b2:38:e0:b8:2e:49:e0:d1:b2:fb:98:b2:6c:f3:d8:
         95:61:7a:ee:a3:97:35:7f:1d:d4:90:17:6d:65:7d:90:b0:cb:
         c0:8b:0a:12:b9:bd:35:07:f5:64:92:1e:a8:5b:27:53:a9:3a:
         ae:b4:0e:8b:81:8d:51:4f:1e:b2:71:1e:7a:0e:71:cf:26:a5:
         ec:43:3e:76:29:43:7c:e3:70:a1:ae:e9:c5:1f:d2:bd:d8:2f:
         00:5f:55:b9:1a:96:4a:fb:63:55:d4:83:76:13:31:f0:78:a0:
         b9:7e:45:a9:dc:eb:da:7b:a9:a0:5b:31:c8:ec:61:7d:3b:c8:
         fc:80:eb:69:27:69:78:1c:b9:84:10:a7:32:fb:fb:be:ea:b8:
         89:a4:bb:f9:ac:6f:af:e4:4c:21:26:a6:41:e2:1a:41:15:39:
         99:55:87:c4:34:22:21:7f:4f:dc:7d:98:13:3a:15:1e:0a:88:
         91:64:17:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:22:05 2026 by rpki-client