Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File:                     VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier:          tRl0FH27rVhipxVGrB9jG/wv+OHx79IOgy0eiSxEGwM=
Subject key identifier:   AC:DB:E4:39:B1:C4:C4:CC:D6:0C:E5:D4:3F:5F:F0:0E:F2:28:A3:00
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer:       /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial:       019D98BDB96B382FCEE6A05D9F3D3164C32D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number:          18C0
Signing time:             Fri 17 Apr 2026 00:01:03 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:03 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:03 +0000
Files and hashes:         1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: iG1eBvXNJI1u2LarPbmXJsmGZ0LET0wfYm0g8ue9hvw=)
                          2: kf5Z8uwtQg4_fRHhJwlsy7HUpuY.roa (hash: h5g52iMUxElJ8ULuCrT2oQz8CHmqTBslvGMi61f4Mws=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:b9:6b:38:2f:ce:e6:a0:5d:9f:3d:31:64:c3:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
        Validity
            Not Before: Apr 17 00:01:03 2026 GMT
            Not After : Apr 18 00:01:03 2026 GMT
        Subject: CN=acdbe439b1c4c4ccd60ce5d43f5ff00ef228a300
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d8:bf:19:5c:e1:2c:05:1d:a5:82:b2:27:49:
                    90:fa:54:18:0b:88:9e:9f:b5:dc:bc:85:c9:66:8c:
                    7f:63:90:71:bc:b1:bf:25:56:23:38:89:e2:ac:7e:
                    3c:3e:0b:36:3d:37:56:0e:db:d5:ef:8f:2d:a5:b1:
                    f2:00:50:59:7a:78:41:90:c6:de:c2:9f:f5:d1:73:
                    9c:52:9c:27:7d:ca:9a:b3:e1:8e:9e:a3:d6:70:6b:
                    78:e0:5c:76:97:3b:20:d1:72:59:b8:09:d1:db:82:
                    88:cf:fe:26:c8:51:52:b7:b5:b6:85:da:0e:76:f7:
                    d4:16:42:89:17:30:d9:a8:e4:3a:1b:29:e5:17:f4:
                    86:16:30:78:91:03:0f:aa:19:57:f3:0c:2c:96:ee:
                    89:9f:29:61:56:d0:8f:04:5c:ab:65:8a:25:1f:58:
                    24:91:c3:b5:0f:c3:bc:d8:b2:2c:e3:17:fb:c2:1d:
                    c2:47:a8:ce:43:51:f2:72:7c:0e:fd:1a:12:1a:a3:
                    1c:d1:ca:eb:eb:50:11:ac:cf:ec:ca:97:ee:ed:78:
                    f6:f8:f7:a4:6d:7b:1c:ff:60:81:2a:8d:20:d4:58:
                    0c:d7:93:25:1d:28:03:b4:b9:96:0e:03:51:78:77:
                    74:44:e3:28:52:c3:ed:1f:b1:ea:72:64:84:14:7e:
                    3b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DB:E4:39:B1:C4:C4:CC:D6:0C:E5:D4:3F:5F:F0:0E:F2:28:A3:00
            X509v3 Authority Key Identifier:
                keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         cf:a3:2d:67:77:11:17:0f:0e:1e:ff:2a:c5:e9:b8:72:3c:ee:
         c6:a6:a2:aa:5b:3c:b1:10:d2:c2:a5:c8:7e:e0:69:ec:79:c7:
         2f:4d:d5:12:9c:bd:2e:25:74:96:65:ba:98:bf:38:56:23:8d:
         e2:04:a0:d1:67:ae:90:b7:fd:84:46:99:27:a7:8e:10:e8:d7:
         35:3e:90:ef:5c:a9:17:44:d1:c0:19:8a:74:28:dc:d9:64:62:
         5a:9d:f6:de:d6:52:22:e1:a5:9d:19:15:d6:c5:a2:a8:2a:62:
         25:90:88:3d:87:2c:6e:a3:d6:9e:88:a2:f4:1d:d9:1c:56:74:
         17:1c:a5:68:d5:4b:5e:3f:2d:ed:e6:03:b4:51:11:48:89:60:
         a8:12:93:f5:90:8e:56:04:44:4c:2b:56:40:ec:3c:3e:a4:de:
         e4:5a:6e:fa:26:70:be:f9:0a:f0:79:f0:36:7a:54:75:e5:03:
         e9:0b:38:c7:ee:da:dc:d1:9d:be:14:7e:0d:25:d1:7c:ea:43:
         80:42:14:35:47:66:75:99:21:a4:cb:0f:67:ca:b1:ed:78:d3:
         5f:49:0f:22:28:a3:8c:82:dd:48:50:3b:a2:2e:5a:af:96:e6:
         7a:95:8a:13:73:6c:a3:93:e1:ba:36:44:dd:be:2e:65:cf:ff:
         ac:93:59:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:27:06 2026 by rpki-client