Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
File:                     VP1dZagmaMyV9_7_VdUbcNGpneo.mft (raw, json)
Hash identifier:          TKwd9DTcYb57v1LI8Jj2JAUFuwjhq4jbb/pwA5uy3Ps=
Subject key identifier:   43:1F:E3:CF:1B:1F:53:2A:81:2E:E5:E5:81:FF:05:24:39:C2:18:75
Authority key identifier: 54:FD:5D:65:A8:26:68:CC:95:F7:FE:FF:55:D5:1B:70:D1:A9:9D:EA
Certificate issuer:       /CN=54fd5d65a82668cc95f7feff55d51b70d1a99dea
Certificate serial:       019D9A0721D802962B1BED3F0D663B698C27
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
Manifest number:          3B
Signing time:             Fri 17 Apr 2026 06:00:51 +0000
Manifest this update:     Fri 17 Apr 2026 06:00:51 +0000
Manifest next update:     Sat 18 Apr 2026 06:00:51 +0000
Files and hashes:         1: RvkZEoK0HyizIOoF3aDu_3nGrKE.roa (hash: BJ0nBnlY8vQ8ef9j08YqNE70rnN85bh90GtAddLxkHI=)
                          2: VP1dZagmaMyV9_7_VdUbcNGpneo.crl (hash: sNoDZxFnXnuoBHTBcUkDepbHoL0NkKjC/VqPzAiGSgo=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 06:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:9a:07:21:d8:02:96:2b:1b:ed:3f:0d:66:3b:69:8c:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=54fd5d65a82668cc95f7feff55d51b70d1a99dea
        Validity
            Not Before: Apr 17 06:00:51 2026 GMT
            Not After : Apr 18 06:00:51 2026 GMT
        Subject: CN=431fe3cf1b1f532a812ee5e581ff052439c21875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7b:72:fe:77:c1:16:be:06:00:4f:9a:94:0d:
                    05:bf:e1:0f:26:2f:ea:27:40:27:4c:bc:73:e7:86:
                    e2:38:70:7e:95:c1:c5:56:bc:85:f7:e3:d0:19:04:
                    fb:2c:47:d4:39:d8:ea:f3:ee:5f:82:62:06:af:9f:
                    8a:c8:bb:82:f6:c1:8c:73:23:8a:34:cf:8f:bb:03:
                    5f:cf:be:f7:af:5a:3c:23:05:ce:99:41:60:95:7f:
                    f9:6a:85:af:b8:c0:4d:37:8b:33:26:db:80:38:a9:
                    a9:2b:a6:1d:41:37:03:78:8c:eb:17:04:28:ef:64:
                    92:35:bc:bb:5b:af:71:e3:ff:83:6d:45:ce:7d:d4:
                    84:18:38:5e:71:14:cb:de:dd:be:63:f4:ca:e8:22:
                    6e:4d:12:c7:38:c0:1d:c8:21:15:37:a9:96:d6:85:
                    93:5a:d2:e6:fe:ac:9a:43:6d:b9:ac:74:63:cb:6a:
                    a9:ce:30:35:70:46:b5:91:25:bd:54:e6:dc:3a:ec:
                    b3:f1:f4:fa:95:a2:f0:99:10:6e:48:f3:a4:8a:18:
                    d8:60:05:82:6e:24:ea:cf:67:24:72:bf:fc:a3:e3:
                    0f:66:92:8e:25:da:ce:c4:83:54:5b:13:d0:2c:66:
                    93:02:5a:28:f5:f5:bc:14:9e:a9:da:68:8e:08:38:
                    cd:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:1F:E3:CF:1B:1F:53:2A:81:2E:E5:E5:81:FF:05:24:39:C2:18:75
            X509v3 Authority Key Identifier:
                keyid:54:FD:5D:65:A8:26:68:CC:95:F7:FE:FF:55:D5:1B:70:D1:A9:9D:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VP1dZagmaMyV9_7_VdUbcNGpneo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/50d88d-b12e-4d47-8a5e-e5bdd4bea4ae/1/VP1dZagmaMyV9_7_VdUbcNGpneo.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:9a:9f:5d:7d:e0:1e:65:05:9b:b1:8a:49:99:b0:f6:a5:cb:
         dc:18:5b:70:34:6f:eb:81:da:0a:83:30:27:eb:0c:96:9d:5f:
         19:bf:9b:14:be:20:06:3a:ca:8e:a4:60:54:a3:d8:dc:f1:74:
         86:7a:af:aa:4c:25:41:b1:5e:3a:9d:19:ff:f7:f4:c3:21:2f:
         e2:bf:f1:7a:53:b9:22:bb:54:93:d2:d7:9d:16:c0:dc:80:ef:
         83:bb:6d:f4:6e:4f:52:22:a6:ef:b3:0e:e3:db:3d:30:aa:5d:
         88:e3:e9:ac:15:48:12:47:5e:8b:56:a6:aa:1b:65:7c:eb:61:
         fa:95:ae:8d:10:c3:c8:07:a1:c0:76:4e:62:51:0d:35:f6:eb:
         6d:80:57:73:00:75:60:6b:0d:f4:cd:f4:02:d8:5f:9e:1d:6b:
         73:54:be:fc:b2:7a:d5:12:1f:94:52:bd:2a:29:68:bd:91:b7:
         4f:73:44:3d:1d:9a:55:a1:8c:7b:f1:a3:24:ac:77:b8:56:11:
         02:d9:ba:9c:fe:fb:d8:15:5a:9f:ff:ba:55:46:fc:5e:68:b7:
         ba:45:18:2e:a9:94:f7:a3:8d:ce:c2:d1:9e:5c:4f:2a:49:18:
         5b:77:bd:84:08:0d:ae:ac:73:42:f9:fa:5e:8e:a8:9d:0b:c8:
         49:a9:bc:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:40:49 2026 by rpki-client