Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File:                     VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier:          HwUPD9F78GYePzsOiOu/N/9yzJfUAJKrGeeBa9/spdo=
Subject key identifier:   58:D6:A0:E6:93:E5:DA:0F:50:67:6D:97:FF:96:C2:73:12:03:61:07
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer:       /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial:       019D988690B26F4B459B402FD677E59DADB3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number:          165D
Signing time:             Thu 16 Apr 2026 23:00:48 +0000
Manifest this update:     Thu 16 Apr 2026 23:00:48 +0000
Manifest next update:     Fri 17 Apr 2026 23:00:48 +0000
Files and hashes:         1: JjGWu_iS8cN2zsRmRzGaL41mOkE.roa (hash: g4eeZndVmzfMZIquXIPB+scdVjdZfzjwgvSICfGOgYk=)
                          2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: /OLdQXxA2xQdauhaOFFmqlRleEjI8eByZduS4ITjnt8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:86:90:b2:6f:4b:45:9b:40:2f:d6:77:e5:9d:ad:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
        Validity
            Not Before: Apr 16 23:00:48 2026 GMT
            Not After : Apr 17 23:00:48 2026 GMT
        Subject: CN=58d6a0e693e5da0f50676d97ff96c27312036107
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3e:80:5f:10:76:0f:c8:c5:11:4f:39:a3:99:
                    40:5a:f1:8b:69:3e:b4:06:92:8d:c9:43:e2:ef:95:
                    b7:be:01:ea:76:0c:32:fa:e9:18:50:7e:06:c4:97:
                    72:6e:a4:af:bd:75:6b:15:e5:f8:44:b2:ee:21:5d:
                    45:d7:ef:00:09:31:a6:06:7a:92:7e:9e:34:ca:8d:
                    50:c4:3f:24:b7:c5:64:92:6e:29:e9:98:9c:93:f8:
                    05:c1:1b:52:14:19:72:5e:20:bb:2b:92:ed:4b:12:
                    0c:4a:23:4a:45:c8:bc:40:e1:75:19:cd:79:43:af:
                    19:5f:1d:88:01:96:94:5b:c1:51:98:d0:b9:68:91:
                    3e:58:36:da:c0:b8:8c:ff:7a:3c:50:1f:c9:48:13:
                    1a:08:d9:e6:b9:4b:88:61:2a:14:d1:77:aa:fd:5c:
                    86:d4:15:97:48:4d:39:52:6f:17:f1:5d:bc:e7:f0:
                    83:f4:03:84:7d:f4:75:69:70:2f:e6:24:b5:fa:98:
                    d8:32:55:85:42:72:38:f6:a9:8c:97:e2:c5:bc:9b:
                    46:16:e9:51:1e:cc:23:69:f6:6e:45:61:d1:2e:49:
                    88:24:20:22:68:eb:9b:cc:95:63:db:ce:af:19:c5:
                    6a:73:30:7c:bc:74:04:a1:ef:88:e6:3c:3c:d3:ad:
                    31:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D6:A0:E6:93:E5:DA:0F:50:67:6D:97:FF:96:C2:73:12:03:61:07
            X509v3 Authority Key Identifier:
                keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:cc:dc:a1:3a:64:dd:8a:96:5e:ee:df:68:20:15:85:c1:0e:
         17:b9:94:42:d0:f2:fb:89:78:82:53:0f:05:fd:66:30:c5:30:
         94:b5:75:fd:d4:13:e2:d5:60:fb:66:c3:72:31:b8:38:96:a3:
         b8:e7:b6:76:c5:ee:83:02:a9:63:76:0b:8d:7d:e4:cc:14:26:
         ef:14:72:9d:69:63:a0:68:8b:86:b4:e4:32:2f:26:a3:e9:83:
         c8:62:ea:43:72:92:6d:c2:1c:5c:cc:ab:c9:ca:c9:7c:f5:bb:
         b4:f6:8d:17:c6:7e:26:d3:cd:54:d2:f5:7c:fc:9b:90:74:2b:
         d4:d5:d0:5c:37:e1:e4:28:63:85:33:ba:03:89:74:0d:d0:81:
         a0:d7:c6:c0:6d:ac:12:8b:03:8c:57:ab:28:2b:4c:3d:2e:6a:
         ea:c9:cb:77:24:56:2a:05:de:bb:fb:0c:76:2a:08:08:5a:85:
         3b:e8:41:9d:cd:ea:8c:aa:84:18:6b:e9:d5:89:f9:04:bc:08:
         f2:44:45:2b:f3:a6:6a:c4:75:b5:de:c5:f7:f3:d6:8b:86:82:
         33:1a:40:f3:5a:37:a1:4c:aa:19:b7:cb:e1:8f:de:15:4e:eb:
         2f:b1:0c:d0:9e:9b:a6:49:86:f8:b1:95:14:e1:19:48:96:51:
         1b:3f:3c:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:19:27 2026 by rpki-client