Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
File:                     VxRWZJaS5gVm3gCOEmu90dLr7UU.mft (raw, json)
Hash identifier:          KeJqqNjoLhtVLyXkIkXogjO1ro3pvPNuxkwne8ImcMg=
Subject key identifier:   A1:6A:08:EB:6C:FF:45:1C:BF:1D:E6:3E:49:D7:54:81:58:D4:44:D8
Authority key identifier: 57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45
Certificate issuer:       /CN=571456649692e60566de008e126bbdd1d2ebed45
Certificate serial:       019D98BDDA2CF67198D4131FFB440F94E931
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
Manifest number:          113C
Signing time:             Fri 17 Apr 2026 00:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:12 +0000
Files and hashes:         1: HOp2jzb00JVG7hGcpmwz-YejBiA.roa (hash: az7il00pr1Ws5fJ/aExDjxq5+Lv6ZMAjzs01eExhQbQ=)
                          2: VxRWZJaS5gVm3gCOEmu90dLr7UU.crl (hash: Xmj09c4u/GdU6Vh2V1hhlToQqkObc4H5eIubK8Vpd5s=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:da:2c:f6:71:98:d4:13:1f:fb:44:0f:94:e9:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571456649692e60566de008e126bbdd1d2ebed45
        Validity
            Not Before: Apr 17 00:01:12 2026 GMT
            Not After : Apr 18 00:01:12 2026 GMT
        Subject: CN=a16a08eb6cff451cbf1de63e49d7548158d444d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:41:19:80:25:6d:0a:86:2e:35:67:fb:e0:c7:
                    e0:92:ab:63:a8:f0:b1:4f:01:df:01:cf:55:1b:d4:
                    fe:d7:01:1f:3c:af:d6:d3:cd:af:a3:23:9e:63:6a:
                    33:03:ad:6f:f1:44:6c:8c:a2:46:95:6a:68:c6:9c:
                    f9:aa:45:09:6a:08:59:06:bc:9d:b5:b3:98:e4:40:
                    a1:59:a5:df:e5:45:65:ed:d2:1d:15:d8:24:ed:e0:
                    fc:ec:fd:9e:84:70:57:89:ad:f8:6a:24:62:0c:83:
                    80:bf:9d:e2:e1:1b:ea:2f:ae:e3:52:1d:56:b2:15:
                    90:03:00:7a:69:d0:2d:56:08:be:bb:14:33:b7:ba:
                    30:5c:ef:83:0d:46:77:05:ee:19:ca:3a:0c:45:46:
                    ca:16:82:0a:86:10:20:69:11:f4:98:eb:70:11:79:
                    64:39:bd:77:49:67:e2:83:14:97:b8:77:3b:24:59:
                    fc:47:f1:ea:5c:33:4f:c8:41:e1:b6:c9:43:1a:15:
                    2e:be:fa:1c:7a:36:be:ad:c3:af:19:67:b7:0f:bf:
                    8e:ff:46:2e:c4:72:4d:84:a7:49:25:ab:8c:91:f2:
                    32:6c:5c:63:e2:24:d8:a1:28:c8:4a:63:b4:d2:3a:
                    a7:37:9e:4f:63:1f:3d:87:f7:60:4d:37:07:32:f2:
                    f1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:6A:08:EB:6C:FF:45:1C:BF:1D:E6:3E:49:D7:54:81:58:D4:44:D8
            X509v3 Authority Key Identifier:
                keyid:57:14:56:64:96:92:E6:05:66:DE:00:8E:12:6B:BD:D1:D2:EB:ED:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxRWZJaS5gVm3gCOEmu90dLr7UU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/08a7ff-2cef-4248-9fe8-04c8f3eeceeb/1/VxRWZJaS5gVm3gCOEmu90dLr7UU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d9:5d:48:24:56:ce:a4:e4:4b:5b:93:72:21:85:f7:23:58:ab:
         96:d2:19:11:f0:58:72:37:aa:4a:e2:43:3a:4c:79:13:6d:ff:
         01:28:46:72:95:6f:44:a7:15:57:87:be:f3:1c:4c:13:b9:05:
         e1:07:cd:cc:d5:e6:75:a9:0a:ed:49:e7:67:1e:0f:9f:ce:5f:
         fe:f2:ab:55:0b:96:8c:30:b8:a1:57:5f:d0:0a:08:e8:06:72:
         5b:01:4e:9d:f8:d9:0d:8d:d2:db:17:08:e9:c3:c0:a4:b1:3a:
         59:69:b7:07:77:ea:b4:3a:c1:16:af:a2:55:5f:e7:a6:c6:9d:
         ae:e0:bb:ea:1a:3a:a5:f3:4d:cd:fd:d6:79:5a:6c:c4:f6:f0:
         70:36:72:9c:ed:9b:8d:ed:6a:a8:9e:a1:28:07:0f:c4:fa:cf:
         cc:1f:83:67:6a:fe:f7:d3:1f:29:85:99:39:75:ee:24:4c:89:
         83:2a:c8:d3:2d:f9:e3:34:f1:70:bb:ba:f8:fe:38:fe:82:51:
         fb:04:d6:72:79:42:13:d3:1f:70:0b:40:7d:92:03:61:90:1e:
         88:bc:32:11:c0:b5:e6:62:e8:c0:aa:bb:ad:01:e1:58:bc:4b:
         75:4b:7c:43:0d:7d:59:a9:dc:19:c0:6a:fd:94:a8:c2:8b:93:
         f3:8a:7b:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:27 2026 by rpki-client