Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
File:                     vQY9lEu4H8McuhFJndAG607OliQ.mft (raw, json)
Hash identifier:          v6/cA/sxLeznqBWB9pSMDb+9d/Vl1xWm5DOYRwGH9FY=
Subject key identifier:   D4:8D:BE:F3:C6:54:6B:CA:EE:3D:74:71:C6:42:31:CE:CE:ED:4A:44
Authority key identifier: BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24
Certificate issuer:       /CN=bd063d944bb81fc31cba11499dd006eb4ece9624
Certificate serial:       019D98BDDDAF44CD38557B47C44520FE929F
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
Manifest number:          06F8
Signing time:             Fri 17 Apr 2026 00:01:12 +0000
Manifest this update:     Fri 17 Apr 2026 00:01:12 +0000
Manifest next update:     Sat 18 Apr 2026 00:01:12 +0000
Files and hashes:         1: GT0PYiVVY3q6SeoDEfKllMURPBc.asa (hash: x2GX5ozeDt1BFv1DNzzejD+SxlUQop4Zw+hYAhXdly4=)
                          2: oj97Ng3JgLvsyAIw1yTVTtpM69s.roa (hash: vIQENoGSkGXr7OaQKpDZcQK7eabU4UndqxZJRNZu8JU=)
                          3: r113hOesw4Xd_yEaqFZzRYfSE7Y.roa (hash: tedMkLnP1L9n55ZYcISog8S1/Qbay3SL1Z2VckbCsdI=)
                          4: vQY9lEu4H8McuhFJndAG607OliQ.crl (hash: 3q+MMvoTsZXOhSrHVa2eG3IyNaXYmMm/ptSXsZQHkPw=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 Apr 2026 22:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:98:bd:dd:af:44:cd:38:55:7b:47:c4:45:20:fe:92:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bd063d944bb81fc31cba11499dd006eb4ece9624
        Validity
            Not Before: Apr 17 00:01:12 2026 GMT
            Not After : Apr 18 00:01:12 2026 GMT
        Subject: CN=d48dbef3c6546bcaee3d7471c64231ceceed4a44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:1c:3f:79:ce:4b:7a:23:a8:f7:46:96:19:60:
                    8e:1c:1f:35:42:fe:0a:0b:77:de:11:66:6f:1d:2b:
                    dc:82:ae:e1:30:4a:58:a6:61:99:8d:28:66:a9:d7:
                    35:94:31:0e:d8:6a:7f:a9:f0:c5:c4:84:fe:85:bc:
                    1f:97:d1:7f:86:b2:19:a0:69:37:20:27:c6:a9:de:
                    eb:93:3b:28:ff:de:cc:40:0b:2f:d0:6b:bc:98:bb:
                    39:67:42:00:b5:a3:66:f6:02:88:c7:e6:7f:c5:5f:
                    76:85:f6:29:d3:dd:1c:f0:e3:d8:d9:bb:47:f6:d7:
                    77:c8:17:0b:f1:01:fd:d7:86:fb:bd:8d:65:cc:cf:
                    4e:23:11:53:13:02:8f:b4:75:f7:5f:32:ef:40:60:
                    05:63:a0:8b:8a:be:a4:2d:bc:21:c9:43:29:b1:b9:
                    79:94:22:cb:7b:6b:07:71:58:76:72:5d:af:e6:15:
                    6b:69:a7:ef:a5:98:18:18:22:b1:17:0a:5b:ea:86:
                    1e:7e:22:1a:61:73:f0:37:51:b9:f4:7c:cd:c0:8d:
                    20:a3:cb:33:5e:a1:0e:a3:1f:ad:da:0e:d5:65:00:
                    98:1e:e8:01:35:33:90:23:61:12:e5:bc:fb:98:e5:
                    97:6f:cc:85:47:91:61:f3:24:50:a3:cd:7f:bd:75:
                    fd:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8D:BE:F3:C6:54:6B:CA:EE:3D:74:71:C6:42:31:CE:CE:ED:4A:44
            X509v3 Authority Key Identifier:
                keyid:BD:06:3D:94:4B:B8:1F:C3:1C:BA:11:49:9D:D0:06:EB:4E:CE:96:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vQY9lEu4H8McuhFJndAG607OliQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ebfc3d-54fc-4643-be56-ea70a29c76f0/1/vQY9lEu4H8McuhFJndAG607OliQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:4e:b8:fa:49:c9:1f:4e:c0:79:ce:cf:19:8c:dd:21:95:82:
         fd:5b:77:e2:dd:2f:d8:29:3a:4a:cc:13:62:c6:d3:ac:a7:3a:
         a4:eb:62:44:77:f0:39:ba:30:ad:71:82:b5:95:e5:ab:21:2b:
         dc:93:28:2e:e7:ec:09:38:21:ae:27:c3:81:f4:5e:ac:19:51:
         bd:a2:86:bd:dc:4f:cf:24:0d:83:46:6a:28:0a:fd:6a:8a:bd:
         6f:0e:09:d6:04:21:5d:ce:22:f1:b5:9d:5f:4a:3b:5d:9c:73:
         77:6f:a5:68:c5:c3:af:a3:27:08:85:20:e2:a8:36:5a:a6:1d:
         4c:ae:6e:0a:9e:ef:0c:2f:5d:f7:c5:f6:ae:22:ce:d4:0c:4c:
         38:2d:56:c7:69:e2:5d:f9:7a:2e:31:c7:eb:3e:07:c1:00:7a:
         f7:c2:e0:57:a2:3e:53:0e:c9:d9:10:2e:72:81:b5:6d:98:1f:
         ab:4b:59:1e:f0:a7:08:43:fc:a0:3a:d8:23:49:22:bc:9c:d0:
         21:64:30:22:3c:47:0f:50:39:1a:78:e4:1f:42:49:89:28:75:
         5f:c8:e7:b7:0c:7f:df:38:9f:2c:a3:df:af:cc:30:11:72:ab:
         26:43:10:4f:ff:86:08:8b:78:2d:58:8e:c5:23:47:0c:ca:b2:
         95:93:c0:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:54 2026 by rpki-client