Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
File:                     0VZGo8mstqSyAbtjJqnwB0Ik84c.mft (raw, json)
Hash identifier:          vScuFiy0HDN587JuMLn8jMvlGQulkp2YRyHeZ5pmwFg=
Subject key identifier:   52:4E:E2:7D:9C:CD:39:A2:CA:C8:CE:ED:DE:04:84:1D:B1:5D:5D:D9
Authority key identifier: D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87
Certificate issuer:       /CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
Certificate serial:       019D9999A07CE1C115235123B6751CABFCB8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
Manifest number:          0A57
Signing time:             Fri 17 Apr 2026 04:01:15 +0000
Manifest this update:     Fri 17 Apr 2026 04:01:15 +0000
Manifest next update:     Sat 18 Apr 2026 04:01:15 +0000
Files and hashes:         1: 0VZGo8mstqSyAbtjJqnwB0Ik84c.crl (hash: y/8z684zvdr4SOZ6ccp0tW5suysqVtaEYbL1IL6qA+k=)
                          2: svbZ3xnzSZtEiOKXO_TW25acCTk.roa (hash: opv9wDSI8/zZJZrpAhEN95Q4AkFIV4SP2QjFUJ853yU=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 04:01:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:99:a0:7c:e1:c1:15:23:51:23:b6:75:1c:ab:fc:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d15646a3c9acb6a4b201bb6326a9f0074224f387
        Validity
            Not Before: Apr 17 04:01:15 2026 GMT
            Not After : Apr 18 04:01:15 2026 GMT
        Subject: CN=524ee27d9ccd39a2cac8ceedde04841db15d5dd9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c4:6f:2a:1c:e2:ed:14:79:bc:cc:68:9e:cf:
                    05:7f:78:ca:12:c8:ad:21:6a:d5:c6:88:31:8a:25:
                    25:00:34:e4:a8:eb:73:6a:9a:fb:d9:1a:a2:40:9a:
                    18:aa:8d:af:42:1f:c1:c9:3c:8e:31:30:06:9c:51:
                    3c:48:49:9f:3f:5d:b6:3b:ab:6c:64:55:26:e3:2d:
                    a2:92:76:34:f1:13:3c:c2:c4:93:2a:0a:40:3f:a6:
                    b3:b7:d0:3d:3a:a5:bc:9e:4d:47:a7:80:03:ce:7e:
                    72:c3:2a:af:af:36:d3:fb:c6:71:a7:8c:6d:e5:6c:
                    07:1d:1b:ed:cb:38:97:ea:aa:83:54:39:e0:98:11:
                    ba:cf:f9:59:f2:95:8a:85:b3:08:c1:e1:83:df:4a:
                    6c:0d:51:1a:d5:e8:cf:e9:ce:7b:04:b0:f5:c8:95:
                    56:9b:ce:56:d5:b4:dd:ab:c0:6e:bf:76:10:46:fa:
                    f6:22:98:0e:4c:9d:1d:01:1b:bf:1a:d1:72:24:09:
                    51:07:a5:62:10:5b:0b:1f:69:5e:a7:4e:12:66:fa:
                    eb:ab:9c:49:f7:8c:8e:23:d0:5d:43:d4:b8:0f:bc:
                    c3:f7:2c:e2:fa:d1:7e:37:6c:0c:c5:e7:5e:e9:34:
                    1f:cc:7a:fc:f5:19:ea:37:45:95:84:2d:50:81:0e:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:4E:E2:7D:9C:CD:39:A2:CA:C8:CE:ED:DE:04:84:1D:B1:5D:5D:D9
            X509v3 Authority Key Identifier:
                keyid:D1:56:46:A3:C9:AC:B6:A4:B2:01:BB:63:26:A9:F0:07:42:24:F3:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0VZGo8mstqSyAbtjJqnwB0Ik84c.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/af/50d4d2-cb94-40f5-9bce-90dde85d8fa7/1/0VZGo8mstqSyAbtjJqnwB0Ik84c.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:a2:65:61:94:b9:d7:45:cc:b1:dd:a9:98:c4:6a:3d:79:08:
         9b:29:57:6e:84:28:0e:4f:60:53:d4:c6:f3:61:27:e7:71:de:
         78:cd:0b:b2:47:8c:1e:7d:58:c4:fa:ba:b8:f4:b7:1e:3d:b0:
         d3:f2:31:92:c1:14:f9:b9:60:13:b2:e0:69:d8:66:0a:10:ff:
         df:80:a2:df:59:58:f7:a8:26:54:48:a7:19:cd:4d:82:1b:a3:
         87:ed:51:43:ed:24:6e:b7:9d:16:a5:0a:19:aa:a2:64:b3:82:
         5f:2e:80:18:cb:f7:4c:d8:3d:3d:9b:ed:54:3e:63:95:7b:b9:
         c1:2a:a8:5d:8d:2e:69:41:4f:21:da:19:df:0d:31:cc:7c:67:
         c7:43:a9:29:b0:ba:4e:5f:5d:33:27:21:38:b8:84:df:ae:19:
         31:36:c6:dc:85:cf:d4:de:8e:9f:d2:51:ed:d8:e9:01:8e:4e:
         ea:cf:74:e2:26:0c:ea:ba:35:36:23:8d:ce:c3:aa:56:03:c3:
         59:8f:4d:a3:5d:41:31:81:01:03:66:33:77:71:fd:ca:05:75:
         41:35:41:98:41:eb:e2:91:48:cd:26:c6:0f:55:03:17:e5:b1:
         7f:0f:3e:f4:cd:a2:f0:51:e4:7a:6b:71:92:65:d5:13:21:78:
         65:e4:da:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:57 2026 by rpki-client