Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
File:                     vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft (raw, json)
Hash identifier:          n+z4+enyAzKrlAnZuLC8qiKIbY4F743Ad7PLOEZpmfY=
Subject key identifier:   BF:5C:CC:A8:76:A9:5C:3A:55:99:E7:F2:75:E8:7B:AC:1E:CC:87:18
Authority key identifier: BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA
Certificate issuer:       /CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
Certificate serial:       019D99CFDA55AB4C772152ABE9B136A425EC
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
Manifest number:          0F98
Signing time:             Fri 17 Apr 2026 05:00:29 +0000
Manifest this update:     Fri 17 Apr 2026 05:00:29 +0000
Manifest next update:     Sat 18 Apr 2026 05:00:29 +0000
Files and hashes:         1: vH7rrGITtAP6GmK4LXyxobUcePQ.roa (hash: Wf6Z3W6bIHnyxGibTmjBzRqrlxTUGARmRUFdCoR9nYA=)
                          2: vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl (hash: c7lWr1v3mKSuYGrWv3J3gfJItIZIu/XIMSyh9njyqn8=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 Apr 2026 05:00:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9d:99:cf:da:55:ab:4c:77:21:52:ab:e9:b1:36:a4:25:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be0f8f14f220e93ee34747c4d6dbf1ad35b383fa
        Validity
            Not Before: Apr 17 05:00:29 2026 GMT
            Not After : Apr 18 05:00:29 2026 GMT
        Subject: CN=bf5ccca876a95c3a5599e7f275e87bac1ecc8718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:67:66:be:66:75:ef:8d:b0:ae:0f:86:70:f9:
                    58:8d:fa:2a:82:ce:6b:69:da:b8:e8:bf:de:e4:67:
                    db:fe:59:31:aa:88:af:26:41:8f:42:d6:e6:11:97:
                    42:4a:2a:ea:0c:5b:2d:c8:4d:6b:72:35:97:75:ad:
                    cb:8f:10:68:e5:5b:28:80:ca:08:84:04:ab:f6:10:
                    8e:49:94:db:27:ef:7f:2b:ba:51:8d:6e:a7:a5:82:
                    c6:bd:32:db:2c:67:bc:00:f1:91:a3:66:2b:cd:cf:
                    b9:33:fb:84:55:94:95:d1:c0:e5:f4:82:5c:de:e2:
                    0d:86:a6:bf:0e:5c:6f:1f:24:31:84:f8:48:5f:94:
                    6d:0a:73:a3:8c:04:5b:2e:a0:e4:c8:96:db:74:84:
                    5a:92:11:02:5a:03:87:5d:03:b7:0d:4c:cd:98:45:
                    dd:c1:17:59:ab:fb:cd:9d:8b:8f:b6:98:3a:6a:90:
                    ae:20:7b:5b:b7:72:6e:4f:fe:11:5b:91:41:db:9d:
                    f3:c0:27:f1:f1:41:22:97:73:11:08:27:59:f7:2e:
                    86:12:13:e9:75:89:50:2e:c3:cf:c7:b6:a7:e3:be:
                    5a:57:50:ef:9a:31:b9:6e:6a:18:93:dc:3c:5e:2c:
                    29:32:18:76:bf:97:f9:4c:f1:91:ee:1e:29:05:fd:
                    47:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:5C:CC:A8:76:A9:5C:3A:55:99:E7:F2:75:E8:7B:AC:1E:CC:87:18
            X509v3 Authority Key Identifier:
                keyid:BE:0F:8F:14:F2:20:E9:3E:E3:47:47:C4:D6:DB:F1:AD:35:B3:83:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vg-PFPIg6T7jR0fE1tvxrTWzg_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/faf4ea-a50a-40e0-8abd-b0c60464df06/1/vg-PFPIg6T7jR0fE1tvxrTWzg_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:6b:ac:b0:bc:41:57:5f:07:69:f3:ff:b2:71:6e:15:10:b7:
         a6:31:f5:d9:fe:d2:61:c0:90:ed:e2:87:1c:3d:9d:7b:17:e1:
         7e:99:e4:c2:29:8c:f6:dd:4e:fb:22:7e:20:fc:2f:3c:c6:03:
         2c:53:88:50:c1:75:b0:78:b0:ea:07:74:62:cc:b3:57:43:90:
         7e:27:fc:cb:05:df:85:e8:82:a4:fa:d2:3a:0f:a6:95:e0:f5:
         17:95:0c:6a:cf:75:f7:a8:52:7d:59:37:89:44:f2:f3:ca:f5:
         ba:7a:b0:22:98:3d:b2:05:f3:a4:3d:d6:98:c3:11:71:fb:af:
         b5:38:ae:f2:57:cc:38:f8:24:c2:fc:65:02:1a:72:b9:1e:e1:
         6a:fc:f9:e2:c9:4e:c8:3e:78:11:1d:77:b0:5e:19:04:64:ef:
         62:c1:1b:ef:a2:0a:85:77:5a:a3:6a:f5:e5:e6:8b:d4:e7:cf:
         f4:1a:5e:af:24:87:dc:11:b0:ed:49:cc:22:2c:8c:05:77:9d:
         9d:1e:84:f9:4d:a8:61:17:f8:dd:29:ec:d8:95:a6:ac:31:ab:
         2e:79:54:a0:3e:dc:21:b5:19:0a:2a:08:86:a0:9d:dc:e8:7c:
         44:40:34:26:8c:07:c7:60:84:df:c7:88:5e:b7:9b:64:5a:39:
         d1:4f:ac:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:22 2026 by rpki-client